CVE Vulnerability Catalog

The Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn device was found to contain a stack overflow vulnerability via the parameters schedStartTime and schedEndTime at /goform/openSchedWifi.

The Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn device was found to contain a stack overflow vulnerability via the firewallEn parameter at the /goform/SetFirewallCfg endpoint.

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.

An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but is not fully configured for SNAP PAC S1 Firmware version R10.3b.

An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but is not fully configured for SNAP PAC S1 Firmware version R10.3b.

The FTP port is open by default in SNAP PAC S1 Firmware version R10.3b, which could allow unauthorized users to access some device files.

The built-in web server of SNAP PAC S1 Firmware version R10.3b does not require setting a complex password, which could allow for a successful brute force attack if users do not configure complex credentials.

The web server for SNAP PAC S1 Firmware version R10.3b has no limit on the number of login attempts. This could allow for a brute-force attack on the built-in web server login.

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors.

A vulnerability has been reported affecting QNAP operating systems regarding the cleartext transmission of sensitive information. If exploited, local network clients may read unexpected sensitive data via unspecified vectors.

A vulnerability related to inadequate encryption strength has been reported to affect QNAP operating systems. If exploited, local network clients may decrypt data using brute force attacks via unspecified vectors.

DedeCMS versions up to and including 5.7.110 contain a cross-site scripting (XSS) vulnerability in /dede/freelist_edit.php via the title parameter.

DedeCMS versions up to and including 5.7.110 contain a cross-site scripting (XSS) vulnerability in /dede/freelist_add.php via the title parameter.

DedeCMS versions up to and including 5.7.110 were found to contain multiple cross-site scripting (XSS) vulnerabilities in /dede/vote_edit.php via the votename and votenote parameters.

DedeCMS versions up to and including 5.7.110 were found to contain multiple cross-site scripting (XSS) vulnerabilities in /dede/vote_add.php triggered by the votename and voteitem1 parameters.

The OpenSSH implementation in IBM AIX 7.2, 7.3, and VIOS 3.1 may allow a non-privileged local user to access files that should be restricted due to improper access controls.

In Spring for Apache Kafka versions 3.0.9 and earlier and 2.9.10 and earlier, a possible deserialization attack vector exists, but only if unusual configuration is applied. An attacker would need to construct a malicious serialized object in one of the deserialization exception record headers.

The vulnerability in CP-Plus NVR is due to improper input handling at the web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device.

Wireshark versions 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 have a memory leak in the BT SDP dissector, allowing denial of service via packet injection or crafted capture files.

Wireshark versions 4.0.0 to 4.0.6 contain a bug in the CBOR dissector that can lead to application crashes. An attacker can exploit this via packet injection or a crafted capture file to cause denial of service.