Lucene search
K

2086 matches found

OSV
OSV
added 2025/12/02 1:15 p.m.1 views

CVE-2025-11780

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'showMeterReport' function, there is an unlimited user input that is copied to a fixed-size buffer via 'sprintf'. The 'GetParametermeter' function retrieves the user input, which is directly incorporated in...

9.8CVSS6.1AI score0.00273EPSS
Exploits0References1
OSV
OSV
added 2025/12/02 1:15 p.m.2 views

CVE-2025-11778

Stack-based buffer overflow in Circutor SGE-PLC1000/SGE-PLC50 v0.9.2. This vulnerability allows an attacker to remotely exploit memory corruption through the 'readpacket' function of the TACACSPLUS implementation...

9.8CVSS6.1AI score0.00295EPSS
Exploits0References1
CVE
CVE
added 2025/12/02 12:58 p.m.12 views

CVE-2025-11780

CVE-2025-11780 describes a stack-based buffer overflow in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The vulnerability stems from an unlimited user input retrieved via GetParameter(meter) being copied into a fixed-size buffer in the function showMeterReport() using sprintf() without size validation. ...

9.8CVSS6.8AI score0.00273EPSS
Exploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/01 9:42 a.m.7 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is affected by a denial of service in glassfish jso np and vulnerable to CVE-2025-36097

Summary IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is affected by a denial of service in glassfish jso np and vulnerable to CVE-2025-36097. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

7.5CVSS6.7AI score0.00399EPSS
Exploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/11/26 12:20 a.m.3 views

CVE-2025-64657

Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS5.8AI score0.00523EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/20 12:26 p.m.7 views

CVE-2025-40601

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash...

0.0106EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2025/11/20 8:0 a.m.5 views

Azure Application Gateway Elevation of Privilege Vulnerability

Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS7.4AI score0.00523EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/11/20 12:0 a.m.3 views

PT-2025-47652

Name of the Vulnerable Software and Affected Versions Azure Application Gateway affected versions not specified Description A stack-based buffer overflow exists in Azure Application Gateway. This allows an unauthorized attacker to elevate privileges over a network. The issue requires no...

9.8CVSS7.1AI score0.00523EPSS
Exploits0References13
OSV
OSV
added 2025/11/13 6:15 p.m.2 views

CVE-2025-60693

A stack-based buffer overflow exists in the getmergemac function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function concatenates up to six user-supplied CGI parameters matching 05 into a fixed-size buffer a2 without proper bounds checking, appending...

6.5CVSS6.6AI score0.00814EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/11/13 12:0 a.m.5 views

CVE-2025-60691

A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The applycgi and blockcgi functions copy user-supplied input from the "url" CGI parameter into stack buffers v36, v29 using sprintf without bounds checking. Because these buffe...

0.0078EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/11/04 9:37 p.m.3 views

CVE-2025-54526 Fuji Electric Monitouch V-SFT-6 Stack-based Buffer Overflow

Fuji Electric Monitouch V-SFT-6 is vulnerable to a stack-based buffer overflow while processing a specially crafted project file, which may allow an attacker to execute arbitrary code...

8.4CVSS7.3AI score0.00152EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/11/04 9:37 p.m.7 views

CVE-2025-54526 Fuji Electric Monitouch V-SFT-6 Stack-based Buffer Overflow

Fuji Electric Monitouch V-SFT-6 is vulnerable to a stack-based buffer overflow while processing a specially crafted project file, which may allow an attacker to execute arbitrary code...

8.4CVSS0.00152EPSS
Exploits0References3
CloudLinux
CloudLinux
added 2025/10/30 9:29 p.m.5 views

libxml2: Fix of 2 CVEs

CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c - CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c...

9.8CVSS8.2AI score0.0113EPSS
Exploits0
EUVD
EUVD
added 2025/10/29 3:31 p.m.4 views

EUVD-2024-55043

A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field...

9.8CVSS7.1AI score0.00435EPSS
Exploits0References3
Zero Day Initiative
Zero Day Initiative
added 2025/10/29 12:0 a.m.4 views

Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ASDA-Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00191EPSS
Exploits0References1
OSV
OSV
added 2025/10/28 1:50 p.m.3 views

JLSEC-2025-196 A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calcula...

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input...

7.5CVSS6.8AI score0.01067EPSS
Exploits1References26
Vulnrichment
Vulnrichment
added 2025/10/27 9:32 a.m.2 views

CVE-2025-12258 TOTOLINK A3300R POST Parameter cstecgi.cg setOpModeCfg stack-based overflow

A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in stack-based buffer overflow. The attack may be performed from...

9CVSS6.8AI score0.00843EPSS
Exploits1References5
NVD
NVD
added 2025/10/27 5:15 a.m.5 views

CVE-2025-12225

A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown processing of the file /goform/WifiGuestSet of the component HTTP Request Handler. Such manipulation of the argument shareSpeed leads to stack-based buffer overflow. The attack may be launched remotely. The...

9CVSS0.00848EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/20 3:30 p.m.1 views

EUVD-2025-35057

Stack-based Buffer Overflow in lwsadnsparselabel in warmcat libwebsockets allows, when the LWSWITHSYSASYNCDNS flag is enabled during compilation, to overflow the labelstack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer...

7.5CVSS6.6AI score0.00248EPSS
Exploits0References3
OSV
OSV
added 2025/10/16 2:15 a.m.3 views

CVE-2025-62580

ASDA-Soft Stack-based Buffer Overflow Vulnerability...

7.8CVSS5.8AI score0.00185EPSS
Exploits0References1
Rows per page
Query Builder