Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3075▲ 488 respecto a la semana anterior
Críticas / altas1457▲ 57 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)238▲ 224 respecto a la semana anterior
2279 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.7) | 0.40% | — | Tenda N301 Firmware | 1/5/2023 | 17/6/2026 | Cleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password. | |
| Modificada | Media (5.7) | 0.40% | — | Tenda N301 Firmware | 1/5/2023 | 17/6/2026 | Cleartext Transmission in set-cookie:ecos_pw: Tenda N301 v6.0, Firmware v12.02.01.61_multi allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password. | |
| Modificada | Crítica (9.8) | 0.76% | — | Tenda Ac15 Firmware | 24/4/2023 | 17/6/2026 | In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability. | |
| Modificada | Crítica (9.8) | 0.76% | — | Tenda Ac15 Firmware | 24/4/2023 | 17/6/2026 | In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability. | |
| Modificada | Crítica (9.8) | 0.76% | — | Tenda Ac15 Firmware | 24/4/2023 | 17/6/2026 | In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda Ac15 Firmware | 24/4/2023 | 17/6/2026 | In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda Ac15 Firmware | 24/4/2023 | 17/6/2026 | In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability. | |
| Modificada | Crítica (9.8) | 0.76% | — | Tenda Ac15 Firmware | 24/4/2023 | 17/6/2026 | In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda Ac15 Firmware | 24/4/2023 | 17/6/2026 | In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability. | |
| Modificada | Crítica (9.8) | 0.76% | — | Tenda Ac15 Firmware | 24/4/2023 | 17/6/2026 | Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow. | |
| Modificada | Crítica (9.8) | 0.76% | — | Tenda AC5 Firmware | 24/4/2023 | 17/6/2026 | Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function. | |
| Modificada | Crítica (9.8) | 23% | — | Tenda G103 Firmware | 10/4/2023 | 17/6/2026 | Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45DC58 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_4A75C0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 0.96% | — | Tenda AC5 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 0.87% | — | Tenda AC5 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 0.96% | — | Tenda AC5 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. |