Lucene search
+L

6102 matches found

EUVD
EUVD
added 2026/04/02 6:31 p.m.13 views

EUVD-2026-18434

A stack-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within a configuration handling component due to insufficient input validation. An attacker can exploit this vulnerability by supplying an excessively long value for a vulnerable configuration parameter,...

7.1CVSS6.2AI score0.00259EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/04/02 6:31 p.m.13 views

EUVD-2026-18436

A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic. The implementation enforces length restrictions on the raw request path but does not account for path expansion performed during normalization. An attacker on the adjacent...

7.1CVSS6.1AI score0.00296EPSS
SaveExploits0References4
CVE
CVE
added 2026/04/02 5:20 p.m.30 views

CVE-2026-34124

TP-Link Tapo C520WS v2.6 contains a DoS in HTTP path parsing: the raw request path length is restricted but path expansion during normalization is not accounted for, enabling adjacent-network attackers to craft requests that may cause buffer overflow and memory corruption, potentially interruptin...

7.1CVSS6.1AI score0.00296EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/02 5:20 p.m.6 views

CVE-2026-34124

A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic. The implementation enforces length restrictions on the raw request path but does not account for path expansion performed during normalization. An attacker on the adjacent...

7.1CVSS6.1AI score0.00296EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/02 12:00 a.m.33 views

PT-2026-29894

Name of the Vulnerable Software and Affected Versions HiOS Switch Platform versions 09.1.00 through 09.4.04 and version 10.3.01. Description The HiOS Switch Platform contains a denial-of-service issue in the web interface. Remote attackers can reboot the affected device by sending a malicious HTT...

9.2CVSS5.5AI score0.00511EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/04/02 12:00 a.m.10 views

PT-2026-29851

A newly disclosed stack buffer overflow CVE-2026-34124 affects specific TP-Link devices within their HTTP server, potentially leading to Denial of Service DoS. The vulnerability is triggered by malformed HTTP GET requests, with the original summary also indicating a similar POST body overflow...

7.1CVSS5.9AI score0.00296EPSS
SaveExploits0References9
Amazon
Amazon
added 2026/04/01 12:00 a.m.44 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: smack: /smack/doi: accept previously used values CVE-2025-71304 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recvmsg unconditional requeue CVE-2026-23066 In the Linux kernel, the...

8.8CVSS5.3AI score0.00677EPSS
SaveExploits0
CNVD
CNVD
added 2026/03/31 12:00 a.m.32 views

Denial of Service Vulnerability in Siemens SICAM 8 Products

The SICAM A8000 RTU Remote Terminal Unit is a modular device for remote control and automation applications in all areas of energy supply.SICAM EGS Enhanced Grid Sensors is a gateway for local substations in the distribution network.The SICAM S8000 offers RTU functionality, PLCs, and communicatio...

7.1CVSS5.8AI score0.00269EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2026/03/28 10:51 a.m.13 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS6.1AI score0.0034EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/27 6:31 a.m.12 views

EUVD-2026-16551

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS6.1AI score0.0034EPSS
SaveExploits0References3
NVD
NVD
added 2026/03/27 6:16 a.m.13 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS0.0034EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/27 5:25 a.m.4 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS6.1AI score0.0034EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/03/27 5:25 a.m.52 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS0.0034EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/27 5:25 a.m.34 views

CVE-2026-33366

CVE-2026-33366 concerns BUFFALO Wi-Fi router products with a vulnerability in a critical function that is missing authentication, potentially allowing an attacker to forcibly reboot the device over the network without valid credentials. The issue is described with two CVSS vectors: CVSS3.0 base s...

6.9CVSS5.8AI score0.0034EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/27 12:00 a.m.19 views

PT-2026-28477

Name of the Vulnerable Software and Affected Versions BUFFALO Wi-Fi router products affected versions not specified Description A missing authentication check for a critical function allows an attacker to forcibly reboot the product without authentication. There is no information about the number...

6.9CVSS5.9AI score0.0034EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/03/26 3:04 p.m.20 views

CVE-2017-20222

Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot without authentication. Attackers can send POST requests to the lte.cgi endpoint with the Command=Reboot parameter to cause denial of...

8.7CVSS5.9AI score0.00706EPSS
SaveExploits2References1
NVD
NVD
added 2026/03/25 4:16 p.m.17 views

CVE-2026-20012

A vulnerability in the Internet Key Exchange version 2 IKEv2 feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance ASA Software, and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a...

8.6CVSS0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/25 4:03 p.m.294 views

CVE-2026-20012

The CVE-2026-20012 entry describes a memory-leak DoS in the IKEv2 handling of Cisco IOS, IOS XE, ASA, and FTDS (Threat Defense). Root cause: improper parsing of IKEv2 packets leading to conditions where devices reload (IOS/IOS XE) or exhaust memory to the point of instability (ASA/FTD). Affected ...

8.6CVSS5.8AI score0.00354EPSS
SaveExploits0References1Affected Software4
Vulnrichment
Vulnrichment
added 2026/03/25 4:03 p.m.6 views

CVE-2026-20012

A vulnerability in the Internet Key Exchange version 2 IKEv2 feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance ASA Software, and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a...

8.6CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Cisco
Cisco
added 2026/03/25 4:00 p.m.112 views

Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 2 IKEv2 feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance ASA Software, and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a...

8.6CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Rows per page
Query Builder