Lucene search
K

15 matches found

Cvelist
Cvelist
added 3 days ago22 views

CVE-2026-10270 D-Link DI-7001 MINI API httpd_debug.asp sprintf stack-based overflow

A vulnerability was detected in D-Link DI-7001 MINI up to 19.09.19A1. Impacted is the function sprintf of the file /httpddebug.asp of the component API. The manipulation of the argument Time results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public...

9CVSS0.00084EPSS
Exploits1References7
Cvelist
Cvelist
added 2026/05/05 7:15 p.m.27 views

CVE-2026-7857 D-Link DI-8100 CGI user_group.asp sprintf buffer overflow

A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf of the file /usergroup.asp of the component CGI Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and m...

8.6CVSS0.00109EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/05/05 5:45 p.m.33 views

CVE-2026-7853 D-Link DI-8100 HTTP auto_reboot.asp sprintf buffer overflow

A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /autoreboot.asp of the component HTTP Handler. This manipulation of the argument enable/time causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made...

10CVSS0.0013EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2026/02/13 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-37182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect function that allows attackers to crash the application by sending oversized input...

8.7CVSS6AI score0.00056EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/11 8:37 p.m.1 views

CVE-2020-37182 Redir 3.3 - Denial of Service

Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect function that allows attackers to crash the application by sending oversized input. Attackers can exploit the sprintf buffer without proper length checking to overwrite memory and cause a segmentation fault, resulting in...

8.7CVSS5.8AI score0.00056EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/12/22 9:25 a.m.3 views

CVE-2025-14995

A vulnerability has been found in Tenda FH1201 1.2.0.14408. Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be...

9CVSS8.8AI score0.00228EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/12/21 8:32 a.m.11 views

CVE-2025-14995 Tenda FH1201 SetIpBind sprintf stack-based overflow

A vulnerability has been found in Tenda FH1201 1.2.0.14408. Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be...

9CVSS0.00228EPSS
Exploits1References6
CVE
CVE
added 2025/12/21 4:32 a.m.14 views

CVE-2025-14993

Mode C: The CVE-2025-14993 affects Tenda AC18 v15.03.05.05 in the HTTP Request Handler’s SetDlnaCfg, where improper handling of the scanList argument in sprintf causes a stack-based buffer overflow. This vulnerability is exploitable remotely, and multiple sources indicate a public exploit exists....

9CVSS7.2AI score0.00252EPSS
Exploits1References6Affected Software1
CVE
CVE
added 2025/12/19 7:2 p.m.5 views

CVE-2025-14964

The CVE-2025-14964 entry affects TOTOLINK T10 firmware version 4.1.8cu.5083_B20200521. The vulnerability arises from improper handling of the loginAuthUrl parameter in the /cgi-bin/cstecgi.cgi function sprintf, enabling a stack-based buffer overflow that can be triggered remotely. Several connect...

10CVSS6.8AI score0.00951EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2024/01/16 10:15 p.m.2 views

CVE-2024-22916

In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub40E700 function within the cgibin is susceptible to stack overflow...

9.8CVSS5.9AI score0.01035EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.2 views

D-LINK Go-RT-AC750 Security Vulnerability

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China-based AUO D-Link. A security vulnerability exists in D-LINK Go-RT-AC750 v101b03, which originates from the sprintf function in the sub40E700 function in cgibin that is prone to a stack overflow...

9.8CVSS6.9AI score0.01035EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2024/01/05 4:15 a.m.1 views

CVE-2024-22087

route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution...

9.8CVSS6.4AI score0.14722EPSS
Exploits1References4
OSV
OSV
added 2023/02/03 6:15 a.m.1 views

ALPINE-CVE-2023-25139

sprintf in the GNU C Library glibc 2.37 has a buffer overflow out-of-bounds write in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a...

9.8CVSS7.4AI score0.00153EPSS
Exploits1References1
OSV
OSV
added 2018/07/17 3:29 a.m.1 views

DEBIAN-CVE-2018-14337

The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...

7.5CVSS7.4AI score0.00364EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2007/08/15 12:0 a.m.2 views

PT-2007-5469 · Esri · Esri Arcsde

Name of the Vulnerable Software and Affected Versions: ESRI ArcSDE service version 9.2 Description: The issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII. This triggers the...

7.5CVSS8.7AI score0.04875EPSS
Exploits0References9
Rows per page
Query Builder