Lucene search
+L

13397 matches found

NVD
NVD
added 2026/01/13 3:16 a.m.19 views

CVE-2025-66177

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

8.8CVSS0.00339EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/13 1:47 a.m.6 views

CVE-2025-66177

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

8.8CVSS7.4AI score0.00339EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/13 1:47 a.m.64 views

CVE-2025-66177

CVE-2025-66177 describes a stack overflow vulnerability in Hikvision NVR/DVR/CVR/IPC devices’ Search and Discovery feature. An attacker on the same LAN could cause a device to malfunction by sending specially crafted packets to an unpatched device. Connected sources corroborate a Hikvision stack-...

8.8CVSS7.4AI score0.00339EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/13 1:47 a.m.41 views

CVE-2025-66177

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

8.8CVSS0.00339EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/13 1:47 a.m.39 views

CVE-2025-66176

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

8.8CVSS0.00509EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/13 1:47 a.m.6 views

CVE-2025-66176

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

8.8CVSS7.4AI score0.00509EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/13 1:47 a.m.5 views

CVE-2025-66176

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

8.8CVSS7.4AI score0.00509EPSS
SaveExploits0References2Affected Software18
CVE
CVE
added 2026/01/13 1:47 a.m.39 views

CVE-2025-66176

CVE-2025-66176 describes a stack overflow in the device Search and Discovery feature of Hikvision Access Control Products. Reported as exploitable by an attacker on the same LAN who can cause device malfunction by sending specially crafted packets to an unpatched device. Affected product scope is...

8.8CVSS7.4AI score0.00509EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.11 views

Hikvision Partial Access Control Series Products 安全漏洞

Hikvision Partial Access Control Series Products is a series of access control devices from Hikvision, a Chinese company. A security vulnerability exists in Hikvision Partial Access Control Series Products, which stems from a stack overflow in the device's search and discovery functionality, whic...

8.8CVSS7.5AI score0.00509EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-71098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip6gre: make ip6greheader robust Over the years, syzbot found many ways to crash the kernel in ip6greheader 1. This involves team or bonding drivers ability to...

5.5CVSS6AI score0.00119EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.12 views

PT-2026-3317

Name of the Vulnerable Software and Affected Versions Node.js version 25 Description A flaw in the permission model allows Unix Domain Socket UDS connections to bypass network restrictions when --permission is enabled. Even without --allow-net, attacker-controlled inputs, such as URLs or socketPa...

10CVSS6.8AI score0.00825EPSS
SaveExploits1References17
NVD
NVD
added 2026/01/12 11:15 p.m.12 views

CVE-2026-22212

TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy and strcat functions when constructing device paths during automatic device discovery. A local attacker can exploit this by...

4.8CVSS0.00121EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/12 11:02 p.m.39 views

CVE-2026-22212 TinyOS <= 2.1.2 Stack-Based Buffer Overflow in mcp2200gpio

TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy and strcat functions when constructing device paths during automatic device discovery. A local attacker can exploit this by...

4.8CVSS0.00121EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/12 11:02 p.m.14 views

CVE-2026-22212 TinyOS <= 2.1.2 Stack-Based Buffer Overflow in mcp2200gpio

TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy and strcat functions when constructing device paths during automatic device discovery. A local attacker can exploit this by...

4.8CVSS6.3AI score
SaveExploits0References5
CVE
CVE
added 2026/01/12 11:02 p.m.38 views

CVE-2026-22212

CVE-2026-22212 concerns TinyOS up to 2.1.2, where the mcp2200gpio utility is vulnerable to a stack-based buffer overflow. The root cause is unsafe use of strcpy() and strcat() when constructing device paths during automatic device discovery, allowing a local attacker to craft filenames under /dev...

4.8CVSS6.7AI score0.00121EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/12 11:02 p.m.8 views

CVE-2026-22212 TinyOS <= 2.1.2 Stack-Based Buffer Overflow in mcp2200gpio

TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy and strcat functions when constructing device paths during automatic device discovery. A local attacker can exploit this by...

4.8CVSS6.7AI score0.00121EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/12 6:15 p.m.12 views

ALPINE-CVE-2025-68468

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they...

6.5CVSS5.4AI score0.00344EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/12 6:15 p.m.13 views

AZL-74277 CVE-2025-68471 affecting package avahi for versions less than 0.8-5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart...

6.5CVSS5.8AI score0.00367EPSS
SaveExploits1References1
OSV
OSV
added 2026/01/12 6:15 p.m.15 views

ALPINE-CVE-2025-68276

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon with wide-area disabled by creating record browsers with the AVAHILOOKUPUSEWIDEAREA flag set via D-Bus. This can ...

5.5CVSS5.4AI score0.00145EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/12 6:15 p.m.14 views

CVE-2025-68276

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon with wide-area disabled by creating record browsers with the AVAHILOOKUPUSEWIDEAREA flag set via D-Bus. This can ...

5.5CVSS0.00145EPSS
SaveExploits0References3
Rows per page
Query Builder