Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,050

Export CSV
CVE-2024-35580

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax1806 Ax1806 Firmware
CVE-2024-35579

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax1806 Ax1806 Firmware
CVE-2024-35578

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax1806 Ax1806 Firmware
CVE-2024-35576

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.

CVSS 3.1 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax1806 Ax1806 Firmware
CVE-2024-35571

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax1806 Ax1806 Firmware
CVE-2025-25675

Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmd_buf variable, which is directly used in the doSystemCmd function, causing an arbitrary command execution.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware
CVE-2025-25674

Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware
CVE-2024-32317

Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware
CVE-2024-32306

Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac10u Ac10u Firmware
CVE-2024-25373

Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware
CVE-2024-30628

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromAddressNat function.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Fh1205 Fh1205 Firmware
CVE-2024-30632

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security_5g parameter from formWifiBasicSet function.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Fh1205 Fh1205 Firmware
CVE-2024-30633

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security parameter from the formWifiBasicSet function.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Fh1205 Fh1205 Firmware
CVE-2024-30634

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the mitInterface parameter in the fromAddressNat function.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
F1202 F1202 Firmware
CVE-2024-30637

Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter.

CVSS 3.1 · 8.8 High EPSS 1.8% KEV · Not listed
Vendors
Tenda
Products
F1202 F1202 Firmware
CVE-2024-30638

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the entrys parameter in the fromAddressNat function.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
F1202 F1202 Firmware
CVE-2024-30639

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability in the page parameter of fromAddressNat function.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
F1202 F1202 Firmware