7171 matches found
Tenda AX12 Buffer Overflow Vulnerability (CNVD-2025-07608)
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. The Tenda AX12 suffers from a buffer overflow vulnerability that originates from the sub43fdcc function in /goform/SetNetControlList that fails to correctly validate the length of the input data, which can be exploited by ...
CVE-2025-28135
TOTOLINK A810R V4.1.2cu.5182B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi...
CVE-2025-26008
In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when requesting admin.cgi parameter with setSyncTimeHost...
CVE-2025-26007
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting systemtil.cgi...
CVE-2025-26006
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest...
CVE-2025-26002
Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setSyncTimeHost...
CVE-2021-26105
A stack-based buffer overflow vulnerability CWE-121 in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and below may allow an authenticated attacker to potentially execute unauthorized code or commands via specifically crafted HTTP requests...
CVE-2025-26005
Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack overflow vulnerability when requesting admin.cgi parameter with setNtp...
CVE-2025-26006
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest...
CVE-2025-26007
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting systemtil.cgi...
CVE-2025-26005
CVE-2025-26005 affects the Telesquare TLR-2005KSH, version 1.1.4. The vulnerability is an unauthorized stack overflow triggered by an admin.cgi request with setNtp, leading to high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 9.8). The connected sources provide cons...
CVE-2025-26011
CVE-2025-26011 affects Telesquare TLR-2005KSH 1.1.4, with an unauthorized stack overflow when calling admin.cgi with setUsernamePassword. The vulnerability is described as a stack overflow in the web interface parameter handling, leading to high impact on confidentiality, integrity, and availabil...
CVE-2025-26002
CVE-2025-26002 affects Telesquare TLR-2005KSH 1.1.4. The issue is an unauthorized stack overflow triggered when requesting the admin.cgi parameter with setSyncTimeHost. The CVE entry lists a high/critical impact (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No exploitation details or remediati...
CVE-2025-26008
In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when requesting admin.cgi parameter with setSyncTimeHost...
CVE-2025-26002
Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setSyncTimeHost...
CVE-2025-26007
CVE-2025-26007 concerns the Telesquare TLR-2005KSH firmware 1.1.4. The vulnerability is an unauthorized stack overflow in the login interface when requesting systemtil.cgi. Documented impact is Critical (CVSS 3.1: 9.8) with network access, no user interaction, and high impact on confidentiality, ...
Mageia: Security Advisory (MGASA-2025-0115)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-30216
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. In versions 1.3.3 and prior, a Heap Overflow vulnerability occurs in t...
UBUNTU-CVE-2025-2722
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been declared as critical. This vulnerability affects the function gsfpropsettingscollectva. The manipulation of the argument nallocedparams leads to heap-based buffer overflow. Local access is required to approach this attack. The...