397301 matches found
CVE-2026-71938
Multiple DrayTek VigorSwitch models contain a buffer overflow in the switch_lan_gvrp function, caused by unsafe copying of the portList field into an undersized buffer. A remote attacker with valid administrative credentials for the device's web management interface can trigger the vulnerability ...
CVE-2026-71936
Multiple DrayTek VigorSwitch models contain a buffer overflow in the sysreboot function, caused by unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker with valid administrative credentials on the device's web management interface can trigger the flaw via crafted ...
EUVD-2026-64996
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poescheduleprofile function. The vulnerability is caused by repeated concatenation of the startdate, starttime, durationtime, howoften, weekdays, monthlydate, and cycleduration fields into small fixed-size buffers...
CVE-2026-71937 DrayTek VigorSwitch Multiple Models Buffer Overflow via poe_schedule_profile
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poescheduleprofile function. The vulnerability is caused by repeated concatenation of the startdate, starttime, durationtime, howoften, weekdays, monthlydate, and cycleduration fields into small fixed-size buffers...
EUVD-2026-64995
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service...
CVE-2026-71937
DrayTek VigorSwitch multiple models are affected by a buffer overflow in the poe_schedule_profile function. The root cause is repeated concatenation of scheduling fields (start_date, start_time, duration_time, how_often, weekdays, monthly_date, cycle_duration) into small fixed-size buffers withou...
CVE-2026-71935
Multiple DrayTek VigorSwitch models are affected by a stack-based buffer overflow in the webBackupAction function. The root cause is repeated string concatenation of the pathN , valueN , key , and option fields into fixed-size stack buffers without total length checks. A remote attacker with vali...
CVE-2026-71935 DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can...
EUVD-2026-64994
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can...
CVE-2026-71934 DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via...
CVE-2026-71934
Multiple DrayTek VigorSwitch models are affected by a buffer overflow in the pingtrace function, caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker with valid administrative credentials for the device's web manage...
EUVD-2026-64993
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via...
CVE-2026-71912
Multiple DrayTek VigorAP models are affected by a buffer overflow in the apautotest function, caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker with valid administrative credentials on the device's web management interface can trigger the fl...
EUVD-2026-64971
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...
EUVD-2026-64970
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted...
CVE-2026-71911
Multiple DrayTek VigorAP models are affected by a buffer overflow in the setLan function, caused by missing length checks during memory copy operations on the lanVlanId0 , lanIp , and lanNetmask fields. A remote attacker with valid administrative credentials on the device's web management interfa...
CVE-2026-71912 DrayTek VigorAP Multiple Models Buffer Overflow via apautotest
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...
ROOT-OS-DEBIAN-13-CVE-2026-27171 CVE-2026-27171 in zlib - Patched by Root
Root has patched CVE-2026-27171 in the zlib package for Root:Debian:13. Multiple fixed versions available...
CVE-2026-77652
A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...