Search vulnerabilities

Expected end of text, found '/' (at char 31), (line:1, col:32)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,959

CVE-2022-25428

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25427

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25420

NTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerable to CLRF injection. This vulnerability allows attackers to execute arbitrary code via a crafted HTTP request.

CVSS 3.1 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Nttr
Products
Goo Blog
CVE-2022-25418

Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25417

Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25414

Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR.

CVSS 3.1 · 9.8 Critical EPSS 10.4% KEV · Not listed
Vendors
Tenda
Products
Ac9 Ac9 Firmware
CVE-2022-25413

Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Max-3000
Products
Maxsite Cms
CVE-2022-25412

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters.

CVSS 3.1 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Max-3000
Products
Maxsite Cms
CVE-2022-25411

A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Max-3000
Products
Maxsite Cms
CVE-2022-25410

Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Max-3000
Products
Maxsite Cms
CVE-2022-25406

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete_query.php via the DELETE_STR parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Tongda2000
Products
Tongda2000
CVE-2022-25405

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via the DELETE_STR parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Tongda2000
Products
Tongda2000
CVE-2022-25404

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETE_STR parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Tongda2000
Products
Tongda2000
CVE-2022-25401

The copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the current directory, granting attackers read access to arbitrary files.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Cuppacms
Products
Cuppacms