2 December 2022

94 results · Feed

• Medium 5.9
  CVE-2022-45480

  PC Keyboard WiFi & Bluetooth allows an attacker (in a man-in-the-middle position between the server and a connected dev…

  Telepad PC Keyboard WiFi & Bluetooth
  Dec 2, 2022
• High 7.5
  CVE-2022-45641

  Tenda AC6V1.0 V15.03.05.19 is vulnerable to Buffer Overflow via formSetMacFilterCfg.

  Dec 2, 2022
• High 7.5
  CVE-2022-45656

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime fun…

  Dec 2, 2022
• High 7.5
  CVE-2022-45661

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the time parameter in the setSmartPowerManag…

  Dec 2, 2022
• Medium 5.4
  CVE-2022-45215

  A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary…

  Dec 2, 2022
• High 7.5
  CVE-2022-45654

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the ssid parameter in the form_fast_setting_…

  Dec 2, 2022
• High 7.5
  CVE-2022-45657

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind f…

  Dec 2, 2022
• High 7.5
  CVE-2022-45649

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the endIp parameter in the formSetPPTPServer…

  Dec 2, 2022
• High 7.5
  CVE-2022-45663

  Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSe…

  Dec 2, 2022
• Critical 9.1
  CVE-2022-45651

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the list parameter in the formSetVirtualSer …

  Dec 2, 2022
• High 7.5
  CVE-2022-45670

  Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing fun…

  Dec 2, 2022
• High 7.5
  CVE-2022-45659

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the wpapsk_crypto parameter in the fromSetWi…

  Dec 2, 2022
• High 7.5
  CVE-2022-45653

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the page parameter in the fromNatStaticSetti…

  Dec 2, 2022
• Medium 6.5
  CVE-2022-45668

  Tenda i22 V1.0.0.3(4687) is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.

  Dec 2, 2022
• Critical 9.8
  CVE-2022-45482

  Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthentica…

  thisAAY Lazy Mouse
  Dec 2, 2022
• High 7.5
  CVE-2022-45671

  Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the appData parameter in the formSetAppFilterR…

  Dec 2, 2022
• High 7.5
  CVE-2022-45644

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceId parameter in the formSetClientS…

  Dec 2, 2022
• High 7.5
  CVE-2022-45650

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the firewallEn parameter in the formSetFirew…

  Dec 2, 2022
• High 7.5
  CVE-2022-45646

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the limitSpeedUp parameter in the formSetCli…

  Dec 2, 2022
• High 7.5
  CVE-2022-45648

  Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the devName parameter in the formSetDeviceNa…

  Dec 2, 2022
• Medium 5.4
  CVE-2022-44954

  webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /contacts/listcon…

  Dec 2, 2022
• Medium 5.4
  CVE-2022-44950 Scanner template

  Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field fun…

  Dec 2, 2022
• Critical 9.8
  CVE-2022-44291 Scanner template

  webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php.

  Dec 2, 2022
• Medium 5.4
  CVE-2022-44959

  webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /meetings/listmee…

  Dec 2, 2022
• Critical 9.8
  CVE-2022-44363

  Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setSnmpInfo.

  Dec 2, 2022
• Medium 5.4
  CVE-2022-44960

  webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /general/search.p…

  Dec 2, 2022
• Medium 5.4
  CVE-2022-44946 Scanner template

  Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add Page function…

  Dec 2, 2022
• High 7.2
  CVE-2022-44347

  Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/view_inquiry&id=.

  Dec 2, 2022
• Critical 9.8
  CVE-2022-44365

  Tenda i21 V1.0.0.14(4656) has a stack overflow vulnerability via /goform/setSysPwd.

  Dec 2, 2022
• Medium 5.4
  CVE-2022-44949 Scanner template

  Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field fun…

  Dec 2, 2022
• Critical 9.8
  CVE-2022-44945

  Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the heading_field_id parameter.

  Dec 2, 2022
• Critical 9.8
  CVE-2022-44290 Scanner template

  webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.ph…

  Dec 2, 2022
• Medium 5.4
  CVE-2022-44961

  webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /forums/editforum…

  Dec 2, 2022
• High 7.2
  CVE-2022-44277

  Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=delete_product.

  Dec 2, 2022
• Medium 5.4
  CVE-2022-44951 Scanner template

  Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Form tab …

  Dec 2, 2022
• Medium 5.4
  CVE-2022-44962

  webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /calendar/viewcal…

  Dec 2, 2022
• Medium 5.4
  CVE-2022-44956

  webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /projects/listpro…

  Dec 2, 2022
• Critical 9.8
  CVE-2022-44366

  Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setDiagnoseInfo.

  Dec 2, 2022
• Critical 9.8
  CVE-2022-44367

  Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setUplinkInfo.

  Dec 2, 2022
• High 7.2
  CVE-2022-44348

  Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/update_status.php?id=.

  Dec 2, 2022