7303 matches found
CVE-2025-47760
V-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6MemInIF!settemptypedefault function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution...
CVE-2025-47759
V-SFT (Fuji Electric) versions 6.2.5.0 and earlier are affected by a stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom. Opening specially crafted V7 or V8 files may cause a crash, information disclosure, and arbitrary code execution. Connected advisories confirm the vulnerabl...
Alibaba Cloud Linux 3 : 0065: gstreamer1 (ALINUX3-SA-2025:0065)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0065 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-0444: GStreamer AV1 Video Parsing...
CVE-2025-4809
A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function fromSafeSetMacFilter of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely...
CVE-2025-4890
A vulnerability was found in code-projects Tourism Management System 1.0 and classified as critical. This issue affects the function LoginUser of the component Login User. The manipulation of the argument username/password leads to stack-based buffer overflow. Attacking locally is a requirement...
CVE-2025-4883
A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been declared as critical. This vulnerability affects the function ctxzasp of the file /ctxz.asp of the component Connection Limit Page. The manipulation of the argument def/defTcp/defUdp/defIcmp/defOther leads to stack-based buffer...
PT-2025-21860 · Code Projects · Code-Projects Police Station Management System
Name of the Vulnerable Software and Affected Versions: code-projects Police Station Management System version 1.0 Description: A critical vulnerability was found in the code-projects Police Station Management System. The issue affects the criminal::remove function of the source.cpp file in the...
CVE-2025-4842
A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. This vulnerability affects the function isUCPCameraNameChanged of the file /sbin/ucp. The manipulation of the argument CameraName leads to stack-based buffer overflow. The attack can be initiated remotely. The...
CVE-2025-4842
CVE-2025-4842 affects D-Link DCS-932L (firmware 2.18.01). The vulnerability lies in the isUCPCameraNameChanged function in /sbin/ucp, where unsafely handling the CameraName parameter causes a stack-based buffer overflow. Reported as remotely exploitable with publicly disclosed exploit; product is...
CVE-2025-4841
This CVE affects D-Link DCS-932L firmware 2.18.01. The vulnerability is a stack-based buffer overflow in /bin/gpio at sub_404780 triggered by manipulating the CameraName argument, allowing remote exploitation. Multiple sources confirm the issue and note the product is no longer supported; no offi...
CVE-2025-4809 Tenda AC7 setMacFilterCfg fromSafeSetMacFilter stack-based overflow
A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function fromSafeSetMacFilter of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely...
CVE-2025-4809 Tenda AC7 setMacFilterCfg fromSafeSetMacFilter stack-based overflow
A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function fromSafeSetMacFilter of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely...
CVE-2025-4809
CVE-2025-4809 affects Tenda AC7 (version 15.03.06.44). The vulnerability is in the fromSafeSetMacFilter function of /goform/setMacFilterCfg; manipulating the deviceList argument causes a stack-based buffer overflow. Remote access is possible, and the exploit has been disclosed publicly. Multiple ...
PT-2025-21759 · Tenda · Tenda Ac7
Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: A critical issue was found in the function fromSafeSetMacFilter of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to a stack-based buffer overflow. This issue can...
CVE-2025-32756
A stack-based buffer overflow vulnerability CWE-121 vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8,...
CVE-2025-46836 net-tools Stack-based Buffer Overflow vulnerability
net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...
CVE-2025-46836 net-tools Stack-based Buffer Overflow vulnerability
net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...
Alibaba Cloud Linux 3 : 0089: opensc (ALINUX3-SA-2022:0089)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0089 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-26570: The Oberthur smart card...
CVE-2025-4544
A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /ddos.asp of the component jhttpd. The manipulation of the argument defmax/deftime/deftcpmax/deftcptime/defudpmax/defudptime/deficmpmax leads to...