CVE-2002-1998

Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtablecreate procedure 21...

CVE-2007-6008

Heap-based buffer overflow in emlsr.dll before 2.0.0.4 in Autonomy formerly Verity KeyView Viewer, Filter, and Export SDK allows remote attackers to execute arbitrary code via a long Content-Type header line in an EML file. NOTE: the provenance of this information is unknown; the details are...

CVE-2025-44892

CVE-2025-44892 affects FW-WGS-804HPT v1.305b241111, with a stack overflow via the ownekey parameter in the web_rmon_alarm_post_rmon_alarm function. CVSSv3.1 base score 6.5 (MEDIUM) from upstream metrics. Public details consistently describe a stack overflow as the root cause; no exploitation stat...

CVE-2025-44895

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ipv4Aclkey parameter in the webaclipv4BasedAceAdd function...

PT-2025-22433 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the BINARY Command Handler component. This issue leads to a buffer overflow and can be exploited remotely. Recommendations: F...

CVE-2025-44898

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the webaaaloginAuthlistEdit function...

CVE-2025-44891

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the hostip parameter in the websnmpv3hostaddpost function...

[SECURITY] [DLA 4175-1] mongo-c-driver security update

Debian LTS Advisory DLA-4175-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez May 20, 2025 https://wiki.debian.org/LTS Package : mongo-c-driver Version : 1.17.6-1+deb11u1 CVE ID : CVE-2021-32050 CVE-2023-0437 CVE-2024-6381 CVE-2024-6383 CVE-2025-0755 Multiple...

curl: Stack Buffer Overflow in curl's OpenSSL Provider Handling

Summary Hello curl Team, I found a stack buffer overflow in curl's OpenSSL provider handling code. The bug is in osslsetprovider function located in lib/vtls/openssl.c. When a provider name longer than MAXPROVIDERLEN is passed, the function copies it to a fixed-size buffer without proper length...

TOTOLINK A3002R/A3002RU Buffer Overflow Vulnerability

TOTOLINK A3002R and A3002RU are wireless router products under the TOTOLINK brand that support a wide range of network features and services. The TOTOLINK A3002R and A3002RU are vulnerable to a buffer overflow vulnerability that originates in the /boafrm/formMapDel file in the HTTP POST request...

CVE-2025-44885

The CVE-2025-44885 entry concerns Planet FW-WGS-804HPT v1.305b241111 with a stack overflow in the web_snmpv3_remote_engineId_add_post function caused by unvalidated remote_ip input. Public records describe potential arbitrary code execution or denial of service as outcomes. CVSS v3.1 scores it at...

CVE-2025-44898

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the webaaaloginAuthlistEdit function...

CVE-2025-44891

CVE-2025-44891 affects PLANET FW-WGS-804HPT v1.305b241111, where a stack overflow is triggered by the host_ip parameter in the web_snmp_v3host_add_post function. Public sources describe the vulnerable component and function, with CVSS3.1 highest severity (CRITICAL, network, no user interaction). ...

CVE-2025-44894

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radDftParamKey parameter in the webradiusSrvdftParampost function...

TOTOLINK A3002R formMapDelDevice interface macstr parameter buffer overflow vulnerability

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that arises from the macstr parameter in the formMapDelDevice interface failing to properly validate the length and size of the input data, which can be...

Tenda FH451 Buffer Overflow Vulnerability

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a buffer overflow vulnerability that originates from the P2pListFilter function failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary code on the...

TOTOLINK A3002R formMapDelDevice interface bandstr parameter buffer overflow vulnerability

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3002R, which stems from the bandstr parameter in the formMapDelDevice interface failing to correctly validate the length size of the input data, no detailed...

CVE-2025-44894

CVE-2025-44894 affects FW-WGS-804HPT v1.305b241111. A stack overflow is triggered via the radDftParamKey parameter in the web_radiusSrv_dftParam_post function. The CVE is rated CVSSv3.1 likely high impact (Confidentiality/Integrity/Availability high) with network attack vector and no privileges r...

TOTOLINK NR1800X setWiFiGuestCfg function Buffer Overflow Vulnerability

TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's Gion Electronics TOTOLINK. The TOTOLINK NR1800X suffers from a buffer overflow vulnerability that stems from the ssid parameter in the setWiFiGuestCfg function failing to properly validate the length size of the input...

TOTOLINK A3100R setMacQos function buffer overflow vulnerability

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R suffers from a buffer overflow vulnerability that originates from the failure of the priority parameter of the setMacQos interface in /lib/cstemodules/firewall.so to correctly validate the...