rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-45916 SUN & MOON RISE CO., LTD. Shockwall - Improper Input Validation
The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: SUN & MOON RISE CO., LTD.
product: Shockwall
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2022-01-03T10:10:20.373Z
CVE-2021-45917 SUN & MOON RISE CO., LTD. Shockwall - Improper Authentication
The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery (SSRF) attack on another agent computer, resulting in arbitrary code execution for controlling the system or disrupting service.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: SUN & MOON RISE CO., LTD.
product: Shockwall
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-01-03T10:10:21.764Z
CVE-2021-45918 NHI’s health insurance web service component – Heap-based Buffer Overflow
NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without authentication, which requires a system restart to recover service.
Problem types: cwe_id: CWE-122
description: CWE-122 Heap-based Buffer Overflow
Affected products: vendor: NHI
product: health insurance web service component
vendor: NHI
product: health insurance web service component
vendor: NHI
product: health insurance web service component
vendor: NHI
product: health insurance web service component
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Yu-Hsiang Lin
Published: 2022-06-20T05:30:26.758Z
CVE-2021-45919 
Studio 42 elFinder through 2.1.31 allows XSS via an SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-08T22:27:21.000Z
CVE-2021-45925 Username Enumeration
Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Problem types: cwe_id: CWE-203
description: CWE-203 Information Exposure Through Discrepancy
Affected products: vendor: Lanner Inc
product: IAC-AST2500A
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
Credits: lang: en
value: Andrea Palanca of Nozomi Networks found this bug during a security research activity.
Published: 2022-10-24T00:00:00.000Z
CVE-2021-45926 
MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:59:25.000Z
CVE-2021-45927 
MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd6e029ee0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:59:16.000Z
CVE-2021-45928 
libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallState<jxl::FrameDecoder::ProcessSections).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:59:08.000Z
CVE-2021-45929 
Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from CompileElseBlock and Compile_If).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:51:45.000Z
CVE-2021-45930 
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T00:00:00.000Z
CVE-2021-45931 
HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_set_copy).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:58:49.000Z
CVE-2021-45932 
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:58:39.000Z
CVE-2021-45933 
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:58:30.000Z
CVE-2021-45934 
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_HandlePacket and MqttClient_WaitType).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:58:22.000Z
CVE-2021-45935 
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (called from std::__1::__packaged_task_func<std::__1::__bind<grk::T1DecompressScheduler::deco and std::__1::packaged_task<int).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:58:13.000Z
CVE-2021-45936 
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and MqttClient_WaitType).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:57:59.000Z
CVE-2021-45937 
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Connect).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:57:49.000Z
CVE-2021-45938 
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Unsubscribe).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:57:41.000Z
CVE-2021-45939 
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Subscribe).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:57:33.000Z
CVE-2021-45940 
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:57:22.000Z
CVE-2021-45941 
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (8 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:57:14.000Z
CVE-2021-45942 
OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). NOTE: db217f2 may be inapplicable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T00:00:00.000Z
CVE-2021-45943 
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T00:00:00.000Z
CVE-2021-45944 
Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:56:27.000Z
CVE-2021-45946 
Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from Compile_LoopOrBlock and CompileBlockStatements).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:51:57.000Z
CVE-2021-45947 
Wasm3 0.5.0 has an out-of-bounds write in Runtime_Release (called from EvaluateExpression and InitDataSegments).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:55:01.000Z
CVE-2021-45948 
Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper::M3DWrapper).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T00:00:00.000Z
CVE-2021-45949 
Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:54:37.000Z
CVE-2021-45950 
LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:54:21.000Z
CVE-2021-45951 
Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:54:10.000Z
CVE-2021-45952 
Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:53:59.000Z
CVE-2021-45953 
Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:52:10.000Z
CVE-2021-45954 
Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:53:51.000Z
CVE-2021-45955 
Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge." However, a contributor states that a security patch (mentioned in 016162.html) is needed
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:53:42.000Z
CVE-2021-45956 
Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:53:34.000Z
CVE-2021-45957 
Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:53:25.000Z
CVE-2021-45958 
UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-31T23:52:45.000Z
CVE-2021-45960 
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-01T18:47:46.000Z
CVE-2021-45966 
An issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, /services/apply in exd.pl allows remote attackers to execute arbitrary code via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T05:00:09.000Z
CVE-2021-45967 
An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server, exposing unintended endpoints.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T05:00:35.000Z
CVE-2021-45968 
An issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Phone System before 7.20.x (and in other products). An endpoint in the backend Tomcat server of the Pascom allows SSRF, a related issue to CVE-2019-18394.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T04:56:37.000Z
CVE-2021-45969 
An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the CommBuffer+8 location).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-05T23:00:28.000Z
CVE-2021-45970 
An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the status code saved at the CommBuffer+4 location).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-05T22:59:10.000Z
CVE-2021-45971 
An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (CommBufferData).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-05T23:09:47.000Z
CVE-2021-45972 
The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-01T20:36:57.000Z
CVE-2021-45975 
In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-26T14:59:34.000Z
CVE-2021-45977 
JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T14:36:13.000Z
CVE-2021-45978 
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-04T14:30:21.000Z
CVE-2021-45979 
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-04T14:31:34.000Z
CVE-2021-45980 
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the JavaScript API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-04T14:32:50.000Z
CVE-2021-45981 
NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-02T17:40:17.000Z
CVE-2021-45982 
NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-02T17:40:23.000Z
CVE-2021-45983 
NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-02T17:40:31.000Z
CVE-2021-45985 
In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-10T00:00:00.000Z
CVE-2021-45986 
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:50.000Z
CVE-2021-45987 
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:48.000Z
CVE-2021-45988 
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsForwardRule parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:47.000Z
CVE-2021-45989 
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerability allows attackers to cause a Denial of Service (DoS) via the qosGuestUpstream and qosGuestDownstream parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:46.000Z
CVE-2021-45990 
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the pic_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:46.000Z
CVE-2021-45991 
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service (DoS) via the vpnUsers parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:45.000Z
CVE-2021-45992 
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetQvlanList. This vulnerability allows attackers to cause a Denial of Service (DoS) via the qvlanName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:44.000Z
CVE-2021-45993 
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindModify. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IPMacBindRuleIP and IPMacBindRuleMac parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:41.000Z
CVE-2021-45994 
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the delDhcpIndex parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:41.000Z
CVE-2021-45995 
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetStaticRoute. This vulnerability allows attackers to cause a Denial of Service (DoS) via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:40.000Z
CVE-2021-45996 
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service (DoS) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:40.000Z