CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the webAuthUserInfo parameter of the formAddWebAuthUser function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the webAuthUserPwd parameter of the formAddWebAuthUser function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the webAuthUserPwd parameter of the formModifyWebAuthUser function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
Multiple buffer overflows were discovered in the Tenda G0 device version 15.11.0.5 in the Saveqqlist function via the qqStr and markStr parameters. These vulnerabilities allow an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda PW201A router version 1.0.5 in the page parameter of the qossetting function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda PW201A router version 1.0.5 in the page parameter of the SafeMacFilter function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda G0 router version 15.11.0.5 in the IPMacBindRule parameter of the formIPMacBindAdd function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda G0 router version 15.11.0.5 in the IPMacBindIndex parameter of the formIPMacBindDel function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
Tenda G0 router v15.11.0.5 has a buffer overflow in the portalAuth parameter of formPortalAuth, allowing attackers to cause DoS via crafted HTTP request.
Tenda G0 router v15.11.0.5 has a stack overflow in the IPMacBindRuleIp parameter of formIPMacBindModify, allowing attackers to cause DoS via crafted HTTP request.
Tenda G0 router v15.11.0.5 has a stack overflow in the picCropName parameter of formCropAndSetWewifiPic, allowing attackers to cause DoS via crafted HTTP request.
Tenda W3 router v1.0.0.3(2204) has multiple stack overflows in R7WebsSecurityHandler via username and password parameters, allowing attackers to cause DoS via crafted HTTP request.
Tenda W3 router v1.0.0.3(2204) has multiple stack overflows in formwrlSSIDset via mit_ssid and mis_ssid_index parameters, allowing attackers to cause DoS via crafted HTTP request.
Tenda W3 router v1.0.0.3(2204) has a stack overflow in the wl_radio parameter of formWifiRadioSet, allowing attackers to cause DoS via crafted HTTP request.
Tenda O3v3 router v1.0.0.5 has a stack overflow in the save_list_data parameter of formSetCfm, allowing attackers to cause DoS via crafted HTTP request.
The Tenda O3 Wireless Router v1.0.0.5(4180) contains a stack overflow in the ip parameter of the fromNetToolGet function. An attacker can exploit this vulnerability by sending an HTTP request, leading to a Denial of Service (DoS).
Tenda O3 Wireless Router v1.0.0.5(4180) has a stack overflow in the domain parameter of the fromNetToolGet function. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
Tenda O3 Wireless Router v1.0.0.5(4180) has multiple stack overflows in the fromVirtualSer function via parameters puVar2, puVar1, __s2, __s1_00, and puVar3. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
The Tenda W3 Wireless Router v1.0.0.3(2204) contains a stack overflow in the wl_radio parameter of the formwrlSSIDset function. An attacker can exploit this vulnerability by sending crafted input, leading to a Denial of Service (DoS).
The Tenda US_W3V1.0BR router v1.0.0.3 contains a stack overflow in the Go parameter of the ask_to_reboot function. An attacker can exploit this vulnerability by sending crafted input, leading to a Denial of Service (DoS).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS