30 December 2022

34 results · Clear filters · Feed

• Critical 9.8
  CVE-2022-44621

  Apache Kylin: Command injection by Diagnosis Controller

  Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request.

  Apache Software Foundation Apache Kylin org.apache.kylin:kylin-server-base Maven
  Dec 30, 2022
• Critical 9.8
  CVE-2022-46598

  TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin para…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46592

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the set_…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46580

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the user_edit_page parameter in the wifi_capti…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46585

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTE_USER parameter in the get_access (s…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46601

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46581

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in t…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46589

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_option parameter in th…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46600

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the acti…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46593

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the do_s…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46588

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sys_service parameter in the setup_wizard_…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46582

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the login_name parameter in the do_graph_auth …

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46586

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in …

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46583

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot_type parameter in the wizard_ipv6 (…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46594

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the update_file_name parameter in the auto_up_…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46591

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reject_url parameter in the reject (sub_41…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46596

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (s…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46590

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_rsname parameter in th…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46584

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in …

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46597

  TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys_service parameter in …

  Dec 30, 2022
• Critical 9.8
  CVE-2022-46599

  TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_i…

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47122

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd_5g parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47119

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47121

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47118

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47115

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47123

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47128

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47125

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47126

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47117

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47124

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47127

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd parameter at /goform/WifiBasicSet.

  Dec 30, 2022
• Critical 9.8
  CVE-2022-47120

  Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.

  Dec 30, 2022