Lucene search
K

33986 matches found

CNNVD
CNNVD
added 2026/04/09 12:0 a.m.5 views

osslsigncode 缓冲区错误漏洞

Osslsigncode is a small tool developed by Michał Trojnara as an individual developer. It implements some of the functions of the Microsoft tool signtool.exe. Versions of Osslsigncode prior to version 2.12 contained a buffer error vulnerability. This vulnerability stemmed from multiple signature...

7.8CVSS6.1AI score0.00163EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/09 12:0 a.m.4 views

wolfSSL(CyaSSL) 安全漏洞

WolfSSL CyaSSL is a small, portable embedded SSL programming library developed by the American company wolfSSL, designed for developers working with embedded systems. WolfSSL CyaSSL has security vulnerabilities; these vulnerabilities stem from two potential stack overflow points in the...

9.8CVSS5.9AI score0.00283EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/09 12:0 a.m.5 views

Tenda F451 安全漏洞

The Tenda F451 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.7 of the Tenda F451 contains a security vulnerability. This vulnerability stems from the operation of the mitssid parameter in the formWrlsafesets function of the/goform/AdvSetWrlsafeset file, which may lead ...

9CVSS7.8AI score0.00511EPSS
Exploits0References5
CNVD
CNVD
added 2026/04/09 12:0 a.m.4 views

Delta Electronics ASDA-Soft Stack Buffer Overflow Vulnerability

Delta Electronics ASDA-Soft is an AC servo motor from Delta Electronics China. The Delta Electronics ASDA-Soft suffers from a stack buffer overflow vulnerability caused by incorrect boundary checking when parsing an incorrectly formatted .par file, which can be exploited by an attacker to execute...

8.4CVSS8.2AI score0.00339EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/04/09 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-39853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in...

7.8CVSS6.2AI score0.00163EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/08 11:15 p.m.26 views

CVE-2026-5815 D-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflow

A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03. Impacted is the function hedwigcgimain of the file /cgi-bin/hedwig.cgi. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. This vulnerability only...

9CVSS0.005EPSS
Exploits0References6
CVE
CVE
added 2026/04/08 11:15 p.m.12 views

CVE-2026-5815

CVE-2026-5815 affects D-Link DIR-645, versions 1.01–1.03. The vulnerability is in the hedwigcgi_main function of /cgi-bin/hedwig.cgi, causing a stack-based buffer overflow. It is exploitable remotely, with a public exploit available. The issue impacts products no longer supported by the maintaine...

9CVSS7.8AI score0.005EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/04/08 11:15 p.m.6 views

CVE-2026-5815 D-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflow

A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03. Impacted is the function hedwigcgimain of the file /cgi-bin/hedwig.cgi. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. This vulnerability only...

9CVSS6.3AI score0.005EPSS
Exploits0References6
EUVD
EUVD
added 2026/04/08 9:33 p.m.0 views

EUVD-2026-20542

A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a specially crafted configuration file. Successful exploitation may cause a crash and could allow...

7.3CVSS6.6AI score0.00418EPSS
Exploits0References5
NVD
NVD
added 2026/04/08 7:25 p.m.2 views

CVE-2026-30814

A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a specially crafted configuration file. Successful exploitation may cause a crash and could allow...

8CVSS0.00418EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/08 5:52 p.m.6 views

CVE-2026-30814 Buffer Overflow Vulnerability in TP-Link AX53

A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a specially crafted configuration file. Successful exploitation may cause a crash and could allow...

7.3CVSS6.6AI score0.00418EPSS
Exploits0References4
OSV
OSV
added 2026/04/08 1:30 p.m.9 views

CLSA-2026-1775649722 libxml2: Fix of 6 CVEs

CVE-2024-34459: fix buffer over-read in xmlHTMLPrintFileContext in xmllint - CVE-2025-8732: fix stack overflow from self-referencing SGML CATALOG entries - CVE-2026-0989: add RelaxNG include recursion limit - CVE-2026-0990: prevent infinite recursion in xmlCatalogListXMLResolveURI -...

7.5CVSS6AI score0.02298EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.3 views

Delta Electronics ASDA-Soft 安全漏洞

Delta Electronics ASDA-Soft is an AC servo motor from Delta Electronics China. The Delta Electronics ASDA-Soft suffers from a stack buffer overflow vulnerability caused by incorrect boundary checking when parsing an incorrectly formatted .par file, which can be exploited by an attacker to execute...

8.4CVSS7.5AI score0.00339EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.3 views

TP-Link Archer AX53 安全漏洞

The TP-Link Archer AX53 is a dual-core router produced by TP-Link Corporation. Prior versions of the TP-Link Archer AX53, including v1.0, 1.7.1 Build 20260213, contained security vulnerabilities. These vulnerabilities were caused by a stack-based buffer overflow in the tmpServer module, which cou...

8CVSS6.3AI score0.00418EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/04/08 12:0 a.m.0 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006824)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006824 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: avoid stack overflow warnings with clang A previous patch worked around a...

7.8CVSS6.7AI score0.0033EPSS
Exploits0References4
Redos
Redos
added 2026/04/08 12:0 a.m.4 views

ROS-20260408-73-0006

A vulnerability in the fs/f2fs component of the Linux operating system kernel is related to a buffer overflow on the stack. Exploitation of the vulnerability allows an attacker to cause a denial of service...

5.5CVSS6.4AI score0.00137EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/04/07 11:1 p.m.3 views

CVE-2026-5686

A security flaw has been discovered in Tenda CX12L 16.03.53.12. This vulnerability affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released...

9CVSS7.8AI score0.00669EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/04/07 11:1 p.m.2 views

CVE-2026-5684

A vulnerability was determined in Tenda CX12L 16.03.53.12. Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack requires access to the local...

8.6CVSS7.7AI score0.00618EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/04/07 11:1 p.m.3 views

CVE-2026-5685

A vulnerability was identified in Tenda CX12L 16.03.53.12. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used...

9CVSS7.9AI score0.00694EPSS
Exploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/07 8:13 p.m.8 views

Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge

Summary Multiple security vulnerabilities impacting IBM Knowledge Catalog Premium Cartridge. These vulnerabilities had been addressed and customers should update to the recommended version of the product at the earliest opportunity. Vulnerability Details CVEID:CVE-2025-4565 DESCRIPTION: Any proje...

9.4CVSS7.4AI score0.01613EPSS
Exploits8Affected Software1
Rows per page
Query Builder