Approved changes feed: RSS · Atom

cpe:2.3:o:trendnet:tv-ip110wn_firmware:1.2.2.65:*:*:*:*:*:*:*

part: o version: 1.2.2.65 update: *

VendorTrendnet (4262376e-0c1d-55de-8dcc-074e5a926aa7)
ProductTv Ip110Wn Firmware (a34f6623-7cf3-57e1-983b-034f6825d09c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-31655 vulnerable 2026-06-08 05:31:53.820202 Details available
Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter. in a GET request in view.cgi.
Published: 2021-08-10T12:54:13.000Z
Updated: 2026-07-09T00:13:26.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11417 vulnerable 2026-06-08 05:12:37.146774 Details available
system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the respondAsp function. Attackers can exploit the vulnerability by using the languse parameter with a long string. This affects 1.2.2 build 28, 64, 65, and 68.
Published: 2019-04-21T20:09:41.000Z
Updated: 2024-08-04T22:55:39.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19241 vulnerable 2026-06-08 05:11:15.499629 Details available
Buffer overflow in video.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows attackers to hijack the control flow to any attacker-specified location by crafting a POST request payload (without authentication).
Published: 2018-12-20T22:00:00.000Z
Updated: 2024-08-05T11:30:04.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19240 vulnerable 2026-06-08 05:11:15.496439 Details available
Buffer overflow in network.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows attackers to hijack the control flow to any attacker-specified location by crafting a POST request payload (without authentication).
Published: 2018-12-20T22:00:00.000Z
Updated: 2024-08-05T11:30:04.071Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.