PT-2025-31264 · Sonicwall · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicWall versions prior to 7.3.0-7012 Description: A format string vulnerability exists in the SonicOS SSL VPN interface, allowing a remote, unauthenticated attacker to cause a denial-of-service DoS condition. The vulnerability is due to the...

The vulnerability of the built-in web server boa (/boafrm/formWlanMultipleAP) of TOTOLINK A702R router software allows a intruder to cause a service failure.

The vulnerability of the built-in web server boa /boafrm/formWlanMultipleAP of TOTOLINK A702R router software is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to cause service...

The vulnerability of the formdeleteUserName() function in the Tenda CH22 router software allows a hacker to cause a service failure.

The vulnerability of the formdeleteUserName function in the Tenda CH22 router software lies in the copying of buffers without checking the size of the input data when processing the oldaccount parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the Citrix ADC application delivery controller (formerly Citrix NetScaler Application Delivery Controller) and the Citrix Gateway virtual environment access control system (formerly Citrix NetScaler Gateway) relates to an operation that goes beyond the buffer in memory, allowing a malicious actor to cause service failures.

The vulnerability of the Citrix ADC application delivery controller formerly Citrix NetScaler Application Delivery Controller and the Citrix Gateway virtual environment access control system formerly Citrix NetScaler Gateway is related to an operation that goes beyond the buffer in memory...

CVE-2025-8183 NULL Pointer Dereference in µD3TN

NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably cause DoS...

CVE-2025-31701

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption e.g., crashes or remote code execution RCE. Some devices may have deployed protection mechanisms such as...

Tenda AC23 Buffer Overflow Vulnerability

Tenda AC23 is a high performance wireless router from Tenda Technology. A buffer overflow vulnerability exists in Tenda AC23 version 16.03.07.52, which originates from the mishandling of the deviceList parameter in the sub46C940 function in the httpd component/goform/setMacFilterCfg file. An...

The vulnerability of the fromP2pListFilter() function in the software for Tenda FH451 routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromP2pListFilter function in the Tenda FH451 router’s software lies in the fact that the operation exceeds the buffer limits in memory when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

The vulnerability of the formLanSetupRouterSettings() function in D-Link DIR-513 router microprogramming software, a built-in web server, allows a hacker to cause a service failure.

The vulnerability of the formLanSetupRouterSettings function in the embedded web server of D-Link’s DIR-513 router software is related to the issue where data is written out of the buffer into memory when processing the curTime parameter. Exploiting this vulnerability could allow a remote attacke...

The vulnerability of the tipc_aead_encrypt_done() function in the net/tipc/crypto.c module of Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the tipcaeadencryptdone function in the net/tipc/crypto.c module of Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the upnp_ctrl_asp() function in the JHTTPD web server of the D-Link DI-8100 router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the upnpctrlasp function in the JHTTPD web server of the D-Link DI-8100 microprogrammed router software is related to the execution of operations outside the buffer in memory when processing the removeextproto and removeextport parameters. Exploitation of this vulnerability...

The vulnerability of the formSetWanDhcpplus() function in D-Link DIR-513 router software allows a hacker to induce a service failure.

The vulnerability of the formSetWanDhcpplus function in the microprogramming software for D-Link DIR-513 is related to the operation of writing data outside of the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could allow a remote attacker to cause a servic...

CVE-2025-31701

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption e.g., crashes or remote code execution RCE. Some devices may have deployed protection mechanisms such as...

CVE-2025-31700

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption e.g., crashes or remote code execution RCE. Some devices may have deployed protection mechanisms such as...

CVE-2025-31701

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption e.g., crashes or remote code execution RCE. Some devices may have deployed protection mechanisms such as...

CVE-2025-31700

CVE-2025-31700 affects Dahua security cameras (various IPC/SD series) with a buffer overflow in ONVIF request handling (stack-based) and in the RPC file upload handler. Exploitation could cause denial-of-service or remote code execution; some devices may have ASLR which can mitigate RCE likelihoo...

The vulnerability of the qosClassifier() function (/goform/qosClassifier) in D-Link DIR-816 router software allows a attacker to cause a service failure.

The vulnerability of the qosClassifier function /goform/qosClassifier of D-Link DIR-816 router software lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending ...

The vulnerability of the fromSetIpBind() function in the /goform/SetIpBind library of the Tenda FH451 router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetIpBind function in the /goform/SetIpBind microprogramming system for Tenda FH451 routers is related to buffer overflows when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

Dahua IPC Series 安全漏洞

Dahua IPC Series is a series of network cameras from Dahua China. A security vulnerability exists in the Dahua IPC Series that originates from a buffer overflow that could result in service interruption or remote code execution...

Ivanti Avalanche Manager Buffer Overflow Vulnerability

Ivanti Avalanche Manager is an enterprise mobile device management system developed by Ivanti for managing smartphones, tablets and other mobile devices. A buffer overflow vulnerability exists in Ivanti Avalanche Manager, which arises from a program that does not properly manage memory allocation...