8.6

CVSS4.0

CVE-2025-15180 - Tenda WH450 HTTP Request webExcptypemanFilte stack-based overflow

A vulnerability was identified in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/webExcptypemanFilte of the component HTTP Request Handler. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The ex…

📅 Published: Dec. 29, 2025, 8:32 a.m. 🔄 Last Modified: Feb. 24, 2026, 6:11 a.m.

8.6

CVSS4.0

CVE-2025-15179 - Tenda WH450 qossetting stack-based overflow

A vulnerability was determined in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/qossetting. This manipulation of the argument page causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

📅 Published: Dec. 29, 2025, 8:02 a.m. 🔄 Last Modified: Feb. 24, 2026, 6:10 a.m.

8.6

CVSS4.0

CVE-2025-15178 - Tenda WH450 HTTP Request VirtualSer stack-based overflow

A vulnerability was found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/VirtualSer of the component HTTP Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been…

📅 Published: Dec. 29, 2025, 7:32 a.m. 🔄 Last Modified: Feb. 24, 2026, 6:10 a.m.

9.3

CVSS4.0

CVE-2025-15228 - WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Upload

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

📅 Published: Dec. 29, 2025, 7:18 a.m. 🔄 Last Modified: Dec. 31, 2025, 8:31 p.m.

8.7

CVSS4.0

CVE-2025-15227 - WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Read

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

📅 Published: Dec. 29, 2025, 7:10 a.m. 🔄 Last Modified: Dec. 31, 2025, 8:32 p.m.

8.6

CVSS4.0

CVE-2025-15177 - Tenda WH450 HTTP Request SetIpBind stack-based overflow

A vulnerability has been found in Tenda WH450 1.0.0.18. This vulnerability affects unknown code of the file /goform/SetIpBind of the component HTTP Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been…

📅 Published: Dec. 29, 2025, 7:02 a.m. 🔄 Last Modified: Feb. 24, 2026, 6:10 a.m.

9.3

CVSS4.0

CVE-2025-15226 - Sunnet|WMPro - Arbitrary File Upload

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

📅 Published: Dec. 29, 2025, 6:39 a.m. 🔄 Last Modified: Dec. 31, 2025, 8:53 p.m.

6.9

CVSS4.0

CVE-2025-15176 - Open5GS PFCP Session Establishment Request rule-match.c ogs_pfcp_pdr_rule_find_by_packet assertion

A flaw has been found in Open5GS up to 2.7.5. This affects the function decode_ipv6_header/ogs_pfcp_pdr_rule_find_by_packet of the file lib/pfcp/rule-match.c of the component PFCP Session Establishment Request Handler. Executing a manipulation can lead to reachable assertion. It is possible to laun…

📅 Published: Dec. 29, 2025, 6:32 a.m. 🔄 Last Modified: Feb. 24, 2026, 7:17 a.m.

8.7

CVSS4.0

CVE-2025-15225 - Sunnet|WMPro - Arbitrary File Read

WMPro developed by Sunnet has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to read arbitrary system files.

📅 Published: Dec. 29, 2025, 6:31 a.m. 🔄 Last Modified: Dec. 31, 2025, 8:55 p.m.

5.1

CVSS4.0

CVE-2025-15175 - SohuTV CacheCloud AppController.java appCommandAnalysis cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/main/java/com/sohu/cache/web/controller/AppController.java. Performing manipulation results in cross site scripting. It is possible to initiate the atta…

📅 Published: Dec. 29, 2025, 6:02 a.m. 🔄 Last Modified: Jan. 7, 2026, 1:25 p.m.
Total resulsts: 346565
Page 2126 of 34,657
« previous page » next page
Filters