CVE-2025-31700

CVE-2025-31700 affects Dahua security cameras (various IPC/SD series) with a buffer overflow in ONVIF request handling (stack-based) and in the RPC file upload handler. Exploitation could cause denial-of-service or remote code execution; some devices may have ASLR which can mitigate RCE likelihoo...

The vulnerability of the fromSetIpBind() function in the /goform/SetIpBind library of the Tenda FH451 router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetIpBind function in the /goform/SetIpBind microprogramming system for Tenda FH451 routers is related to buffer overflows when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

Dahua IPC Series 安全漏洞

Dahua IPC Series is a series of network cameras from Dahua China. A security vulnerability exists in the Dahua IPC Series that originates from a buffer overflow that could result in service interruption or remote code execution...

The vulnerability of the qosClassifier() function (/goform/qosClassifier) in D-Link DIR-816 router software allows a attacker to cause a service failure.

The vulnerability of the qosClassifier function /goform/qosClassifier of D-Link DIR-816 router software lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending ...

Ivanti Avalanche Manager Buffer Overflow Vulnerability

Ivanti Avalanche Manager is an enterprise mobile device management system developed by Ivanti for managing smartphones, tablets and other mobile devices. A buffer overflow vulnerability exists in Ivanti Avalanche Manager, which arises from a program that does not properly manage memory allocation...

The vulnerability of the Modbus programmable logic controller DELTA AS320T protocol allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the Modbus-programmable logical controller DELTA AS320T lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code...

The vulnerability of the NCompress::NRar5::CDecoder method in the RAR5 archive decoder and 7-Zip compressor allows a hacker to trigger a service failure.

The vulnerability of the NCompress::NRar5::CDecoder decoder in the RAR5 archiver 7-Zip tool is related to the possibility of buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Vnet/IP SCADA system’s interface of Yokogawa CENTUM VP allows a intruder to trigger a service failure.

The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP is related to an uncontrolled and unauthorized access. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets...

The vulnerability of the GoldenDB database management system, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information and cause service failures.

The vulnerability of the GoldenDB database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information and cause service failures...

The vulnerability in the fs/f2fs/inode.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/f2fs/inode.c module of the Linux operating system is related to mutual locking of execution threads. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Vnet/IP SCADA system’s interface of Yokogawa CENTUM VP allows a intruder to trigger a service failure.

The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP is related to an uncontrolled and unauthorized access. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets...

The vulnerability of the application-level SIP ALG operating system Juniper Networks Junos OS allows a attacker to trigger a service failure.

The vulnerability of the SIP ALG layer application-level firewall on Juniper Networks Junos OS is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to compromise the availability of the device.

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the assignment of the zero pointer. Exploiting this vulnerability can allow a malicious actor to compromise the availability of the device...

HAXcms with nodejs backend 安全漏洞

HAXcms with nodejs backend is an open source backend management system from HAX The Web. A security vulnerability exists in HAXcms with nodejs backend version 11.0.8 and earlier, which stems from mishandling of API request exceptions and could lead to a denial of service attack...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system’s optimizer is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

The vulnerability of the formWifiMacFilterSet() function (/goform/setWrlFilterList) in the Tenda O3 wireless access point software allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the formWifiMacFilterSet function /goform/setWrlFilterList in the Tenda O3 wireless access point software lies in the issue where the operation exceeds the buffer limit in memory when processing the macList parameter. Exploiting this vulnerability could allow a malicious acto...

The vulnerability of the distributed version control system Git used by Microsoft Visual Studio allows a perpetrator to cause a service failure.

The vulnerability of the distributed version control system in Microsoft Visual Studio for software development involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Vulnerability of the MySQL Server component: This component is part of the Database Management System, allowing attackers to cause service failures.

The vulnerability of the MySQL Server component involves deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

The vulnerability of the fromSpeedTestSet() function (/goform/setRateTest) in the Tenda O3 wireless access point software allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the fromSpeedTestSet function /goform/setRateTest in the Tenda O3 wireless access point software is related to the operation that goes beyond the buffer in memory when processing the destIP parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL network protocol...