35017 matches found
CVE-2026-67312
axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON exposed as axios.formToJSON and used internally when serializing FormData with Content-Type: application/json. When an application passes attacker-controlled FormData field names...
CVE-2026-67312 axios 0.28.0 before 0.33.0 Denial of Service via formToJSON
axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON exposed as axios.formToJSON and used internally when serializing FormData with Content-Type: application/json. When an application passes attacker-controlled FormData field names...
H3C Magic R300-2100M - Remote Code Execution
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. id: CVE-2023-33629 info: name: H3C Magic R300-2100M - Remote Code Execution author: DhiyaneshDK severity: high description: | H3C Magic R300 version...
CVE-2026-67822
Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-15722
The CVE-2026-15722 entry concerns a pre-authentication stack buffer overflow in 389-ds-base. The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking, allowing a remote unauthentic...
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-43833
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43829
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43833
CVE-2026-43833 has corroborating detail in PT-2026-66675 describing a stack-based buffer overflow in the upload functionality that enables code execution by an authenticated attacker. The available information does not name affected products or versions, nor provide a patch or workaround. Exploit...
CVE-2026-43833
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43832
Full details and mitigation steps are currently restricted and will be published at a later date...
EUVD-2026-51389
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43832 tbc
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43831
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43831 tbc
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43829
Technical details for CVE-2026-43829 are not publicly available in the provided documents. No affected products, root cause, impact, or fixes are specified. Monitor for updates as more information is published.