39651 matches found
CVE-2025-70251
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanGuestSetup...
PT-2026-24408
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow exists due to the handling of the nextPage parameter in the 'goform/formLanguageChange' component. This issue could allow for unexpected behavior. Recommendations At the moment,...
PT-2026-24409
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in the D-Link DIR-513 version 1.10. This issue is triggered by providing a crafted input to the webPage parameter within the '/goform/formSetWanPPTP' endpoint. Th...
PT-2026-24410
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. The issue is triggered via the webPage parameter when accessing the '/goform/formWlanSetup' endpoint. Recommendations Update to a...
PT-2026-24399
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. The issue is triggered by providing input to the curTime parameter within the ''/goform/formSetWizard1'' endpoint. This could allo...
PT-2026-24501
Name of the Vulnerable Software and Affected Versions Illustrator versions 29.8.4 and earlier Illustrator version 30.1 and earlier Description Illustrator versions 29.8.4 and 30.1, and earlier are susceptible to a Stack-based Buffer Overflow. Successful exploitation of this issue could lead to...
CVE-2025-70251
A stack buffer overflow vulnerability exists in the D-Link DIR-513 router running firmware version v1.10 . The flaw is triggered when processing the webPage parameter within the goform/formWlanGuestSetup endpoint, where the microprogramming software allows operation output to exceed the memory bu...
PT-2026-24369
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. The issue is triggered by providing input to the curTime parameter within the ''/goform/formVirtualServ'' endpoint. This could all...
PT-2026-24187
Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 8.6.12 Parse Server versions prior to 9.5.1-alpha.1 Description A logic flaw in the requestKeywordDenylist security control allows bypassing restrictions by placing nested objects or arrays before prohibited...
Moderate: gnutls security update
The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: Stack-based Buffer Overflow in gnutlspkcs11tokeninit Function CVE-2025-9820 gnutls: GnuTLS: Denial of Service vi...
EulerOS 2.0 SP13 : gnutls (EulerOS-SA-2026-1239)
According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token...
CVE-2025-70242
The D-Link DIR-513 router (version v1.10 ) contains a stack buffer overflow vulnerability in its microprogramming software. The flaw is triggered when processing the webPage parameter within the /goform/formSetWanPPTP endpoint, specifically when data is written outside the memory buffer. A malici...
CVE-2025-70227
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the nextPage parameter to goform/formLanguageChange...
qla2x00_eh_wait_forPendingCommands Buffer Overflow
The vulnerability of the qla2x00ehwaitforPendingCommands function in the drivers/scsi/qla2xxx/qlaos.c driver for SCSI devices in the Linux operating system is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Huawei EulerOS: Security Advisory for libwebsockets (EulerOS-SA-2026-1287)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP13 : libwebsockets (EulerOS-SA-2026-1287)
According to the versions of the libwebsockets package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Stack-based Buffer Overflow in lwsadnsparselabel in warmcat libwebsockets allows, when the LWSWITHSYSASYNCDNS flag is enabled during...
Linux Distros Unpatched Vulnerability : CVE-2026-28690
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow...
EulerOS 2.0 SP13 : libtasn1 (EulerOS-SA-2026-1286)
According to the versions of the libtasn1 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in...
Hitachi Energy RTU500 Product Uncontrolled Recursion (CVE-2024-8176)
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash...
Linux Distros Unpatched Vulnerability : CVE-2026-29062
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jackson-core contains core low-level incremental streaming parser and generator abstractions used by Jackson Data Processor. From version 3.0.0 to before versio...