35568 matches found
CVE-2026-67312 axios 0.28.0 before 0.33.0 Denial of Service via formToJSON
axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON exposed as axios.formToJSON and used internally when serializing FormData with Content-Type: application/json. When an application passes attacker-controlled FormData field names...
CVE-2026-67822
Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
UBUNTU-CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-15722
The CVE-2026-15722 entry concerns a pre-authentication stack buffer overflow in 389-ds-base. The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking, allowing a remote unauthentic...
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-43833
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43829
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43833
CVE-2026-43833 has concrete details in PT-security PT-2026-66675, which reports a stack-based buffer overflow in the upload functionality that allows code execution via a successful exploitation by an authenticated attacker. The CVSS data in the Initial document indicates NETWORK attack vector, l...
CVE-2026-43833
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43832
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43832 tbc
Full details and mitigation steps are currently restricted and will be published at a later date...
EUVD-2026-51389
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43831 tbc
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43831
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43829
Technical details for CVE-2026-43829 are not publicly available in the provided documents. No affected products, root cause, impact, or fixes are specified. Monitor for updates as more information is published.