Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/655b35a7-a532-4ceb-aa02-4a8192e6449d?source=cve - https://plugins.trac.wordpress.org/browser/svs-pricing-tables/trunk/app/model/svs_pt_model_main.php#L61
CVE ID: CVE-2024-2959 State: PUBLISHED Published: 2024-05-02T16:52:14.997Z Last Updated: 2024-08-01T19:32:42.255Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: svs-websoft Products: SVS Pricing Tables Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The SVS Pricing Tables plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on the savePricingTable() function. This makes it possible for unauthenticated attackers to create and edit pricing tables via a forged request granted they can trick a site administrator into performing an
s to create and edit pricing tables via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/78af081a-807b-48c8-82cd-f87fbef0fbe6?source=cve - https://plugins.trac.wordpress.org/browser/svs-pricing-tables/trunk/app/model/svs_pt_model_main.php#L61
CVE ID: CVE-2024-2960 State: PUBLISHED Published: 2024-05-02T16:52:48.704Z Last Updated: 2024-08-01T19:32:42.229Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: svs-websoft Products: SVS Pricing Tables Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The SVS Pricing Tables plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on the deletePricingTable() function. This makes it possible for unauthenticated attackers to delete pricing tables via a forged request granted they can trick a site administrator into performing an action
ers to delete pricing tables via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e7a24213-5191-4b6d-a2d1-7b79729e6517?source=cve - https://plugins.trac.wordpress.org/browser/svs-pricing-tables/trunk/app/model/svs_pt_model_main.php#L91
CVE ID: CVE-2024-2961 State: PUBLISHED Published: 2024-04-17T17:27:40.541Z Last Updated: 2025-10-30T03:55:59.233Z Vendors: The GNU C Library Products: glibc Problem Types: CWE-787 Description: The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004 - https://lists.fedoraproject.org/archives/list/package-announce@list
p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/ - http://www.openwall.com/lists/oss-security/2024/04/24/2 - http://www.openwall.com/lists/oss-security/2024/04/17/9 - http://www.openwall.com/lists/oss-security/2024/04/18/4 - https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html - http://www.
l.com/lists/oss-security/2024/04/18/4 - https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html - http://www.openwall.com/lists/oss-security/2024/05/27/2 - http://www.openwall.com/lists/oss-security/2024/05/27/6 - http://www.openwall.com/lists/oss-security/2024/05/27/1 - http://www.openwall.com/lists/oss-security/2024/05/27/4 - http://www.openwall.com/lists/oss-security/2024/05/27/5 - http://www.openwall.com/lists/oss-security/2024/05/27/3 - https://security.netapp.com/advisory/ntap-20240531-0002/ - http://www.openwall.com/lists/oss-security/2024/07/22/5
CVE ID: CVE-2024-2962 State: PUBLISHED Published: 2024-03-27T08:31:14.428Z Last Updated: 2024-08-02T15:37:52.379Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: codesupplyco Products: Networker - Tech News WordPress Theme with Dark Mode Problem Types: CWE-862 Missing Authorization Description: The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_reload_nav_menu() function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to modify the location of display menus. Additional Analyst Notes: - C
s makes it possible for unauthenticated attackers to modify the location of display menus. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1c2b9858-eb0c-42bd-bc32-c58c0f809fc8?source=cve - https://gist.github.com/Xib3rR4dAr/f5f5d07263fdac28b6e9ba2f6c4e4523 - https://gist.github.com/Xib3rR4dAr/ab293092ffcfe3c14a3c7daf5462a50b
CVE ID: CVE-2024-2963 State: PUBLISHED Published: 2024-03-29T06:43:56.673Z Last Updated: 2024-08-01T19:32:42.447Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: marubon Products: Pocket News Generator Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Pocket News Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings such as "Consumer Key" and "Access Token" in all versions up to, and including, 0.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permission
anitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2c8a487c-6bd5-480a-9945-ba465b38243f?source=cve - https://plugins.trac.wordpress.org/browser/pocket-news-generator/trunk/pocket-news-generator.php#L77
CVE ID: CVE-2024-2964 State: PUBLISHED Published: 2024-03-29T06:44:02.175Z Last Updated: 2024-08-01T19:32:42.682Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: marubon Products: Pocket News Generator Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Pocket News Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.0. This is due to missing or incorrect nonce validation on the option_page() function. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an actio
o update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9fe7f4e4-3774-408b-8a2a-0db67bc34fcf?source=cve - https://plugins.trac.wordpress.org/browser/pocket-news-generator/trunk/pocket-news-generator.php#L77
CVE ID: CVE-2024-2965 State: PUBLISHED Published: 2024-06-06T18:52:54.353Z Last Updated: 2025-10-15T12:50:22.559Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: langchain-ai Products: langchain-ai/langchain Problem Types: CWE-674 Description: A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langchain-ai/langchain` repository, affecting all versions. The `parse_sitemap` method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap itself. This oversight allows for the possibility of an infinite loop, leading to a crash by exceed
the current sitemap itself. This oversight allows for the possibility of an infinite loop, leading to a crash by exceeding the maximum recursion depth in Python. This vulnerability can be exploited to occupy server socket/port resources and crash the Python process, impacting the availability of services relying on this functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/90b0776d-9fa6-4841-aac4-09fde5918cae - https://github.com/langchain-ai/langchain/commit/73c42306745b0831aa6fe7fe4eeb70d2c2d87a82
CVE ID: CVE-2024-2966 State: PUBLISHED Published: 2024-04-11T07:31:36.278Z Last Updated: 2024-08-01T19:32:42.315Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: bdthemes Products: Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) Problem Types: CWE-200 Information Exposure Description: The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.5.6 via the element_pack_ajax_search function. This makes it possible for unauthenticated attackers to extr
including, 5.5.6 via the element_pack_ajax_search function. This makes it possible for unauthenticated attackers to extract sensitive data including password protected post details. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/39e0fd33-4071-4510-a7d5-b499a8a3543c?source=cve - https://plugins.trac.wordpress.org/changeset/3066178/bdthemes-element-pack-lite
CVE ID: CVE-2024-2967 State: PUBLISHED Published: 2024-05-02T16:52:19.291Z Last Updated: 2024-08-01T19:32:42.459Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: aharonyan Products: Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output escapi
g via form settings in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/82eb759f-e8d5-40c6-998f-f6981d9d6644?source=cve - https://wordpress.org/plugins/front-editor/
CVE ID: CVE-2024-2968 State: PUBLISHED Published: 2024-03-29T06:43:56.023Z Last Updated: 2024-08-01T19:32:42.502Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: backie Products: WP-Eggdrop Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP-Eggdrop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will exe
icated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/21238925-b87c-43ea-b4ab-9b5d311d3a0a?source=cve - https://plugins.trac.wordpress.org/browser/wp-eggdrop/trunk/wp-eggdrop.php#L215
CVE ID: CVE-2024-2969 State: PUBLISHED Published: 2024-03-29T06:43:57.155Z Last Updated: 2024-08-01T19:32:42.428Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: backie Products: WP-Eggdrop Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WP-Eggdrop plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1. This is due to missing or incorrect nonce validation on the wpegg_updateOptions() function. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clickin
in's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2cd509f7-100a-4f28-8d5a-b6b906456c52?source=cve - https://plugins.trac.wordpress.org/browser/wp-eggdrop/trunk/wp-eggdrop.php#L215
CVE ID: CVE-2024-2970 State: PUBLISHED Published: 2024-03-29T06:43:57.638Z Last Updated: 2024-08-01T19:32:42.496Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: tsina Products: News Wall Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The News Wall plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the nwap_newslist_page() function. This makes it possible for unauthenticated attackers to update the plugin's settings and modify news lists via a forged request granted they can trick a site administrator into performing an ac
's settings and modify news lists via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/37331460-4585-4946-9256-64fdb8f02a6b?source=cve - https://plugins.trac.wordpress.org/browser/news-wall/trunk/plugin-panel.php
CVE ID: CVE-2024-2971 State: PUBLISHED Published: 2024-03-26T21:31:43.511Z Last Updated: 2024-08-06T15:22:59.533Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Xpdf Products: Xpdf Problem Types: CWE-787 Description: Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.xpdfreader.com/security-bug/CVE-2024-2971.html
CVE ID: CVE-2024-2972 State: PUBLISHED Published: 2024-04-24T05:00:02.929Z Last Updated: 2025-03-27T17:48:58.687Z Vendors: Unknown Products: Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button WordPress plugin before 3.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite s
m Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/27134a4f-a59b-40e9-8fc8-abe1f58672ad/
CVE ID: CVE-2024-2973 State: PUBLISHED Published: 2024-06-27T20:17:50.239Z Last Updated: 2024-08-01T19:32:42.563Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Juniper Networks Products: Session Smart Router, Session Smart Conductor, WAN Assurance Router Problem Types: CWE-288 Description: An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device. Only routers or conductors that are running in high-availability redundant configurations are affected by this vulnerabi
Only routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability. No other Juniper Networks products or platforms are affected by this issue. This issue affects: Session Smart Router: * All versions before 5.6.15, * from 6.0 before 6.1.9-lts, * from 6.2 before 6.2.5-sts. Session Smart Conductor: * All versions before 5.6.15, * from 6.0 before 6.1.9-lts, * from 6.2 before 6.2.5-sts. WAN Assurance Router: * 6.0 versions before 6.1.9-lts, * 6.2 versions before 6.2.5-sts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://supportportal.juniper.net/JSA83126 - https://support.juniper.net/supp
nt: - CVE Program Container: References: - https://supportportal.juniper.net/JSA83126 - https://support.juniper.net/support/eol/software/ssr/
CVE ID: CVE-2024-2974 State: PUBLISHED Published: 2024-04-09T18:59:00.562Z Last Updated: 2024-08-01T19:32:42.482Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: wpdevteam Products: Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders Problem Types: CWE-200 Information Exposure Description: The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 5.9.13 via the load_more function. This can allow unauthenticated attackers to extract sensitive data including private and draf
ia the load_more function. This can allow unauthenticated attackers to extract sensitive data including private and draft posts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/78f96d7f-aeca-4959-9573-0fb6402de007?source=cve - https://plugins.trac.wordpress.org/changeset/3060417/essential-addons-for-elementor-lite/tags/5.9.14/includes/Traits/Ajax_Handler.php
CVE ID: CVE-2024-2975 State: PUBLISHED Published: 2024-04-09T01:02:46.880Z Last Updated: 2024-09-19T04:48:32.065Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Octopus Deploy Products: Octopus Server Problem Types: Race condition could lead to privilege escalation Description: A race condition was identified through which privilege escalation was possible in certain configurations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://advisories.octopus.com/post/2024/sa2024-01/
CVE ID: CVE-2024-2976 State: PUBLISHED Published: 2024-03-27T13:31:04.472Z Last Updated: 2024-08-21T14:56:30.998Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: F1203 Problem Types: CWE-121 Description: A vulnerability was found in Tenda F1203 2.0.1.6. It has been declared as critical. Affected by this vulnerability is the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258145 was assigned to this vulnerability. NOTE: The vendor was contacted early about
nd may be used. The identifier VDB-258145 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.258145 - https://vuldb.com/?ctiid.258145 - https://vuldb.com/?submit.300997 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/F/F1203/R7WebsSecurityHandler.md
CVE ID: CVE-2024-2977 State: PUBLISHED Published: 2024-03-27T13:31:06.045Z Last Updated: 2024-08-12T15:44:08.153Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: F1203 Problem Types: CWE-121 Description: A vulnerability was found in Tenda F1203 2.0.1.6. It has been rated as critical. Affected by this issue is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-258146 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosur
. VDB-258146 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.258146 - https://vuldb.com/?ctiid.258146 - https://vuldb.com/?submit.301028 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/F/F1203/formQuickIndex.md
CVE ID: CVE-2024-2978 State: PUBLISHED Published: 2024-03-27T14:00:08.437Z Last Updated: 2025-04-10T18:27:28.444Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: F1203 Problem Types: CWE-121 Description: A vulnerability classified as critical has been found in Tenda F1203 2.0.1.6. This affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258147. NOTE: The vendor was contacted early about this disclosure but did not r
identifier of this vulnerability is VDB-258147. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.258147 - https://vuldb.com/?ctiid.258147 - https://vuldb.com/?submit.301029 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/F/F1203/formSetCfm.md