Search vulnerabilities

Expected end of text, found ':' (at char 31), (line:1, col:32)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,865

CVE-2022-25437

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25435

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25434

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function.

CVSS 3.1 · 9.8 Critical EPSS 9.1% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25433

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25431

Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25429

Tenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the saveparentcontrolinfo function.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25428

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25427

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25420

NTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerable to CLRF injection. This vulnerability allows attackers to execute arbitrary code via a crafted HTTP request.

CVSS 3.1 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Nttr
Products
Goo Blog
CVE-2022-25418

Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25417

Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25414

Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR.

CVSS 3.1 · 9.8 Critical EPSS 10.4% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25413

Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Max-3000
Products
Maxsite Cms
CVE-2022-25412

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters.

CVSS 3.1 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Max-3000
Products
Maxsite Cms
CVE-2022-25411

A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Max-3000
Products
Maxsite Cms
CVE-2022-25410

Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Max-3000
Products
Maxsite Cms
CVE-2022-25406

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete_query.php via the DELETE_STR parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Tongda2000
Products
Tongda2000