23570 matches found
CVE-2026-19815: Stack-based Buffer Overflow
A flaw has been found in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Executing a manipulation of the argument urlKeyword can lead to stack-based buffer overflow. It is possible...
CVE-2026-19790: Stack-based Buffer Overflow
A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...
CVE-2026-45699: Integer Underflow (Wrap or Wraparound)
Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...
PT-2026-72013
Name of the Vulnerable Software and Affected Versions Tenda W20E version 15.11.0.61068 1546 841 CN TDC Description A security flaw in the QoS Rule Deletion component allows remote exploitation. A stack-based buffer overflow occurs when the qosIndex argument is manipulated within the formQOSRuleDe...
CVE-2026-18077
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the argument name matching process. An attacker can cause unauthorized memory modification and potentially disrupt server operation by supplying specially crafted OUT parameter counts. Remediation Upgrade...
CVE-2026-53790
rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNCCONNECTPROG environment variable, daemon hooks, the rsync-ssl wrapper, and remote-shel...
CLSA-2026-1786355721 ImageMagick: Fix of CVE-2026-32259
CVE-2026-32259: bound image-colors to SIXELPALETTEMAX in WriteSIXELImage coders/sixel.c to fix a stack-based buffer overflow CWE-121 when color reduction fails...
CVE-2026-18511: Out-of-bounds Write
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, caused by improper bounds checking during TLS session establishment. A local attacker could overflow a fixed-length buffer and execute arbitrary cod...
CVE-2026-18077: Out-of-bounds Write
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...
CVE-2026-16815: Out-of-bounds Write
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow...
CVE-2026-16692: Out-of-bounds Write
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow...
CVE-2026-14679: Stack-based Buffer Overflow
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected...
CVE-2026-19695: Stack-based Buffer Overflow
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...
CVE-2026-14461 affecting package mtr for versions less than 0.95-4
CVE-2026-14461 affecting package mtr for versions less than 0.95-4. A patched version of the package is available...
CVE-2026-38753 affecting package busybox for versions less than 1.36.1-26
CVE-2026-38753 affecting package busybox for versions less than 1.36.1-26. A patched version of the package is available...
CVE-2026-73078
creationtimestamp| type| source ---|---|--- 2026-08-12 13:45:54+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-vim-1 2026-08-13 09:10:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxccuthbg2f...
EUVD-2026-57191
A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...
CVE-2026-19003: Stack-based Buffer Overflow
A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...