Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior
Críticas / altas1273▼ 220 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior
–

159 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaCrítica (9.8)1.3%—Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+129/10/201817/6/2026
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a heap-based buffer overflow vulnerability in the router's web server -- httpd. While processing the 'mac' parameter for a post request, the…
ModificadaAlta (7.5)1.1%—Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+129/10/201817/6/2026
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceList' parameter for a post request, the value is…
ModificadaAlta (7.5)1.1%—Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+129/10/201817/6/2026
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "firewallEn" parameter for a post request, the value is…
ModificadaAlta (7.5)1.4%—Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+129/10/201817/6/2026
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function "fromAddressNat" for a…
ModificadaAlta (7.5)1.1%—Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+129/10/201817/6/2026
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "ssid" parameter for a post request, the value is directly…
ModificadaAlta (7.5)1.1%—Tenda AC7 FirmwareTenda AC9 FirmwareTenda Ac10 FirmwareTenda Ac15 Firmware+129/10/201817/6/2026
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function "fromDhcpListClient" for a…
ModificadaAlta (8.8)3.6%—Tendacn Ac10 FirmwareTendacn AC9 Firmware2/9/201817/6/2026
An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection.
ModificadaAlta (7.5)1.7%—Tendacn Ac18 FirmwareTendacn Ac15 FirmwareTendacn Ac10 FirmwareTendacn AC9 Firmware+12/9/201817/6/2026
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server. While processing the ssid parameter for a POST request, the value is directly used in…
ModificadaAlta (7.5)1.1%—Tendacn AC7 FirmwareTendacn AC9 FirmwareTendacn Ac10 FirmwareTendacn Ac15 Firmware+121/7/201817/6/2026
Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI.
Orbitaley — Vulnerabilidades