Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ux.git/commit/?id=f9d87929d451d3e649699d0f1d74f71f77ad38f5 - https://www.openwall.com/lists/oss-security/2022/01/29/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSR3AI2IQGRKZCHNKF6S25JGDKUEAWWL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVSZKUJAZ2VN6LJ35J2B6YD6BOPQTU3B/ - https://security.netapp.com/advisory/ntap-20220221-0001/
CVE ID: CVE-2022-24123 State: PUBLISHED Published: 2022-01-29T22:53:16 Last Updated: 2024-08-03T03:59:23.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: MarkText through 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md file containing a mutation Cross-Site Scripting (XSS) payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/marktext/marktext/issues/2946 - https://github.com/marktext/marktext/pull/2947
CVE ID: CVE-2022-24124 State: PUBLISHED Published: 2022-01-29T22:53:01 Last Updated: 2024-08-03T03:59:23.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/casdoor/casdoor/issues/439 - https://github.com/casdoor/casdoor/pull/442 - https://github.com/casdoor/casdoor/compare/v1.13.0...v1.13.1 - http://packetstormsecurity.com/files/166163/Casdoor-1.13.0-SQL-Injection.html
CVE ID: CVE-2022-24125 State: PUBLISHED Published: 2022-03-20T00:03:47 Last Updated: 2024-08-03T03:59:24.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The matchmaking servers of Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allow remote attackers to send arbitrary push requests to clients via a RequestSendMessageToPlayers request. For example, ability to send a push message to hundreds of thousands of machines is only restricted on the client side, and can thus be bypassed with a modified client. Additional Analyst Notes: - CVE Program Container: References: - https://fromsoftware.jp - https://github.com/tremwil/ds3-nrssr-rce
CVE ID: CVE-2022-24126 State: PUBLISHED Published: 2022-03-19T23:54:31 Last Updated: 2024-08-03T03:59:23.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to execute arbitrary code via matchmaking servers, a different vulnerability than CVE-2021-34170. Additional Analyst Notes: - CVE Program Container: References: - https://fromsoftware.jp - https://github.com/tremwil/ds3-nrssr-rce
CVE ID: CVE-2022-24127 State: PUBLISHED Published: 2022-06-15T18:16:28 Last Updated: 2024-08-03T03:59:23.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross-Site Scripting (XSS) vulnerability was discovered in ProjectGeneral/edit_project_settings.php in REDCap 12.0.11. This issue allows any user with project management permissions to inject arbitrary code into the project title (app_title) field when editing an existing project. The payload is then reflected within the title tag of the page. Additional Analyst Notes: - CVE Program Container: References: - https://www.evms.edu/research/resources_services/redcap/redcap_change_log/ - https://labs.nettitude.com/blog/cv
ences: - https://www.evms.edu/research/resources_services/redcap/redcap_change_log/ - https://labs.nettitude.com/blog/cve-2022-24004-cve-2022-24127-vanderbilt-redcap-stored-cross-site-scripting/
CVE ID: CVE-2022-24128 State: PUBLISHED Published: 2022-03-13T00:00:00 Last Updated: 2024-08-03T03:59:23.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension installation. The installation process uses commands such as CREATE x IF NOT EXIST that allow an unprivileged user to precreate objects. These objects will be used by the installer (which executes as Superuser), leading to privilege escalation. In order to be able to take advantage of this, an unprivileged user would need to be able to create objects in a database and then get a Superuser to install TimescaleDB into their database.
ld need to be able to create objects in a database and then get a Superuser to install TimescaleDB into their database. (In the fixed versions, the installation aborts when it finds that an object already exists.) Additional Analyst Notes: - CVE Program Container: References: - https://docs.timescale.com/timescaledb/latest/overview/release-notes/ - https://github.com/timescale/timescaledb/security/advisories/GHSA-fh8v-663w-79w9 - https://github.com/timescale/timescaledb/commit/6275c2985927cfd4900b85cac5120227c8cb1f0c - https://github.com/timescale/timescaledb/commit/c8b8516e466c2bb7d2ae6a4b0b2e8e60b24b24a2
CVE ID: CVE-2022-24129 State: PUBLISHED Published: 2022-02-04T19:20:46 Last Updated: 2024-08-03T03:59:23.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter. This allows attackers to interact with arbitrary third-party HTTP services. Additional Analyst Notes: - CVE Program Container: References: - http://shibboleth.net/community/advisories/ - http://shibboleth.net/community/advisories/secadv_20220131.txt - https://github.com/sbaresearch/advisories/tree/public/2022/SBA-ADV-20220127-01_Shibboleth_IdP_OIDC_OP_Plugin_S
131.txt - https://github.com/sbaresearch/advisories/tree/public/2022/SBA-ADV-20220127-01_Shibboleth_IdP_OIDC_OP_Plugin_SSRF
CVE ID: CVE-2022-24130 State: PUBLISHED Published: 2022-01-31T05:01:06 Last Updated: 2024-08-03T03:59:23.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/nickblack/status/1487731459398025216 - https://www.openwall.com/lists/oss-security/2022/01/30/2 - https://www.openwall.com/lists/oss-security/2022/01/30/3 - https://invisible-island.net/xterm/xterm.log.html - https://lists.debian.org/debian-lts-announce/2022/02/msg00007.html - https://lists.f
e-island.net/xterm/xterm.log.html - https://lists.debian.org/debian-lts-announce/2022/02/msg00007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP5Y4O7WBNLV24D22E6LE7RQFYOUVD2U/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4CWYYEBT6AJRJBBQU2KLUOQDHRM7WAV/ - https://security.gentoo.org/glsa/202208-22
CVE ID: CVE-2022-24131 State: PUBLISHED Published: 2022-03-30T11:49:55 Last Updated: 2024-08-03T04:07:01.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaScript code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zpxlz/douphp
CVE ID: CVE-2022-24132 State: PUBLISHED Published: 2022-03-30T17:11:59 Last Updated: 2024-08-03T04:07:01.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpshe V1.8 is affected by a denial of service (DoS) attack in the registry's verification code, which can paralyze the target service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zpxlz/phpshe/
CVE ID: CVE-2022-24135 State: PUBLISHED Published: 2022-03-30T18:01:37 Last Updated: 2024-08-03T04:07:01.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: QingScan 1.3.0 is affected by Cross Site Scripting (XSS) vulnerability in all search functions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/78778443/QingScan/issues/17
CVE ID: CVE-2022-24136 State: PUBLISHED Published: 2022-03-31T10:27:18 Last Updated: 2024-08-03T04:07:01.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kabirkhyrul/HMS/discussions/6
CVE ID: CVE-2022-24138 State: PUBLISHED Published: 2022-07-06T12:41:26 Last Updated: 2024-08-03T04:07:01.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has "rwx" permissions for unprivileged users. Low privilege users can use SetOpLock to wait for CreateProcess and switch the genuine component with a malicious executable thus gaining code execution as a high privilege user (Low Privilege -> high integrity ADMIN). Additional Analyst Notes: - CVE Program Container: References: - http://advanced.com - http://iobit.com - https://g
IN). Additional Analyst Notes: - CVE Program Container: References: - http://advanced.com - http://iobit.com - https://github.com/tomerpeled92/CVE/
CVE ID: CVE-2022-24139 State: PUBLISHED Published: 2022-07-06T12:41:32 Last Updated: 2024-08-03T04:07:01.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IOBit Advanced System Care (AscService.exe) 15, an attacker with SEImpersonatePrivilege can create a named pipe with the same name as one of ASCService's named pipes. ASCService first tries to connect before trying to create the named pipes, because of that during login the service will try to connect to the attacker which will lead to either escalation of privileges (through token manipulation and ImpersonateNamedPipeClient() ) from ADMIN -> SYSTEM or from Local ADMIN-> Domain ADMIN depending on the user and named pipe th
onateNamedPipeClient() ) from ADMIN -> SYSTEM or from Local ADMIN-> Domain ADMIN depending on the user and named pipe that is used. Additional Analyst Notes: - CVE Program Container: References: - http://advanced.com - http://iobit.com - https://github.com/tomerpeled92/CVE/
CVE ID: CVE-2022-24140 State: PUBLISHED Published: 2022-07-06T12:41:42 Last Updated: 2024-08-03T04:07:00.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP requests in their update procedure in order to download a config file. After downloading the config file, the products will parse the HTTP location of the update from the file and will try to install the update automatically with ADMIN privileges. An attacker Intercepting this communication can supply the product a fake config file with malicious locations for the updates thus gaining a remote code execution
can supply the product a fake config file with malicious locations for the updates thus gaining a remote code execution on an endpoint. Additional Analyst Notes: - CVE Program Container: References: - http://advanced.com - http://iobit.com - https://github.com/tomerpeled92/CVE/
CVE ID: CVE-2022-24141 State: PUBLISHED Published: 2022-07-06T12:41:49 Last Updated: 2024-08-03T04:07:01.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop. An attacker that opened a named pipe with the same name can use it to gain the token of another user by listening for connections and abusing ImpersonateNamedPipeClient(). Additional Analyst Notes: - CVE Program Container: References: - http://iobit.com - http://itop.com - https://github.com/tomerpeled92/CVE/
CVE ID: CVE-2022-24142 State: PUBLISHED Published: 2022-02-04T01:33:26 Last Updated: 2024-08-03T04:07:01.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetFirewallCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the firewallEn parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_22/22.md
CVE ID: CVE-2022-24143 State: PUBLISHED Published: 2022-02-04T01:33:25 Last Updated: 2024-08-03T04:07:01.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN and AX12 22.03.01.2_CN was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZone parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_17/17.md
CVE ID: CVE-2022-24144 State: PUBLISHED Published: 2022-02-04T01:33:25 Last Updated: 2024-08-03T04:07:01.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/tree/main/Tenda/vuln_13
CVE ID: CVE-2022-24145 State: PUBLISHED Published: 2022-02-04T01:33:22 Last Updated: 2024-08-03T04:07:01.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formWifiBasicSet. This vulnerability allows attackers to cause a Denial of Service (DoS) via the security and security_5g parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_19/19.md
CVE ID: CVE-2022-24146 State: PUBLISHED Published: 2022-02-04T01:33:22 Last Updated: 2024-08-03T04:07:01.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_16/16.md
CVE ID: CVE-2022-24147 State: PUBLISHED Published: 2022-02-04T01:33:21 Last Updated: 2024-08-03T04:07:01.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_18/18.md
CVE ID: CVE-2022-24148 State: PUBLISHED Published: 2022-02-04T01:33:20 Last Updated: 2024-08-03T04:07:01.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg. This vulnerability allows attackers to execute arbitrary commands via the dmzIp parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_14/14.md
CVE ID: CVE-2022-24149 State: PUBLISHED Published: 2022-02-04T01:33:20 Last Updated: 2024-08-03T04:07:01.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wpapsk_crypto parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_20/20.md
CVE ID: CVE-2022-24150 State: PUBLISHED Published: 2022-02-04T01:33:17 Last Updated: 2024-08-03T04:07:00.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_15/15.md
CVE ID: CVE-2022-24151 State: PUBLISHED Published: 2022-02-04T01:33:17 Last Updated: 2024-08-03T04:07:02.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWifiGusetBasic. This vulnerability allows attackers to cause a Denial of Service (DoS) via the shareSpeed parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_21/21.md
CVE ID: CVE-2022-24152 State: PUBLISHED Published: 2022-02-04T01:33:16 Last Updated: 2024-08-03T04:07:01.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetRouteStatic. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_33/33.md
CVE ID: CVE-2022-24153 State: PUBLISHED Published: 2022-02-04T01:33:15 Last Updated: 2024-08-03T04:07:01.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_34/34.md
CVE ID: CVE-2022-24154 State: PUBLISHED Published: 2022-02-04T01:33:15 Last Updated: 2024-08-03T04:07:01.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetRebootTimer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the rebootTime parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_30/30.md
CVE ID: CVE-2022-24155 State: PUBLISHED Published: 2022-02-04T01:33:14 Last Updated: 2024-08-03T04:07:01.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the schedStartTime and schedEndTime parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_25/25.md
CVE ID: CVE-2022-24156 State: PUBLISHED Published: 2022-02-04T01:33:13 Last Updated: 2024-08-03T04:07:01.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_29/29.md
CVE ID: CVE-2022-24157 State: PUBLISHED Published: 2022-02-04T01:33:12 Last Updated: 2024-08-03T04:07:01.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilterCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceList parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_31/31.md
CVE ID: CVE-2022-24158 State: PUBLISHED Published: 2022-02-04T01:33:11 Last Updated: 2024-08-03T04:07:01.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_23/23.md
CVE ID: CVE-2022-24159 State: PUBLISHED Published: 2022-02-04T01:33:08 Last Updated: 2024-08-03T04:07:01.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the startIp and endIp parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_28/28.md
CVE ID: CVE-2022-24160 State: PUBLISHED Published: 2022-02-04T01:33:06 Last Updated: 2024-08-03T04:07:01.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_32/32.md
CVE ID: CVE-2022-24161 State: PUBLISHED Published: 2022-02-04T01:33:06 Last Updated: 2024-08-03T04:07:01.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mac parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_26/26.md
CVE ID: CVE-2022-24162 State: PUBLISHED Published: 2022-02-04T01:33:08 Last Updated: 2024-08-03T04:07:01.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_27/27.md
CVE ID: CVE-2022-24163 State: PUBLISHED Published: 2022-02-04T01:33:03 Last Updated: 2024-08-03T04:07:01.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZone parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/tree/main/Tenda/vuln_24
CVE ID: CVE-2022-24164 State: PUBLISHED Published: 2022-02-04T01:33:04 Last Updated: 2024-08-03T04:07:02.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsHijackRule parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_40/40.md
CVE ID: CVE-2022-24165 State: PUBLISHED Published: 2022-02-04T01:33:02 Last Updated: 2024-08-03T04:07:01.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetQvlanList. This vulnerability allows attackers to execute arbitrary commands via the qvlanIP parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_38/38.md