CVE Vulnerability Catalog

eMedia Consulting simpleRedak up to version 2.47.23.05 was found to contain a reflected XSS vulnerability via the component /view/cb/format_642.php.

The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow vulnerability in the get_parentControl_list_Info function due to the time parameter.

The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.

The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow vulnerability via the shareSpeed parameter in the fromSetWifiGusetBasic function.

A stack overflow was discovered in the Tenda AC8V4.0-V16.03.34.06 related to the deviceId parameter in the saveParentControlInfo function.

The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow vulnerability in the sub_4a79ec function via the time parameter.

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c function.

A Cross-site Scripting (XSS) vulnerability was identified in the GitHub repository tsolucio/corebos prior to version 8 via evvtgendoc.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.

A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8, allowing malicious code to be stored in the application.

A Cross-site Scripting (XSS) vulnerability - Stored in the GitHub repository tsolucio/corebos prior to version 8.

A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8, allowing malicious code to be stored in the application.

An unverified password change exists in the GitHub repository tsolucio/corebos prior to version 8, which may lead to unauthorized access.

Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption, potentially allowing arbitrary code execution. This affects Firefox for Android, Firefox, and Focus for Android versions prior to 112.

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

Under certain circumstances, a call to the bind function may have resulted in the incorrect realm. This may have created a vulnerability relating to JavaScript-implemented sandboxes such as SES. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This affects Firefox for Android, Firefox, and Focus for Android versions prior to 112.

Firefox improperly handled downloads of files ending in .desktop, which can be interpreted to run attacker-controlled commands. This bug only affects Firefox for Linux on certain distributions.