CVE-2025-4442

D-Link DIR-605L (firmware 2.13B01) is affected by CVE-2025-4442 in the formSetWAN_Wizard55 function, where improper validation of the curTime parameter causes a buffer overflow. This remote, unauthenticated vulnerability can lead to arbitrary code execution or crash. Several sources confirm the i...

CVE-2025-45842

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...

CVE-2025-45841

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function...

CVE-2025-1253

CVE-2025-1253 concerns RTI Connext Professional (Core Libraries). The issue is a Buffer Copy without Checking Size of Input, a classic buffer overflow in which input handling can overflow variables and tags. Affected versions include RTI Connext Professional: 4.5 through 6.1.2.22; 7.0.0 through 7...

CVE-2025-45797

TOTOlink A950RG V4.1.2cu.5204B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cstemodules/system.so...

CVE-2025-45845

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function...

CVE-2025-45797

TOTOlink A950RG V4.1.2cu.5204B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cstemodules/system.so...

PT-2025-20416 · Totolink · Totolink A3100R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3100R version 5.9c.1527 Description: The issue is related to a Buffer Overflow that can be triggered through the comment parameter in the setIpPortFilterRules function. This allows for potential exploitation. Recommendations: For...

CVE-2025-45843

CVE-2025-45843 affects TOTOLINK NR1800X (firmware version 9.1.0u.6681_B20230703). The vulnerability is an authenticated stack overflow in the setWiFiGuestCfg function, triggered via the ssid parameter. Impact is high (confidentiality, integrity, and availability affected) per CVSS 3.1 vector in t...

PCMan FTP Server Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from unknown code in the RNTO command processor. No detailed vulnerability details are provided at this time...

CVE-2025-45789

TOTOLINK A3100R V5.9c.1527 is affected by a buffer overflow in the setParentalRules function, triggered through the urlKeyword parameter. This vulnerability allows out-of-bounds input to overwrite memory, with CVSS 3.1 indicating high impact on confidentiality, integrity, and availability (NVD da...

CVE-2025-45514

Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm...

mingw-pixman security update

An update is available for mingw-pixman. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Pixman is a pixel manipulation library for the X Window System and Cairo...

vorbis-tools security update

An update is available for vorbis-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The vorbis-tools packages provide an encoder, a decoder, a playback tool...

RLSA-2024:3095 Moderate: vorbis-tools security update

The vorbis-tools packages provide an encoder, a decoder, a playback tool, and a comment editor for Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format. Security Fixes: vorbis-tools: Buffer Overflow vulnerability CVE-2023-43361...

libsndfile security update

An update is available for libsndfile. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libsndfile is a C library for reading and writing files containing sampled...

RLSA-2024:0119 Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: crafted xml can cause global buffer overflow CVE-2023-39615 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other relat...

TOTOLINK A810R Buffer Overflow Vulnerability (CNVD-2025-09863)

TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK A810R suffers from a buffer overflow vulnerability, which stems from the v25 parameter in downloadFile.cgi failing to properly validate the length and size of the input data, which can be exploited ...

TOTOLINK A810R Buffer Overflow Vulnerability

The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK A810R suffers from a buffer overflow vulnerability, which stems from the failure of the v14 and v3 parameters in downloadFile.cgi to properly validate the length and size of the input data, whic...

Huawei EulerOS: Security Advisory for proftpd (EulerOS-SA-2025-1434)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...