CVE-2026-123966 Tenda AC19 saveParentControlInfo heap-based overflow

A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. This manipulation of the argument deviceId causes heap-based buffer overflow. The attack is possible to be carried out remotely. The...

CVE-2026-123966

A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. This manipulation of the argument deviceId causes heap-based buffer overflow. The attack is possible to be carried out remotely. The...

CVE-2026-82308

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-77709

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-119923

A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS commands as the database process user via a...

EUVD-2026-118431

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-77709

A pre-authentication heap-based buffer overflow vulnerability exists in the SonicOS TACACS+ authentication client . Under specific conditions, a remote unauthenticated attacker could exploit this flaw to cause an application-level denial of service . This vulnerability is identified as CWE-122 an...

CVE-2026-77709

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-82308

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-82308

A pre-authentication heap-based buffer overflow vulnerability exists in the SonicOS SSL-VPN service . This flaw could allow a remote unauthenticated attacker to trigger an application-level denial of service . The vulnerability is tracked as CVE-2026-82308 and is associated with CWE-122 . While s...

EUVD-2026-118423

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-119923

A heap-based buffer overflow exists in the TDS prelogin parser of the Babelfish for PostgreSQL extension (versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4) and in Amazon Aurora PostgreSQL with Babelfish . This vulnerability allows remote attackers to execute arbitrary OS commands as the dat...

CVE-2026-119923 Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser

A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS commands as the database process user via a...

EUVD-2026-118415

A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS commands as the database process user via a...

CVE-2026-76181

A flaw was found in LibreOffice. The application's dBASE database driver fails to validate entry counts against page capacity and does not prevent circular page references when parsing index .ndx files. By convincing a user to open a data source with a specially crafted dBASE index file, an...

CVE-2026-122126

A flaw was found in reSIProcate. This vulnerability allows a malicious server or an on-path network attacker to cause a denial of service DoS by crashing the reTurn client. By sending oversized network frames that exceed the allocated buffer size, an attacker triggers a heap-based buffer overflow...

CVE-2026-100408

A flaw was found in Git for Windows within the git-credential-wincred credential helper. When erasing stored credentials that include a password, the helper calculates buffer sizes incorrectly for wide characters, resulting in a heap-based buffer overflow. An attacker who supplies crafted...

CVE-2026-123205

A flaw was found in accel-ppp. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by crashing the daemon through a heap-based buffer overflow. When verbose logging is enabled, an attacker can send a Layer 2 Tunneling Protocol L2TP connection request...

CVE-2026-102484

A flaw was found in NTPsec. This vulnerability allows an attacker who controls a Telephone JJY time source to crash the daemon, resulting in a Denial of Service DoS, or cause memory corruption. The issue stems from a heap-based buffer overflow in the JJY reference clock driver when processing mor...

CVE-2026-122127

CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers. Attackers can declare a small ring buffersize followed by a large decompressedsize to write up to 65535 controlled bytes and crash the...