TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability, which stems from a stack buffer overflow in the boa formIpQos mac function. Attackers can exploit this vulnerability by sending specially crafted HTTP requests, resulting in arbitrary code execution...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version contains a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formUpload function, which may allow authenticated attackers to execute arbitrary code through specially crafted HTTP...

TOTOLINK X2000R buffer error vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in the dhcpdns1 parameter within the boa formIpv6Setup dhcpdns functionality. specially crafted HTTP requests can lead to arbitrary cod...

HMS Networks PEAK-System Device Driver Setup input validation error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain an input validation error vulnerability. This vulnerability arises because the PCAN parser utilizes a DLC index length table controlled by...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version contains a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formTR069Config function. An authenticated attacker can exploit this vulnerability by sending a specially crafted HTTP...

TOTOLINK X2000R buffer error vulnerability

The TOTOLINK X2000R contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in the pppoedns1 parameter within the boa formIpv6Setup pppoe functionality, potentially allowing authenticated attackers to execute arbitrary code via specially crafted HTTP requests...

TOTOLINK X2000R Buffer Error Vulnerability

TOTOLINK X2000R V1.0.0-B20250421.1327 version has a buffer overflow vulnerability. This vulnerability stems from an stack buffer overflow in the vpnUser parameter of the boa formFilter function. It may allow authenticated attackers to execute arbitrary code through specially crafted HTTP requests...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formMapDelDevice hostname function. Authorized attackers can exploit this vulnerability through specially crafted HTTP requests, resulting in arbitrary code execution...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from the pppoedns2 parameter in the boa formIpv6Setup pppoe function, where a stack buffer overflow occurs. This could allow authenticated attackers to execute arbitrary code through specially crafted HTTP requests...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from the static network configuration feature of boa formIpv6Setup, where the staticdns1 parameter involves a stack buffer overflow. Attackers can exploit this vulnerability through authenticated HTTP requests,...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer error vulnerability. This vulnerability stems from a stack buffer overflow, which may allow remote authenticated attackers to execute arbitrary code...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formUploadFile function. Authorized attackers can trigger this vulnerability through specially crafted HTTP requests, allowing arbitrary code to execute...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the log settings function, which could allow authenticated attackers to execute arbitrary code...

Security update for python3, python3-base, python3-doc

This update for python3, python3-base, python3-doc fixes the following issues: Security issues fixed: CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. CVE-2026-9669: crafted input can cause a stack buffer...

SUSE-SU-2026:4744-1 Security update for python3, python3-base, python3-doc

This update for python3, python3-base, python3-doc fixes the following issues: Security issues fixed: - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. - CVE-2026-9669: crafted input can cause a stack buffe...

Security update for python36

This update for python36 fixes the following issues: Security issues fixed: CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives bsc1274743. CVE-2026-3219: pip doesn't reject concatenated ZIP bsc1262429...

SUSE-SU-2026:4743-1 Security update for python36

This update for python36 fixes the following issues: Security issues fixed: - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives bsc1274743. - CVE-2026-3219: pip doesn't reject concatenated ZIP bsc1262429. -...

CVE-2026-112281 libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi

libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoderhandlecsi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over...

CVE-2026-112281 libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi

libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoderhandlecsi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over...

CVE-2026-112281

The libaribb24 (aribb24) library, through version 1.0.3 , is vulnerable to a stack-based buffer overflow in the decoder_handle_csi() function located in src/decoder.c. The root cause is the handling of unbounded CSI parameter bytes, which allows an attacker to write past a fixed 256-entry array. ...