Lucene search
+L

2201 matches found

EUVD
EUVD
•added 2025/11/20 12:00 a.m.•16 views

EUVD-2025-198268

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo...

4.3CVSS6.7AI score0.00245EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/20 12:00 a.m.•22 views

PT-2025-47579

Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.16 Description The Tenda AC21 version 16.03.08.16 device contains a buffer overflow issue. This occurs through the deviceId parameter within the ''/goform/saveParentControlInfo'' API endpoint. Providing a crafted...

4.3CVSS5.9AI score0.00245EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2025/11/20 12:00 a.m.•25 views

CVE-2025-65226

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo...

0.00245EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/20 12:00 a.m.•18 views

EUVD-2025-198266

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo...

4.3CVSS6.7AI score0.00294EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/11/20 12:00 a.m.•11 views

TencentOS Server 4: curl (TSSA-2024:0874)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0874 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

6.5CVSS6.7AI score0.01987EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/11/18 12:00 a.m.•13 views

Siemens SCALANCE and RUGGEDCOM Devices Incorrect Comparison (CVE-2024-9681)

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure HTTP:// scheme and perform transfers with host...

6.5CVSS6.8AI score0.01987EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•13 views

PT-2025-49081

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc4+ Description The devl rate nodes destroy function in the Linux kernel did not correctly unset the parent pointer for rate objects, leading to a dangling pointer in the devlink rate struct. This issue...

7.8CVSS6.2AI score0.00155EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/11/15 12:00 a.m.•16 views

The vulnerability of the get_parentControl_list_Info() function in the Tenda AX3 Wi-Fi router software allows a hacker to trigger a service failure.

The vulnerability of the getparentControllistInfo function in the Tenda AX3 Wi-Fi router software lies in buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6AI score0.00397EPSS
SaveExploits1References2Affected Software1
SUSE CVE
SUSE CVE
•added 2025/11/14 12:23 a.m.•20 views

SUSE CVE-2025-40205

In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...

5.5CVSS6.3AI score0.00143EPSS
SaveExploits0References21
CNVD
CNVD
•added 2025/11/14 12:00 a.m.•20 views

Tenda AX3 get_parentControl_list_Info function stack buffer overflow vulnerability

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a stack buffer overflow vulnerability that originates from the urls parameter in th...

7.5CVSS7.4AI score0.00397EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/13 12:30 a.m.•21 views

EUVD-2025-150369

In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...

6.3AI score0.00143EPSS
SaveExploits0References9
OSV
OSV
•added 2025/11/12 10:15 p.m.•28 views

AZL-70097 CVE-2025-40205 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...

7.8CVSS6.3AI score0.00143EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/12 9:56 p.m.•28 views

CVE-2025-40205 btrfs: avoid potential out-of-bounds in btrfs_encode_fh()

In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...

7.8CVSS0.00143EPSS
SaveExploits0References8
OSV
OSV
•added 2025/11/12 9:56 p.m.•19 views

CVE-2025-40205 btrfs: avoid potential out-of-bounds in btrfs_encode_fh()

In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...

7.8CVSS6.4AI score
SaveExploits0References11
RedHat Linux
RedHat Linux
•added 2025/11/11 9:13 a.m.•19 views

kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0

In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifotailenqueue will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifotailenqueue...

7.8CVSS6.1AI score0.00272EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/11/11 8:21 a.m.•32 views

kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0

In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifotailenqueue will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifotailenqueue...

7.8CVSS6.1AI score0.00272EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/11/11 8:21 a.m.•14 views

kernel: sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash

In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Fix se-slice being set to U64MAX and resulting crash There is a code path in dequeueentities that can set the slice of a schedentity to U64MAX, which sometimes results in a crash. The offending case is when...

5.5CVSS6AI score0.00186EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/11/10 9:30 p.m.•18 views

EUVD-2025-50808

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.1AI score0.00397EPSS
SaveExploits1References2
OSV
OSV
•added 2025/11/10 8:15 p.m.•19 views

CVE-2025-63149

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS5.9AI score0.00397EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/10 8:15 p.m.•18 views

CVE-2025-63149

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS0.00397EPSS
SaveExploits1References1
Rows per page
Query Builder