261579 matches found
EUVD-2026-62224
A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function getparafromuri of the file /cgi-bin/mbox-config of the component URI Parameter Parsing. This manipulation of the argument width/height causes stack-based buffer overflow. The attack can be initiated remotely...
CVE-2026-76008 Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow
A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function getparafromuri of the file /cgi-bin/mbox-config of the component URI Parameter Parsing. This manipulation of the argument width/height causes stack-based buffer overflow. The attack can be initiated remotely...
CVE-2026-76008
Comfast CF-N1-S 2.6.0.1 has a stack-based buffer overflow in the get_para_from_uri function of /cgi-bin/mbox-config, triggered by manipulating the width/height URI parameters. CVSS 10.0 (Critical) allows unauthenticated remote attackers to achieve full system compromise. No patch or exploit detai...
EUVD-2026-62223
A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is...
CVE-2026-76004 UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow
A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is...
EUVD-2026-62222
A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipulation of the argument timestart can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been mad...
CVE-2026-76003
UTT HiPER 1200GW firmware up to 2.5.3-170306 has a stack-based buffer overflow in the strcpy call of /goform/formGroupConfig triggered by the timestart argument. A remote attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 9.9). ...
MINI-3642-G93C-2VFF
Bulletin has no description...
vim: Vim: Stack Buffer Overflow via unbounded socket connections
A flaw was found in Vim. The socket server backend accepts an unbounded number of client connections, causing file descriptors to overflow internal data structures. A local process able to connect to the server socket can exploit this to corrupt stack memory or terminate the Vim server. This can...
EUVD-2026-62213
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wanl2tppassword causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been ma...
CVE-2026-75976
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wanl2tppassword causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been ma...
PT-2026-78608
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap buffer overflow allows a remote attacker to execute arbitrary code. A heap buffer overflow occurs when a program writes more data to a heap-allocated memor...
ROS-20260819-73-0038
The vulnerability in Vim is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PT-2026-78457
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A buffer overflow occurs in the NIM server process during client registration, leading to a process crash. A buffer overflow is a condition where a program writes more data ...
PT-2026-78319
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The GETALL and SETALL commands in the semctl function contain a flaw in how they handle semaphore sets. The process records the number of semaphores, releases th...
PT-2026-78499
Name of the Vulnerable Software and Affected Versions Cisco Secure Workload affected versions not specified Description Buffer management issues were identified during an internal security review. These issues fall under the category of CWE-119, which refers to improper restriction of operations...
PT-2026-78661
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A stack buffer overflow allows a remote attacker to execute arbitrary code. A stack buffer overflow occurs when a program writes more data to a buffer located on...
PT-2026-78260
Name of the Vulnerable Software and Affected Versions UTT HiPER 1200GW versions prior to 2.5.3-170306 Description A remote stack-based buffer overflow exists in the strcpy function within the /goform/formGroupConfig file. This issue occurs when the timestart argument is manipulated, potentially...
Linux Distros Unpatched Vulnerability : CVE-2026-76036
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a...
Linux Distros Unpatched Vulnerability : CVE-2026-76034
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pag...