CVE & Exploit Intelligence Database

Updated 50m ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,123 CVEs tracked 53,219 with exploits 4,686 exploited in wild 1,539 CISA KEV 3,912 Nuclei templates 37,757 vendors 42,422 researchers

6 results Clear all

CVE-2024-24488 5.5 MEDIUM 1 PoC Analysis EPSS 0.00

Tendacn Cp3 Firmware - Cleartext Storage

An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component.

CWE-312 Feb 07, 2024

CVE-2022-26243 7.5 HIGH 1 PoC Analysis EPSS 0.00

Tenda AC10-1200 - Buffer Overflow

Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow in the setSmartPowerManagement function.

CWE-120 Mar 23, 2022

CVE-2021-38772 7.5 HIGH 1 PoC Analysis EPSS 0.01

Tenda AC10-1200 <15.03.06.23 - Buffer Overflow

Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.

CWE-120 Mar 23, 2022

CVE-2021-38278 9.8 CRITICAL 1 PoC Analysis EPSS 0.01

Tenda AC10-1200 <15.03.06.23 - Buffer Overflow

Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the urls parameter in the saveParentControlInfo function.

CWE-787 Mar 23, 2022

CVE-2018-14497 5.4 MEDIUM 1 PoC Analysis EPSS 0.00

Tenda D152 - XSS

Tenda D152 ADSL routers allow XSS via a crafted SSID.

CWE-79 Aug 04, 2018

CVE-2018-5767 9.8 CRITICAL 3 PoCs Analysis EPSS 0.67

Tenda AC15 <V15.03.1.16_multi - RCE

An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code execution on the device with a crafted password parameter for the COOKIE header.

CWE-20 Feb 15, 2018