Search vulnerabilities

Expected end of text, found '/' (at char 32), (line:1, col:33)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,826

CVE-2023-49430

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49429

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49428

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49426

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49425

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49424

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49411

Tenda W30E V16.01.0.12(4843) contains a stack overflow vulnerability via the function formDeleteMeshNode.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-49410

Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-49409

Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Tenda
Products
Ax3 Ax3 Firmware
CVE-2023-49408

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax3 Ax3 Firmware
CVE-2023-49406

Tenda W30E V16.01.0.12(4843) was discovered to contain a Command Execution vulnerability via the function /goform/telnet.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-49405

Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function UploadCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-49403

Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setFixTools.

CVSS 3.1 · 9.8 Critical EPSS 2.2% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-49402

Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-49398

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2023-49397

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2023-49396

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2023-49395

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF component via crafted NGAP message.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Free5gc
Products
Free5gc