Skip to content
OpenAdvisories

Archive

8 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /8 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

101 results · Feed

  • High 7.5
    CVE-2022-45505

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand.

  • High 7.5
    CVE-2022-45513

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter.

  • High 7.5
    CVE-2022-45504 EPSS 18%

    An issue in the component tpi_systool_handle(0) (/goform/SysToolRestoreSet) of Tenda W6-S v1.0.0.4(510) allows unauthen…

  • High 7.5
    CVE-2022-45524

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave.

  • High 7.5
    CVE-2022-45515

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at /goform/addressNat.

  • High 7.5
    CVE-2022-45520

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/qossetting.

  • High 7.5
    CVE-2022-45499

    Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilter…

  • High 7.5
    CVE-2022-45523

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im.

  • High 7.5
    CVE-2022-45522

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter.

  • High 7.5
    CVE-2022-45501

    Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset.

  • High 7.5
    CVE-2022-45519

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter.

  • High 7.5
    CVE-2022-45509

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at /goform/addUserName.

  • Medium 4.9
    CVE-2022-40939

    In certain Secustation products the administrator account password can be read. This affects V2.5.5.3116-S50-SMA-B20171…

  • Medium 6.8
    CVE-2022-44455

    The appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation.

    The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution with…

    OpenHarmony OpenHarmony
  • Critical 9.8
    CVE-2022-44938

    Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a bru…

  • High 7.5
    CVE-2022-44932

    An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service.

  • High 7.5
    CVE-2022-44931

    Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.

  • Medium 4.0
    CVE-2022-41802

    Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres.

    Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

    OpenHarmony OpenHarmony
  • High 8.1
    CVE-2022-37918

    Broken Access Control for some Web-based Management URLs in AirWave Management Platform

    Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive informa…

  • High 8.1
    CVE-2022-37917

    Broken Access Control for some Web-based Management URLs in AirWave Management Platform

    Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive informa…

  • High 8.1
    CVE-2022-37916

    Broken Access Control for some Web-based Management URLs in AirWave Management Platform

    Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive informa…