Lucene search
+L

15 matches found

NVD
NVD
•added 2026/09/15 10:17 p.m.•17 views

CVE-2026-76860

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wakeupset.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...

8.8CVSS0.00549EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/15 9:57 p.m.•33 views

CVE-2026-76860 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wakeupset.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...

8.8CVSS0.00549EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/15 9:57 p.m.•16 views

CVE-2026-76860 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wakeupset.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...

8.8CVSS6.2AI score0.00549EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/15 9:57 p.m.•26 views

CVE-2026-76860

Netcore NR255-V version 1.5.130703 is affected by a stack-based buffer overflow in the wake_up_set.cgi endpoint. The root cause is unbounded tokenization of MAC and ID input , allowing a network attacker with low privileges to supply crafted values that overflow the stack buffer and corrupt progr...

8.8CVSS6.2AI score0.00549EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•18 views

PT-2026-93194

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake up set.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...

8.8CVSS6.1AI score0.00549EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/15 12:00 a.m.•48 views

PT-2026-72845

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rtw89 wifi driver where the mac id field in RX descriptors, which is 8 bits wide 0-255, is used as an array index for assoc link on macid without validation. Since...

8.8CVSS7.6AI score0.00375EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2026/02/05 12:24 a.m.•14 views

SUSE CVE-2026-23084

In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in becmdgetmacfromlist When the parameter pmacidvalid argument of becmdgetmacfromlist is set to false, the driver may request the PMACID from the firmware of the network card, and this functio...

4.4CVSS5.7AI score0.00143EPSS
SaveExploits0References20
EUVD
EUVD
•added 2026/02/04 4:08 p.m.•17 views

EUVD-2026-5458

In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in becmdgetmacfromlist When the parameter pmacidvalid argument of becmdgetmacfromlist is set to false, the driver may request the PMACID from the firmware of the network card, and this functio...

5.7AI score0.00143EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/02/27 3:06 a.m.•11 views

SUSE CVE-2022-49471

In the Linux kernel, the following vulnerability has been resolved: rtw89: cfo: check macid to avoid out-of-bounds Somehow, hardware reports incorrect macid and pollute memory. Check index before we access the array. UBSAN: array-index-out-of-bounds in rtw89/phy.c:2517:23 index 188 is out of rang...

5.5CVSS6.3AI score0.00321EPSS
SaveExploits0References3
NVD
NVD
•added 2025/02/26 7:01 a.m.•19 views

CVE-2022-49471

In the Linux kernel, the following vulnerability has been resolved: rtw89: cfo: check macid to avoid out-of-bounds Somehow, hardware reports incorrect macid and pollute memory. Check index before we access the array. UBSAN: array-index-out-of-bounds in rtw89/phy.c:2517:23 index 188 is out of rang...

8.8CVSS0.00321EPSS
SaveExploits0References3
OSV
OSV
•added 2025/02/26 7:01 a.m.•9 views

DEBIAN-CVE-2022-49471

In the Linux kernel, the following vulnerability has been resolved: rtw89: cfo: check macid to avoid out-of-bounds Somehow, hardware reports incorrect macid and pollute memory. Check index before we access the array. UBSAN: array-index-out-of-bounds in rtw89/phy.c:2517:23 index 188 is out of rang...

7.8CVSS5.3AI score0.00321EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/26 2:13 a.m.•6 views

CVE-2022-49471 rtw89: cfo: check mac_id to avoid out-of-bounds

In the Linux kernel, the following vulnerability has been resolved: rtw89: cfo: check macid to avoid out-of-bounds Somehow, hardware reports incorrect macid and pollute memory. Check index before we access the array. UBSAN: array-index-out-of-bounds in rtw89/phy.c:2517:23 index 188 is out of rang...

7.5AI score0.00321EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2025/02/06 4:28 p.m.•5 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: rtw89: cfo: check macid to avoid out-of-bounds Somehow, hardware reports incorrect macid and pollute memory. Check index before we access the array. UBSAN: array-index-out-of-bounds in rtw89/phy.c:2517:23 index 188 is out of rang...

7.8CVSS6.5AI score0.00321EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/05/21 1:59 a.m.•12 views

SUSE CVE-2024-35913

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pick the version of SESSIONPROTECTIONNOTIF When we want to know whether we should look for the macid or the linkid in struct iwlmvmsessionprotnotif, we should look at the version of SESSIONPROTECTIONNOTIF. Thi...

5.5CVSS6.5AI score0.00226EPSS
SaveExploits0References10
OSV
OSV
•added 2024/05/19 9:15 a.m.•5 views

DEBIAN-CVE-2024-35913

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pick the version of SESSIONPROTECTIONNOTIF When we want to know whether we should look for the macid or the linkid in struct iwlmvmsessionprotnotif, we should look at the version of SESSIONPROTECTIONNOTIF. Thi...

5.5CVSS5.7AI score0.00226EPSS
SaveExploits0References1
Rows per page
Query Builder