https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T14:12:09.389646+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2024-03486 bdu:2024-03486 2026-10-07T14:12:09.519996+00:00 bdu:2024-03486 https://vulnerability.circl.lu/vuln/cnvd-2024-22404 cnvd-2024-22404 2026-10-07T14:12:09.520097+00:00 cnvd-2024-22404 https://vulnerability.circl.lu/vuln/fkie_cve-2024-4491 fkie_cve-2024-4491 2026-10-07T14:12:09.520148+00:00

A vulnerability classified as critical was found in Tenda i21 1.0.0.14(4656). This vulnerability affects the function formGetDiagnoseInfo. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263080. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

 https://vulnerability.circl.lu/vuln/ghsa-pmf3-wffg-82x2 GHSA-pmf3-wffg-82x2 2026-10-07T14:12:09.520251+00:00

A vulnerability classified as critical was found in Tenda i21 1.0.0.14(4656). This vulnerability affects the function formGetDiagnoseInfo. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263080. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

 https://vulnerability.circl.lu/vuln/var-202405-0051 VAR-202405-0051 2026-10-07T14:12:09.520310+00:00

A vulnerability classified as critical was found in Tenda i21 1.0.0.14(4656). This vulnerability affects the function formGetDiagnoseInfo. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263080. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Tenda i21 is a wireless access point of China's Tenda Company. The vulnerability is caused by the parameter cmdinput of the function formGetDiagnoseInfo failing to correctly verify the length of the input data. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service attack