Skip to content
OpenAdvisories

Archive

20 December 2022

Vulnerabilities first published on this day (UTC), newest first.

85 results · Feed

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the mac parameter at /goform/GetParentControlInfo.

  • Medium 4.8

    TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial o…

  • High 7.5

    D-Link DIR-869 DIR869Ax_FW102B15 is vulnerable to Authentication Bypass via phpcgi.

  • High 7.5

    Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sy…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the urls parameter at /goform/saveParentControlInf…

  • Critical 9.8

    Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability…

  • High 7.5

    An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitr…

  • Critical 9.8

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/VirtualSer.

  • High 8.8

    An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to exe…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/RouteStatic.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the speed_dir parameter at /goform/SetSpeedWan.

  • High 8.8

    An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows …

  • Medium 4.8

    TP-Link TL-WR740N V1 and V2 v3.12.4 and earlier allows authenticated attackers to execute arbitrary code or cause a Den…

  • High 7.5

    The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect s…

  • Medium 5.3

    The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account rem…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/DhcpListClient.

  • Critical 9.8
    CVE-2022-46020 Scanner template EPSS 39%

    WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.

  • Critical 9.8

    Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause sys…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientSta…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the mitInterface parameter at /goform/addressNat.

  • Critical 9.8

    Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause sys…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/addWifiMacFilter.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand.

  • Medium 6.5

    TP-Link TL-WR940N V4 3.16.9 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading…

  • Medium 4.8

    An issue in Netgear WNR2000 v1 1.2.3.7 and earlier allows authenticated attackers to cause a Denial of Service (DoS) vi…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the time parameter at /goform/saveParentControlInf…

  • High 7.5

    An exploitable firmware modification vulnerability was discovered on TP-Link TL-WR743ND V1. An attacker can conduct a M…

  • High 8.1

    An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can cond…

  • High 7.5

    The Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affe…

  • High 7.5

    Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm func…

  • High 8.8
    CVE-2022-45942 EPSS 22%

    A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4.

  • High 7.5

    Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset funct…

  • Critical 9.8
    CVE-2022-40624 Public exploit Scanner template EPSS 18%

    pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host…

  • High 7.5

    The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerabili…

  • High 7.5

    The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will …

  • Medium 5.5

    Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypa…

  • High 7.5

    The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized…

  • High 7.8
    CVE-2022-42046 Public exploit

    wfshbr64.sys and wfshbr32.sys specially crafted IOCTL allows arbitrary user to perform local privilege escalation