Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2696▼ 543 respecto a la semana anterior
Críticas / altas1264▼ 228 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)262▼ 241 respecto a la semana anterior
115 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 1.1% | — | Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+1 | 29/10/2018 | 17/6/2026 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'startIp' and 'endIp' parameters for a post request,… | |
| Modificada | Crítica (9.8) | 1.3% | — | Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+1 | 29/10/2018 | 17/6/2026 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a heap-based buffer overflow vulnerability in the router's web server -- httpd. While processing the 'mac' parameter for a post request, the… | |
| Modificada | Crítica (9.8) | 3.0% | — | Tenda AC9 FirmwareTenda Ac15 FirmwareTenda Ac18 Firmware | 29/10/2018 | 17/6/2026 | An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote code execution via shell metacharacters in the usbName field to the __fastcall function with a POST request. | |
| Modificada | Alta (7.5) | 1.1% | — | Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+1 | 29/10/2018 | 17/6/2026 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceList' parameter for a post request, the value is… | |
| Modificada | Alta (7.5) | 1.1% | — | Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+1 | 29/10/2018 | 17/6/2026 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "firewallEn" parameter for a post request, the value is… | |
| Modificada | Alta (7.5) | 1.4% | — | Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+1 | 29/10/2018 | 17/6/2026 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function "fromAddressNat" for a… | |
| Modificada | Alta (7.5) | 1.1% | — | Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+1 | 29/10/2018 | 17/6/2026 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "ssid" parameter for a post request, the value is directly… | |
| Modificada | Alta (7.5) | 1.1% | — | Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+1 | 29/10/2018 | 17/6/2026 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function "fromDhcpListClient" for a… | |
| Modificada | Alta (7.5) | 1.7% | — | Tendacn Ac18 FirmwareTendacn Ac15 FirmwareTendacn Ac10 FirmwareTendacn AC9 Firmware+1 | 2/9/2018 | 17/6/2026 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server. While processing the ssid parameter for a POST request, the value is directly used in… | |
| Modificada | Alta (7.5) | 1.1% | — | Tendacn AC7 FirmwareTendacn AC9 FirmwareTendacn Ac10 FirmwareTendacn Ac15 Firmware+1 | 21/7/2018 | 17/6/2026 | Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI. | |
| Modificada | Crítica (9.8) | 3.5% | — | Tendacn Ac15 Firmware | 20/3/2018 | 17/6/2026 | A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header. | |
| Modificada | Crítica (9.8) | 2.7% | — | Tendacn Ac15 Firmware | 20/3/2018 | 17/6/2026 | An issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a request to /goform/telnet, creating a telnetd service on the device. This service is password protected; however, several default accounts exist on the device that are root accounts, which can be used to log in. | |
| Modificada | Crítica (9.8) | 47% | 💥 Exploit | Tendacn Ac15 Firmware | 15/2/2018 | 17/6/2026 | An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code execution on the device with a crafted password parameter for the COOKIE header. | |
| Modificada | Media (6.5) | 1.0% | — | Tenda AC9 FirmwareTenda Ac15 FirmwareTenda Ac18 Firmware | 24/11/2017 | 17/6/2026 | Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.03.05.19(6318_)_cn… | |
| Modificada | Alta (8.8) | 2.5% | — | Tenda AC9 FirmwareTenda Ac15 FirmwareTenda Ac18 Firmware | 21/11/2017 | 17/6/2026 | Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.03.05.19(6318_)_cn… |