CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A buffer overflow vulnerability was discovered in the hostname parameter of the formSetNetCheckTools function in Tenda W15E router version 15.11.0.10. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the picCropName parameter of the formCropAndSetWewifiPic function in Tenda W15E router version 15.11.0.10. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the picName parameter of the formDelwebAuthPic function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the gotoUrl parameter of the formPortalAuth function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the webAuthWhiteID parameter of the formModifyWebAuthWhiteUser function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the webAuthUserInfo parameter of the formAddWebAuthUser function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the webAuthUserPwd parameter of the formAddWebAuthUser function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the webAuthUserPwd parameter of the formModifyWebAuthUser function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
Multiple buffer overflows were discovered in the Tenda G0 device version 15.11.0.5 in the Saveqqlist function via the qqStr and markStr parameters. These vulnerabilities allow an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda PW201A router version 1.0.5 in the page parameter of the qossetting function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda PW201A router version 1.0.5 in the page parameter of the SafeMacFilter function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda G0 router version 15.11.0.5 in the IPMacBindRule parameter of the formIPMacBindAdd function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the Tenda G0 router version 15.11.0.5 in the IPMacBindIndex parameter of the formIPMacBindDel function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
Tenda G0 router v15.11.0.5 has a buffer overflow in the portalAuth parameter of formPortalAuth, allowing attackers to cause DoS via crafted HTTP request.
Tenda G0 router v15.11.0.5 has a stack overflow in the IPMacBindRuleIp parameter of formIPMacBindModify, allowing attackers to cause DoS via crafted HTTP request.
Tenda G0 router v15.11.0.5 has a stack overflow in the picCropName parameter of formCropAndSetWewifiPic, allowing attackers to cause DoS via crafted HTTP request.
Tenda W3 router v1.0.0.3(2204) has multiple stack overflows in R7WebsSecurityHandler via username and password parameters, allowing attackers to cause DoS via crafted HTTP request.
Tenda W3 router v1.0.0.3(2204) has multiple stack overflows in formwrlSSIDset via mit_ssid and mis_ssid_index parameters, allowing attackers to cause DoS via crafted HTTP request.
Tenda W3 router v1.0.0.3(2204) has a stack overflow in the wl_radio parameter of formWifiRadioSet, allowing attackers to cause DoS via crafted HTTP request.
Tenda O3v3 router v1.0.0.5 has a stack overflow in the save_list_data parameter of formSetCfm, allowing attackers to cause DoS via crafted HTTP request.