CWE:

	Tytuł	Data	Autor
High	MikroTik RouterOS SMB Buffer Overflow	20.03.2018	Core Security Technolo...
High	Digital Canal Structural Wind Analysis 9.1 Buffer Overflow	02.07.2017	Karn Ganeshen
High	Linux XFBurn Stack-based Buffer Overflow	24.03.2017	Hosein Askari
High	Putty pscp <= 0.66 - Stack Buffer Overwrite	11.03.2016	tintinweb
High	VAMPSET 2.2.145 Stack / Heap Buffer Overflow	31.03.2015	CORE
Med.	Fortinet Single Sign On Stack Overflow	19.03.2015	CORE
High	GetGo Download Manager 4.x Stack Buffer Overflow	04.03.2014	RCE
High	VideoCharge Studio 2.12.3.685 Stack Buffer Overflow	20.02.2014	Julien Ahrens
High	Android Camera Driver Buffer Overflow / Memory Disclosure	22.10.2013	Jonathan Salwan
Med.	nss-pam-ldapd FD_SET array index error (stack-based buffer overflow)	18.02.2013	Garth Mollett
Low	Photodex ProShow Producer 5.0.3297 ExpandMacroFilename() Local Buffer Overflow	26.01.2013	Julien Ahrens
High	Sony PC Companion 2.1 (DownloadURLToFile()) Stack-based Buffer Overload	21.12.2012	Gjoko LiquidWorm Krsti...
High	Sony PC Companion 2.1 (Load()) Stack-based Buffer Overload	21.12.2012	Gjoko LiquidWorm Krsti...
High	Sony PC Companion 2.1 (CheckCompatibility()) Stack-based Buffer Overload	21.12.2012	Gjoko LiquidWorm Krsti...
High	Sony PC Companion 2.1 (Admin_RemoveDirectory()) Stack-based Buffer Overload	21.12.2012	Gjoko LiquidWorm Krsti...
High	Sound Editor Pro v7.5.1 Stack-based Buffer Overflow	17.09.2012	Julien Ahrens
High	Photodex ProShow Producer v5.0.3256 Local Buffer Overflow Vulnerability	03.07.2012	Inshell Security
High	Photodex ProShow Producer 5.0.3256 Buffer Overflow	03.07.2012	Julien Ahrens

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2024-04-17

	CVE-2024-3905	Updating...	A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been classified as critical. This affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261141 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-3906	Updating...	A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-261142 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-3907	Updating...	A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been rated as critical. This issue affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261143. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-3909	Updating...	A vulnerability classified as critical was found in Tenda AC500 2.0.1.9(1307). Affected by this vulnerability is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261145 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

2024-04-16

	CVE-2024-3874	Updating...	A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260908. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-3879	Updating...	A vulnerability, which was classified as critical, was found in Tenda W30E 1.0.1.25(633). This affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260913 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-3878	Updating...	A vulnerability, which was classified as critical, has been found in Tenda F1202 1.2.0.20(408). Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260912. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-3877	Updating...	A vulnerability classified as critical was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function fromqossetting of the file /goform/fromqossetting. The manipulation of the argument qos leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260911. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-3876	Updating...	A vulnerability classified as critical has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-260910 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-3875	Updating...	A vulnerability was found in Tenda F1202 1.2.0.20(408). It has been rated as critical. This issue affects the function fromNatlimit of the file /goform/Natlimit. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260909 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

 

---

Copyright 2024, cxsecurity.com