Lucene search
+L

78978 matches found

Cvelist
Cvelist
added 2026/03/31 3:45 p.m.41 views

CVE-2026-5204 Tenda CH22 Parameter webtypelibrary formWebTypeLibrary stack-based overflow

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack can be initiated remotely. The exploi...

9CVSS0.02475EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/03/31 3:45 p.m.12 views

CVE-2026-5204 Tenda CH22 Parameter webtypelibrary formWebTypeLibrary stack-based overflow

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack can be initiated remotely. The exploi...

9CVSS6.5AI score0.02475EPSS
SaveExploits1References5
SUSE Linux
SUSE Linux
added 2026/03/31 9:04 a.m.18 views

Security update for libjxl

This update for libjxl fixes the following issue: CVE-2024-11498: Resource exhaustion via Stack overflow in libjxl bsc1233785. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

5.7CVSS6.7AI score0.00603EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/31 9:04 a.m.5 views

SUSE-SU-2026:1154-1 Security update for libjxl

This update for libjxl fixes the following issue: - CVE-2024-11498: Resource exhaustion via Stack overflow in libjxl bsc1233785...

7.5CVSS6.7AI score0.00603EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/03/31 9:03 a.m.10 views

SUSE CVE-2016-20038

yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the...

8.6CVSS6.6AI score0.00177EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/03/31 9:02 a.m.8 views

SUSE CVE-2017-20229

MAWK 1.3.3-17 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting inadequate boundary checks on user-supplied input. Attackers can craft malicious input that overflows the stack buffer and execute a return-oriented programmi...

9.8CVSS6.6AI score0.00602EPSS
SaveExploits1References3
SUSE Linux
SUSE Linux
added 2026/03/31 8:40 a.m.8 views

Security update for perl-XML-Parser

This update for perl-XML-Parser fixes the following issues: CVE-2006-10002: heap buffer overflow in parsestream when processing UTF-8 input streams bsc1259901. CVE-2006-10003: off-by-one heap buffer overflow in stserialstack bsc1259902. Patch Instructions: To install this SUSE update use the SUSE...

8.8CVSS6.1AI score0.00604EPSS
SaveExploits0References8
OSV
OSV
added 2026/03/31 8:40 a.m.4 views

SUSE-SU-2026:1153-1 Security update for perl-XML-Parser

This update for perl-XML-Parser fixes the following issues: - CVE-2006-10002: heap buffer overflow in parsestream when processing UTF-8 input streams bsc1259901. - CVE-2006-10003: off-by-one heap buffer overflow in stserialstack bsc1259902...

9.8CVSS6.1AI score0.00604EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/03/31 8:37 a.m.11 views

SUSE CVE-2026-5037

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS6.2AI score0.00128EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2026/03/31 8:28 a.m.8 views

Security update for perl-XML-Parser

This update for perl-XML-Parser fixes the following issues: CVE-2006-10002: heap buffer overflow in parsestream when processing UTF-8 input streams bsc1259901. CVE-2006-10003: off-by-one heap buffer overflow in stserialstack bsc1259902. Patch Instructions: To install this SUSE update use the SUSE...

8.8CVSS6AI score0.00604EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/03/31 12:31 a.m.13 views

EUVD-2026-17252

A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parameter Handler. This manipulation of the argument mitlinktype causes stack-based buffer overflow. The attack is possible to be carried out remotely. Th...

9CVSS6.4AI score0.00632EPSS
SaveExploits1References6
EUVD
EUVD
added 2026/03/31 12:31 a.m.18 views

EUVD-2026-17249

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been mad...

9CVSS7.8AI score0.00773EPSS
SaveExploits1References6
NVD
NVD
added 2026/03/31 12:16 a.m.10 views

CVE-2026-5156

A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parameter Handler. This manipulation of the argument mitlinktype causes stack-based buffer overflow. The attack is possible to be carried out remotely. Th...

9CVSS0.00632EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.23 views

iccDEV 安全漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.6 contained security vulnerabilities; these vulnerabilities stemmed from stack overflows during the processing of custom ICC configuration files, which coul...

6.2CVSS5.9AI score0.00222EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.18 views

D-Link多款产品 安全漏洞

D-Link DNS-320, etc., are products of D-Link Corporation, a Chinese company. The D-Link DNS-320 is a NAS Network Attached Storage device. The D-Link DNS-320L is also a NAS device. The D-Link DNS-120 is a network storage adapter. Several D-Link products have security vulnerabilities, which stem fr...

9CVSS7.7AI score0.00715EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2026/03/31 12:00 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2025-66215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or...

6.8CVSS5.3AI score0.00159EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/03/31 12:00 a.m.29 views

PT-2026-29390

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack-buffer-overflow SBO in CIccCalculatorFunc::Apply when processed via iccApplyNamedCmm. Under AddressSanitizer, the failure is reported as...

6.2CVSS5.8AI score0.00156EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.16 views

Tenda CH22 安全漏洞

The Tenda CH22 is a network device produced by the Chinese company Tenda. Version 1.0.0.1 of the Tenda CH22 contains a security vulnerability. This vulnerability arises from incorrect handling of parameters related to the webSiteId in the component Parameter Handler, resulting in a stack buffer...

9CVSS7.6AI score0.02475EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.16 views

Tenda CH22 安全漏洞

The Tenda CH22 is a network device produced by the Chinese company Tenda. Version 1.0.0.1 of the Tenda CH22 contains a security vulnerability. This vulnerability arises from incorrect handling of the parameter “mitlinktype” in the file/goform/QuickIndex, which may lead to a stack buffer overflow...

9CVSS7.7AI score0.00632EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/03/31 12:00 a.m.19 views

PT-2026-29267

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the Parameter Handler component of the Tenda CH22. Specifically, the formWebTypeLibrary function within the /goform/webtypelibrary file is susceptible to a stack-based buffer overflow. Th...

9CVSS7.7AI score0.02475EPSS
SaveExploits1References9
Rows per page
Query Builder