Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior
Críticas / altas1381▼ 36 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior
124 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (4.3) | 0.41% | — | Tenda Ac18 Firmware | 17/3/2024 | 17/6/2026 | A vulnerability classified as problematic was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function fromSysToolRestoreSet of the file /goform/SysToolRestoreSet. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the… | |
| Analizada | Media (6.5) | 0.31% | — | Tenda Ac18 Firmware | 17/3/2024 | 17/6/2026 | A vulnerability classified as problematic has been found in Tenda AC18 15.03.05.05. Affected is the function fromSysToolReboot of the file /goform/SysToolReboot. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be… | |
| Analizada | Alta (8.8) | 1.3% | — | Tenda Ac18 Firmware | 17/3/2024 | 17/6/2026 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the… | |
| Analizada | Alta (8.8) | 1.2% | — | Tenda Ac18 Firmware | 17/3/2024 | 17/6/2026 | A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function R7WebsSecurityHandler. The manipulation of the argument password leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be… | |
| Analizada | Alta (8.8) | 0.99% | — | Tenda Ac18 Firmware | 17/3/2024 | 17/6/2026 | A vulnerability has been found in Tenda AC18 15.13.07.09 and classified as critical. Affected by this vulnerability is the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the… | |
| Analizada | Alta (8.8) | 1.6% | — | Tenda Ac18 Firmware | 15/3/2024 | 17/6/2026 | A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to stack-based buffer overflow. The attack can be launched remotely. The exploit… | |
| Analizada | Alta (8.8) | 1.6% | — | Tenda Ac18 Firmware | 15/3/2024 | 17/6/2026 | A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the… | |
| Analizada | Alta (8.8) | 1.5% | — | Tenda Ac18 Firmware | 15/3/2024 | 17/6/2026 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIP leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed… | |
| Analizada | Alta (8.8) | 1.6% | — | Tenda Ac18 Firmware | 15/3/2024 | 17/6/2026 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName/mac leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has… | |
| Analizada | Alta (8.8) | 1.6% | — | Tenda Ac18 Firmware | 15/3/2024 | 17/6/2026 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been… | |
| Analizada | Alta (8.8) | 1.7% | — | Tenda Ac18 Firmware | 15/3/2024 | 17/6/2026 | A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speed_dir leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to… | |
| Modificada | Crítica (9.8) | 0.78% | — | Tenda Ac18 Firmware | 12/3/2024 | 17/6/2026 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function. | |
| Modificada | Crítica (9.8) | 0.75% | — | Tenda Ac18 Firmware | 12/3/2024 | 17/6/2026 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda AC6 FirmwareTenda AC9 FirmwareTenda Ac19 FirmwareTenda Ac18 Firmware | 20/11/2023 | 17/6/2026 | Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd. | |
| Modificada | Crítica (9.8) | 2.4% | — | Tenda Ac18 Firmware | 5/5/2023 | 17/6/2026 | Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function. | |
| Modificada | Crítica (9.8) | 1.0% | — | Tenda Ac18 Firmware | 26/1/2023 | 17/6/2026 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat. | |
| Modificada | Crítica (9.8) | 1.0% | — | Tenda Ac18 Firmware | 26/1/2023 | 17/6/2026 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_0007343c. | |
| Modificada | Crítica (9.8) | 1.0% | — | Tenda Ac18 Firmware | 26/1/2023 | 17/6/2026 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add_white_node. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac18 Firmware | 26/1/2023 | 17/6/2026 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet. | |
| Modificada | Crítica (9.8) | 1.0% | — | Tenda Ac18 Firmware | 26/1/2023 | 17/6/2026 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo. | |
| Modificada | Crítica (9.8) | 1.0% | — | Tenda Ac18 Firmware | 26/1/2023 | 17/6/2026 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac18 Firmware | 21/11/2022 | 17/6/2026 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic. | |
| Modificada | Crítica (9.8) | 0.73% | — | Tenda Ac18 Firmware | 21/11/2022 | 17/6/2026 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter. | |
| Modificada | Crítica (9.8) | 0.73% | — | Tenda Ac18 Firmware | 21/11/2022 | 17/6/2026 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB. | |
| Modificada | Crítica (9.8) | 0.73% | — | Tenda Ac18 Firmware | 21/11/2022 | 17/6/2026 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart. |