Browse CVEs

HIGH 8.8 CVE-2025-43264 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted image may corrupt … macOS 15.6+ Fix from $1,9502026-04-02 HIGH 8.8 CVE-2026-5349 A vulnerability was identified in Trendnet TEW-657BRM 1.00.1. The affected element is the function add_apcdb of the file /setup.cgi. The manipulation… Tew 657brm Firmware No fix yet Fix from $1,9502026-04-02 HIGH 8.8 CVE-2026-5350 A security flaw has been discovered in Trendnet TEW-657BRM 1.00.1. The impacted element is the function update_pcdb of the file /setup.cgi. The manip… Tew 657brm Firmware No fix yet Fix from $1,9502026-04-02 MEDIUM 5.3 CVE-2026-5342 A flaw has been found in LibRaw up to 0.22.0. This affects the function LibRaw::nikon_load_padded_packed_raw of the file src/decoders/decoders_libraw… Libraw 0.22.1+ Fix from $1,6002026-04-02 HIGH 8.1 CVE-2026-5245 A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongoose.c of the component mDNS R… Mongoose 7.21+ Fix from $1,9502026-04-02 CRITICAL 9.8 CVE-2026-5244 A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mongoose.c of the component TLS… Mongoose 7.21+ Fix from $2,3002026-04-02 HIGH 8.8 CVE-2026-5317 A security flaw has been discovered in Nothings stb up to 1.22. This affects the function start_decoder of the file stb_vorbis.c. The manipulation re… Stb Vorbis.c after 1.22 Fix from $1,9502026-04-02 HIGH 8.8 CVE-2026-5315 A vulnerability was determined in Nothings stb up to 1.26. The affected element is the function stbtt__buf_get8 in the library stb_truetype.h of the … Stb Truetype.h after 1.26 Fix from $1,9502026-04-02 HIGH 8.8 CVE-2026-5314 A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component… Stb Truetype.h after 1.26 Fix from $1,9502026-04-01 CRITICAL 9.8 CVE-2026-34159 llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation … Llama.cpp Patch available Fix from $2,3002026-04-01 MEDIUM 5.3 CVE-2026-5235 A vulnerability was determined in Axiomatic Bento4 up to 1.6.0-641. This impacts the function AP4_BitReader::ReadCache of the file Ap4Dac4Atom.cpp of… Mitigation only Fix from $1,6002026-03-31 MEDIUM 5.3 CVE-2026-5236 A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_BitReader::SkipBits of the file Ap4Dac4Atom.cpp of t… Mitigation only Fix from $1,6002026-03-31 HIGH 8.8 CVE-2026-5214 A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L… Dnr 202l Firmware after 2026-02-05 Fix from $1,9502026-03-31 HIGH 8.8 CVE-2026-5213 A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS… Dnr 202l Firmware after 2026-02-05 Fix from $1,9502026-03-31 HIGH 8.8 CVE-2026-5212 A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS… Dnr 202l Firmware after 2026-02-05 Fix from $1,9502026-03-31 HIGH 8.8 CVE-2026-5211 A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DN… Dnr 202l Firmware after 2026-02-05 Fix from $1,9502026-03-31 HIGH 8.8 CVE-2026-5204 A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component… Ch22 Firmware No fix yet Fix from $1,9502026-03-31 MEDIUM 5.3 CVE-2026-5186 A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbi__load_gif_main of the file stb_image.h of the component Mul… Mitigation only Fix from $1,6002026-03-31 MEDIUM 5.3 CVE-2026-5185 A security flaw has been discovered in Nothings stb_image up to 2.30. This affects the function stbi__gif_load_next of the file stb_image.h of the co… Mitigation only Fix from $1,6002026-03-31 HIGH 8.8 CVE-2026-5156 A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parame… Ch22 Firmware No fix yet Fix from $1,9502026-03-31 HIGH 8.8 CVE-2026-5155 A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Han… Ch22 Firmware No fix yet Fix from $1,9502026-03-30 HIGH 8.8 CVE-2026-5154 A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the componen… Ch22 Firmware No fix yet Fix from $1,9502026-03-30 HIGH 8.8 CVE-2026-5152 A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a mani… Ch22 Firmware No fix yet Fix from $1,9502026-03-30 HIGH 8.8 CVE-2026-5046 A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parame… Fh1201 Firmware No fix yet Fix from $1,9502026-03-29 HIGH 8.8 CVE-2026-5045 A vulnerability was detected in Tenda FH1201 1.2.0.14(408). This impacts the function WrlclientSet of the file /goform/WrlclientSet of the component … Fh1201 Firmware No fix yet Fix from $1,9502026-03-29 HIGH 8.8 CVE-2026-5044 A security vulnerability has been detected in Belkin F9K1122 1.00.33. This affects the function formSetSystemSettings of the file /goform/formSetSyst… F9k1122 Firmware No fix yet Fix from $1,9502026-03-29 HIGH 8.8 CVE-2026-5043 A weakness has been identified in Belkin F9K1122 1.00.33. The impacted element is the function formSetPassword of the file /goform/formSetPassword of… F9k1122 Firmware No fix yet Fix from $1,9502026-03-29 HIGH 8.8 CVE-2026-5042 A security flaw has been discovered in Belkin F9K1122 1.00.33. The affected element is the function formCrossBandSwitch of the file /goform/formCross… F9k1122 Firmware No fix yet Fix from $1,9502026-03-29 HIGH 8.8 CVE-2026-5036 A vulnerability was found in Tenda 4G06 04.06.01.29. This vulnerability affects the function fromDhcpListClient of the file /goform/DhcpListClient of… 4g06 Firmware No fix yet Fix from $1,9502026-03-29 HIGH 8.8 CVE-2026-5024 A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipul… Dir 513 Firmware No fix yet Fix from $1,9502026-03-29