38291 matches found
CVE-2026-76584
A stack-based buffer overflow exists in the alphapd component of the TRENDnet TV-IP751WIC network camera (firmware 11.03.03), specifically in the file /cgi-bin/admin/set_time.cgi. The vulnerability is triggered by manipulating the Currenttime argument and can be exploited remotely with low privil...
CVE-2026-76584 TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...
CVE-2026-12634 Out-of-bounds stack write in the settings NVS backend from over-reported nvs_read length
The NVS backend of the Zephyr settings subsystem subsys/settings/src/settingsnvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '\0', where rc is the return value of nvsread. Per its contract, nvsread returns the full stored entry length...
CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...
CVE-2026-38755 vulnerabilities
Vulnerabilities for packages: busybox...
CVE-2026-16877 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...
MINI-Q56H-WR9J-PHFH
Bulletin has no description...
CVE-2026-16872
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack-based buffer overflow exploitable over the network with no authentication, allowing arbitrary code execution (CVSS 9.8 Critical). IBM's support page is the primary reference; no exploit code or in-the-wild activity is documented. No patch detai...
CVE-2026-16872 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-44254
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/oscrypto/shared/msgs.c decompresses up to OSMAXSTR byt...
CVE-2026-20302 Cisco RoomOS Stack Overflow Vulnerability
A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary code with root privileges. This vulnerability is due to insufficient boundary checks for specific data that is provided...
EUVD-2026-62554
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/oscrypto/shared/msgs.c decompresses up to OSMAXSTR byt...
MINI-HM6M-52WH-8H85
Bulletin has no description...
MINI-JM6M-52VR-R678
Bulletin has no description...
MINI-QPF2-JVR3-H86X
Bulletin has no description...
MINI-23PW-QW2M-C849
Bulletin has no description...
MINI-XC55-QFXG-J6JH
Bulletin has no description...
MINI-28VM-VX4P-HGWW
Bulletin has no description...