# CVEs published 2024-08-15

121 CVEs were published on August 15, 2024: 11 critical, 43 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2024-43378](https://cve.now/CVE-2024-43378.md): calamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systems (CVSS 7.8, calamares-nixos-extensions)
- [CVE-2024-43374](https://cve.now/CVE-2024-43374.md): Vim heap-use-after-free in src/arglist.c:207 (CVSS 4.5, vim)
- [CVE-2024-43370](https://cve.now/CVE-2024-43370.md): gettext.js vulnerable to cross-site scripting (XSS) (CVSS 7.2, guillaumepotier gettext.js · gettext.js)
- [CVE-2024-7849](https://cve.now/CVE-2024-7849.md): D-Link DNS-1550-04 photocenter\_mgr.cgi cgi\_create\_album buffer overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2024-7845](https://cve.now/CVE-2024-7845.md): SourceCodester Online Graduate Tracer System fetch\_it.php sql injection (CVSS 5.3, SourceCodester Online Graduate Tracer System)
- [CVE-2024-43369](https://cve.now/CVE-2024-43369.md): Persistent Cross-site Scripting in Ibexa RichText Field Type (CVSS 7.2, ibexa fieldtype-richtext · ibexa/fieldtype-richtext)
- [CVE-2024-7844](https://cve.now/CVE-2024-7844.md): SourceCodester Online Graduate Tracer System add\_acc.php cross site scripting (CVSS 5.3, SourceCodester Online Graduate Tracer System)
- [CVE-2024-7843](https://cve.now/CVE-2024-7843.md): SourceCodester Online Graduate Tracer System exportcs.php information disclosure (CVSS 6.9, SourceCodester Online Graduate Tracer System)
- [CVE-2024-34743](https://cve.now/CVE-2024-34743.md): In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. (CVSS 7.8, Google Android)
- [CVE-2024-34742](https://cve.now/CVE-2024-34742.md): In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the (CVSS 5.5, Google Android)
- [CVE-2024-34741](https://cve.now/CVE-2024-34741.md): In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensa (CVSS 7.8, Google Android)
- [CVE-2024-34740](https://cve.now/CVE-2024-34740.md): In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer ove (CVSS 7.7, Google Android)
- [CVE-2024-34739](https://cve.now/CVE-2024-34739.md): In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to a logic error in the c (CVSS 7.8, Google Android)
- [CVE-2024-34738](https://cve.now/CVE-2024-34738.md): In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due (CVSS 7.7, Google Android)
- [CVE-2024-34737](https://cve.now/CVE-2024-34737.md): In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable and undeletable pip w (CVSS 7.7, Google Android)
- [CVE-2024-34736](https://cve.now/CVE-2024-34736.md): In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. (CVSS 6.2, Google Android)
- [CVE-2024-34734](https://cve.now/CVE-2024-34734.md): In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen (CVSS 7.7, Google Android)
- [CVE-2024-34731](https://cve.now/CVE-2024-34731.md): In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. (CVSS 7.7, Google Android)
- [CVE-2024-34727](https://cve.now/CVE-2024-34727.md): In sdpu\_compare\_uuid\_with\_attr of sdp\_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. (CVSS 7.5, Google Android)
- [CVE-2024-31333](https://cve.now/CVE-2024-31333.md): In \_MMU\_AllocLevel of mmu\_common.c, there is a possible arbitrary code execution due to an integer overflow. (CVSS 7.8, Google Android)
- [CVE-2024-7842](https://cve.now/CVE-2024-7842.md): SourceCodester Online Graduate Tracer System export\_it.php information disclosure (CVSS 6.9, SourceCodester Online Graduate Tracer System)
- [CVE-2024-7841](https://cve.now/CVE-2024-7841.md): SourceCodester Clinics Patient Management System check\_user\_name.php sql injection (CVSS 5.3, SourceCodester Clinics Patient Management System)
- [CVE-2024-7839](https://cve.now/CVE-2024-7839.md): itsourcecode Billing System addbill.php sql injection (CVSS 6.9, itsourcecode Billing System)
- [CVE-2024-43367](https://cve.now/CVE-2024-43367.md): Boa has an uncaught exception when transitioning the state of \`AsyncGenerator\` objects (CVSS 7.5, boa-dev boa · boa\_engine)
- [CVE-2024-42488](https://cve.now/CVE-2024-42488.md): Cilium agent's race condition may lead to policy bypass for Host Firewall policy (CVSS 6.8, cilium · github.com/cilium/cilium)
- [CVE-2024-42487](https://cve.now/CVE-2024-42487.md): Cilium's Gateway API route matching order contradicts specification (CVSS 4.0, cilium · github.com/cilium/cilium)
- [CVE-2024-7868](https://cve.now/CVE-2024-7868.md): Uninitialized variable in Xpdf 4.05 due to invalid JPEG header (CVSS 2.1, Xpdf)
- [CVE-2024-43366](https://cve.now/CVE-2024-43366.md): zkvyper ignored loop range bounds (CVSS 7.5, matter-labs era-compiler-vyper)
- [CVE-2024-6456](https://cve.now/CVE-2024-6456.md): SQL Injection vulnerability in AVEVA Historian Server (CVSS 8.5, AVEVA Historian Web Server)
- [CVE-2024-7867](https://cve.now/CVE-2024-7867.md): Integer overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates (CVSS 2.1, Xpdf)
- [CVE-2024-7838](https://cve.now/CVE-2024-7838.md): itsourcecode Online Food Ordering System addcategory.php sql injection (CVSS 6.9, itsourcecode Online Food Ordering System)
- [CVE-2024-7866](https://cve.now/CVE-2024-7866.md): Stack overflow in Xpdf 4.05 due to object loop in PDF pattern (CVSS 2.1, Xpdf)
- [CVE-2024-42476](https://cve.now/CVE-2024-42476.md): oauth CSRF vulnerability (CVSS 6.5, CORDEA oauth)
- [CVE-2024-42475](https://cve.now/CVE-2024-42475.md): OAuth library for nim allows insecure generation of state values by generateState - entropy too low and uses regular PRNG instead of CSPRNG (CVSS 6.5, CORDEA oauth)
- [CVE-2024-43357](https://cve.now/CVE-2024-43357.md): JavaScript specification issue may lead to type confusion and pointer dereference in implementations (CVSS 8.6, tc39 ecma262)
- [CVE-2024-42472](https://cve.now/CVE-2024-42472.md): Flatpak may allow access to files outside sandbox for certain apps (CVSS 10.0, flatpak)
- [CVE-2024-25633](https://cve.now/CVE-2024-25633.md): In eLabFTW, if administrators can create users, users can too (CVSS 5.4, elabftw)
- [CVE-2024-31905](https://cve.now/CVE-2024-31905.md): IBM QRadar Network Packet Capture information disclosure (CVSS 5.9, IBM QRadar Network Packet Capture)
- [CVE-2024-40705](https://cve.now/CVE-2024-40705.md): IBM InfoSphere Information Server denial of service (CVSS 6.5, IBM InfoSphere Information Server)
- [CVE-2024-40704](https://cve.now/CVE-2024-40704.md): IBM InfoSphere Information Server information disclosure (CVSS 4.9, IBM InfoSphere Information Server)
- [CVE-2024-6347](https://cve.now/CVE-2024-6347.md): Unauthorized access to ECU functionality (CVSS 5.3, Nissan Altima)
- [CVE-2024-43373](https://cve.now/CVE-2024-43373.md): webcrack has an Arbitrary File Write Vulnerability on Windows when Parsing and Saving a Malicious Bundle (CVSS 7.7, j4k0xb webcrack · webcrack)
- [CVE-2024-7263](https://cve.now/CVE-2024-7263.md): Arbitrary Code Execution in WPS Office (CVSS 9.3, Kingsoft WPS Office)
- [CVE-2024-7262](https://cve.now/CVE-2024-7262.md): Arbitrary Code Execution in WPS Office (CVSS 9.3, KEV, Kingsoft WPS Office)
- [CVE-2024-7833](https://cve.now/CVE-2024-7833.md): D-Link DI-8100 upgrade\_filter.asp upgrade\_filter\_asp command injection (CVSS 5.3, D-Link DI-8100)
- [CVE-2024-7832](https://cve.now/CVE-2024-7832.md): D-Link DNS-1550-04 photocenter\_mgr.cgi cgi\_get\_fullscreen\_photos buffer overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2024-7831](https://cve.now/CVE-2024-7831.md): D-Link DNS-1550-04 photocenter\_mgr.cgi cgi\_get\_cooliris buffer overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2024-7830](https://cve.now/CVE-2024-7830.md): D-Link DNS-1550-04 photocenter\_mgr.cgi cgi\_move\_photo buffer overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2024-7829](https://cve.now/CVE-2024-7829.md): D-Link DNS-1550-04 photocenter\_mgr.cgi cgi\_del\_photo buffer overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2024-7828](https://cve.now/CVE-2024-7828.md): D-Link DNS-1550-04 photocenter\_mgr.cgi cgi\_set\_cover buffer overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2024-7411](https://cve.now/CVE-2024-7411.md): Newsletters \<= 4.9.9 - Unauthenticated Full Path Disclosure (CVSS 5.3, contrid Newsletters)
- [CVE-2024-7063](https://cve.now/CVE-2024-7063.md): ElementsKit Pro \<= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure (CVSS 4.3, wpmet ElementsKit Pro)
- [CVE-2024-7064](https://cve.now/CVE-2024-7064.md): ElementsKit Pro \<= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpmet ElementsKit Pro)
- [CVE-2024-7815](https://cve.now/CVE-2024-7815.md): CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting (CVSS 5.1, CodeAstro Online Railway Reservation System)
- [CVE-2024-7814](https://cve.now/CVE-2024-7814.md): CodeAstro Online Railway Reservation System Add Employee Page admin-add-employee.php cross site scripting (CVSS 5.1, CodeAstro Online Railway Reservation System)
- [CVE-2024-6534](https://cve.now/CVE-2024-6534.md): Directus 10.13.0 - Insecure object reference via PATH presets (CVSS 4.3, Directus)
- [CVE-2024-6533](https://cve.now/CVE-2024-6533.md): Directus 10.13.0 - DOM-Based cross-site scripting (XSS) via layout\_options (CVSS 5.4, Directus)
- [CVE-2024-7813](https://cve.now/CVE-2024-7813.md): SourceCodester Prison Management System Profile Image insufficiently protected credentials (CVSS 6.9, SourceCodester Prison Management System)
- [CVE-2024-7812](https://cve.now/CVE-2024-7812.md): SourceCodester Best House Rental Management System POST Parameter ajax.php cross site scripting (CVSS 5.3, SourceCodester Best House Rental Management System)
- [CVE-2024-25024](https://cve.now/CVE-2024-25024.md): IBM QRadar Suite Software information disclosure (CVSS 5.5, IBM QRadar Suite Software · IBM Cloud Pak for Security)
- [CVE-2024-7811](https://cve.now/CVE-2024-7811.md): SourceCodester Daily Expenses Monitoring App delete-expense.php sql injection (CVSS 5.3, SourceCodester Daily Expenses Monitoring App)
- [CVE-2024-7628](https://cve.now/CVE-2024-7628.md): MStore API – Create Native Android & iOS Apps On The Cloud \<= 4.15.2 - Authentication Bypass to Account Takeover (CVSS 8.1, inspireui MStore API – Create Native Android & iOS Apps On…)
- [CVE-2024-7624](https://cve.now/CVE-2024-7624.md): Zephyr Project Manager \<= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation (CVSS 8.1, dylanjkotze Zephyr Project Manager)
- [CVE-2024-7420](https://cve.now/CVE-2024-7420.md): Insert PHP Code Snippet \<= 1.3.6 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion (CVSS 5.8, f1logic Insert PHP Code Snippet)
- [CVE-2024-7810](https://cve.now/CVE-2024-7810.md): SourceCodester Online Graduate Tracer System view\_itprofile.php sql injection (CVSS 5.3, SourceCodester Online Graduate Tracer System)
- [CVE-2024-7809](https://cve.now/CVE-2024-7809.md): SourceCodester Online Graduate Tracer System nbproject exposure of information through directory listing (CVSS 6.9, SourceCodester Online Graduate Tracer System)
- [CVE-2024-7808](https://cve.now/CVE-2024-7808.md): code-projects Job Portal logindbc.php sql injection (CVSS 6.9, code-projects Job Portal)
- [CVE-2024-22217](https://cve.now/CVE-2024-22217.md): A Server-Side Request Forgery (SSRF) vulnerability in Terminalfour before 8.3.19 allows authenticated users to use specific features to acce (CVSS 6.5)
- [CVE-2024-22218](https://cve.now/CVE-2024-22218.md): XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated users (CVSS 8.8)
- [CVE-2024-22219](https://cve.now/CVE-2024-22219.md): XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated users (CVSS 6.3)
- [CVE-2024-23168](https://cve.now/CVE-2024-23168.md): Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting i (CVSS 9.8)
- [CVE-2024-27728](https://cve.now/CVE-2024-27728.md): Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of (CVSS 6.1)
- [CVE-2024-27729](https://cve.now/CVE-2024-27729.md): Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the location paramete (CVSS 7.4)
- [CVE-2024-27730](https://cve.now/CVE-2024-27730.md): Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary cod (CVSS 9.8)
- [CVE-2024-27731](https://cve.now/CVE-2024-27731.md): Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type (CVSS 6.1)
- [CVE-2024-31798](https://cve.now/CVE-2024-31798.md): Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to retr (CVSS 6.4)
- [CVE-2024-31799](https://cve.now/CVE-2024-31799.md): Information Disclosure in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to read the WiFi passphrase via th (CVSS 4.6)
- [CVE-2024-31800](https://cve.now/CVE-2024-31800.md): Authentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to gain a privileged command shell (CVSS 6.8)
- [CVE-2024-32231](https://cve.now/CVE-2024-32231.md): Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter. (CVSS 6.3, github.com/stashapp/stash)
- [CVE-2024-42676](https://cve.now/CVE-2024-42676.md): File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows a remote attacker to execute arbitrary cod (CVSS 8.8)
- [CVE-2024-42677](https://cve.now/CVE-2024-42677.md): An issue in Huizhi enterprise resource management system v.1.0 and before allows a local attacker to obtain sensitive information via the /n (CVSS 5.5)
- [CVE-2024-42678](https://cve.now/CVE-2024-42678.md): Cross Site Scripting vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker to execute arbitrar (CVSS 5.0)
- [CVE-2024-42679](https://cve.now/CVE-2024-42679.md): SQL Injection vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker to execute arbitrary code (CVSS 7.8)
- [CVE-2024-42680](https://cve.now/CVE-2024-42680.md): An issue in Super easy enterprise management system v.1.0.0 and before allows a local attacker to obtain the server absolute path by enterin (CVSS 5.5)
- [CVE-2024-42681](https://cve.now/CVE-2024-42681.md): Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component. (CVSS 8.8, com.xuxueli:xxl-job-core)
- [CVE-2024-42757](https://cve.now/CVE-2024-42757.md): Command injection vulnerability in Asus RT-N15U 3.0.0.4.376\_3754 allows a remote attacker to execute arbitrary code via the netstat function (CVSS 9.8)
- [CVE-2024-42843](https://cve.now/CVE-2024-42843.md): Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php. (CVSS 9.8)
- [CVE-2024-42940](https://cve.now/CVE-2024-42940.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. (CVSS 5.7)
- [CVE-2024-42941](https://cve.now/CVE-2024-42941.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the wanmode parameter in the fromAdvSetWan function. (CVSS 7.5)
- [CVE-2024-42942](https://cve.now/CVE-2024-42942.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. (CVSS 6.5)
- [CVE-2024-42943](https://cve.now/CVE-2024-42943.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. (CVSS 7.5)
- [CVE-2024-42944](https://cve.now/CVE-2024-42944.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. (CVSS 6.5)
- [CVE-2024-42945](https://cve.now/CVE-2024-42945.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromAddressNat function. (CVSS 6.5)
- [CVE-2024-42946](https://cve.now/CVE-2024-42946.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. (CVSS 6.5)
- [CVE-2024-42947](https://cve.now/CVE-2024-42947.md): An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 (408) allows attackers to execute arbitrary commands via a craf (CVSS 9.8)
- [CVE-2024-42948](https://cve.now/CVE-2024-42948.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. (CVSS 7.5)
- [CVE-2024-42949](https://cve.now/CVE-2024-42949.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. (CVSS 6.5)
- [CVE-2024-42950](https://cve.now/CVE-2024-42950.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the Go parameter in the fromSafeClientFilter function. (CVSS 7.5)
- [CVE-2024-42951](https://cve.now/CVE-2024-42951.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the mit\_pptpusrpw parameter in the fromWizardHandle function. (CVSS 7.5)
- [CVE-2024-42952](https://cve.now/CVE-2024-42952.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromqossetting function. (CVSS 7.5)
- [CVE-2024-42953](https://cve.now/CVE-2024-42953.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function. (CVSS 6.5)
- [CVE-2024-42954](https://cve.now/CVE-2024-42954.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. (CVSS 6.5)
- [CVE-2024-42955](https://cve.now/CVE-2024-42955.md): Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. (CVSS 6.5)
- [CVE-2024-42966](https://cve.now/CVE-2024-42966.md): Incorrect access control in TOTOLINK N350RT V9.3.5u.6139\_B20201216 allows attackers to obtain the apmib configuration file, which contains t (CVSS 9.8)
- [CVE-2024-42967](https://cve.now/CVE-2024-42967.md): Incorrect access control in TOTOLINK LR350 V9.3.5u.6369\_B20220309 allows attackers to obtain the apmib configuration file, which contains th (CVSS 9.8)
- [CVE-2024-42968](https://cve.now/CVE-2024-42968.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function. (CVSS 6.5)
- [CVE-2024-42969](https://cve.now/CVE-2024-42969.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. (CVSS 7.5)
- [CVE-2024-42973](https://cve.now/CVE-2024-42973.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function. (CVSS 6.5)
- [CVE-2024-42974](https://cve.now/CVE-2024-42974.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. (CVSS 6.5)
- [CVE-2024-42976](https://cve.now/CVE-2024-42976.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. (CVSS 6.5)
- [CVE-2024-42977](https://cve.now/CVE-2024-42977.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. (CVSS 7.5)
- [CVE-2024-42978](https://cve.now/CVE-2024-42978.md): An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted (CVSS 9.8)
- [CVE-2024-42979](https://cve.now/CVE-2024-42979.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function. (CVSS 6.5)
- [CVE-2024-42980](https://cve.now/CVE-2024-42980.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. (CVSS 7.5)
- [CVE-2024-42981](https://cve.now/CVE-2024-42981.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. (CVSS 7.5)
- [CVE-2024-42982](https://cve.now/CVE-2024-42982.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. (CVSS 5.3)
- [CVE-2024-42983](https://cve.now/CVE-2024-42983.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function. (CVSS 6.5)
- [CVE-2024-42984](https://cve.now/CVE-2024-42984.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. (CVSS 6.5)
- [CVE-2024-42985](https://cve.now/CVE-2024-42985.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. (CVSS 6.5)
- [CVE-2024-42986](https://cve.now/CVE-2024-42986.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. (CVSS 7.5)
- [CVE-2024-42987](https://cve.now/CVE-2024-42987.md): Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-08-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.