DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the fid parameter of the v2x00.cgi page. An attacker can cause a denial ...

JVN#42386607: Assimp vulnerable to heap-based buffer overflow

PlyLoader.cpp of Assimp provided by Open Asset Import Library contains a heap-based buffer overflow vulnerability CWE-122. Impact An attacker may execute arbitrary code by importing a specially crafted file into the product. Solution Update the Software Update the software to the latest version...

DrayTek Vigor 3910 安全漏洞

The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which originates from the sPubKey parameter on the dialin.cgi page that fails to properly validate the length of the input data, and...

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

ZTE多款产品 安全漏洞

ZTE ZXHN H168N and others are products of ZTE Corporation ZTE, China.ZTE ZXHN H168N is a router.ZTE ZXHN H168A is a wireless router.ZTE ZXHN E1600 is a Wi-Fi 6 router. A security vulnerability exists in various ZTE products, which stems from the presence of a stack-based buffer overflow...

Siemens SICAM and SITIPE Products Third-Party Component Buffer Overflow Vulnerability

The SICAM 8 power automation platform is a universal, hardware and software based, all-in-one solution for all applications in the power sector. the SICAM A8000 RTUs Remote Terminal Units are modular devices for remote control and automation applications in all areas of energy supply. SICAM EGS...

TOTOLINK AC1200 Buffer Overflow Vulnerability

TOTOLINK AC1200 is a dual-band Wi-Fi router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 suffers from a buffer overflow vulnerability that originates from the parameter desc in the file /cgi-bin/cstecgi.cgi that can cause a buffer overflow. An attacker can exploit this vulnerabilit...

CVE-2024-44859

Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in formWrlExtraGet...

CVE-2024-41435

YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter...

Vim < 9.1.0689 Heap Buffer Overflow

The version of Vim installed on the remote host is after 9.1.0425 and prior to 9.1.0689. It is, therefore, affected by a heap buffer overflow vulnerability. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of t...

TOTOLINK AC1200 T8 Buffer Overflow Vulnerability (CNVD-2025-08338)

The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 T8 suffers from a buffer overflow vulnerability that stems from the setTracerouteCfg method failing to properly validate the length and size of the input data, which can be...

Tenda FH1206 formWrlsafeset function buffer overflow vulnerability

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a buffer overflow vulnerability, which arises when the formWrlsafeset function fails to properly validate the length of the input data, and can be exploited by an attacker to execute arbitrary code on the system...

Tenda O1 formSetCfm Function Buffer Overflow Vulnerability

Tenda O1 is a dedicated bridge for elevator monitoring from Tenda China. Tenda O1 suffers from a buffer overflow vulnerability, which originates from the funcpara1 parameter of the formSetCfm function in the /goform/setcfm file that fails to correctly validate the length and size of the input dat...

Tenda AX1806 formGetIptv Buffer Overflow Vulnerability

The Tenda AX1806 is a WiFi6 wireless router from Tenda, China. The Tenda AX1806 suffers from a buffer overflow vulnerability that stems from the iptv.stb.port parameter in formGetIptv containing a stack overflow. No detailed vulnerability details are provided at this time...

TOTOLINK AC1200 T8 setTracerouteCfg function buffer overflow vulnerability

The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK AC1200 T8 setTracerouteCfg function, which can be exploited by an attacker to submit a special request that can crash the service program or...

CVE-2024-44390

Tenda FH1206 V1.2.0.88155EN contains a Buffer Overflow vulnerability via the function formWrlsafeset...

CVE-2024-44387

Affected product: Tenda FH1206 (V1.2.0.8(8155)_EN). Issue: a Buffer Overflow in the formWrlExtraGet function, caused by improper input length validation. Reported impact: remote attacker could potentially execute arbitrary code or cause a denial of service. Exploitability details present in sourc...

CVE-2024-44387

Tenda FH1206 V1.2.0.88155EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet...

KLA71827 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Inappropriate...

The vulnerability of the formApPortalPhoneAuth function in the Tenda i22 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formApPortalPhoneAuth function in the Tenda i22 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...