Browse CVEs

HIGH 8.0 CVE-2026-0878 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR … Firefox 140.7.0 / 147.0+ Fix from $1,9502026-01-13 CRITICAL 9.8 CVE-2026-0879 Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firef… Firefox 115.32.0 / 140.7.0+ Fix from $2,3002026-01-13 HIGH 8.8 CVE-2026-0841 A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formPictureUrl. The man… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-11 HIGH 8.8 CVE-2026-0840 A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this vulnerability is the function strcpy of the file /goform/f… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-11 HIGH 8.8 CVE-2026-0838 A security flaw has been discovered in UTT 进取 520W 1.7.7-180627. This impacts the function strcpy of the file /goform/ConfigWirelessBase. Performin… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-11 HIGH 8.8 CVE-2026-0839 A weakness has been identified in UTT 进取 520W 1.7.7-180627. Affected is the function strcpy of the file /goform/APSecurity. Executing a manipulatio… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-11 HIGH 8.8 CVE-2026-0837 A vulnerability was identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formFireWall. Such manipulation of… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-11 HIGH 8.8 CVE-2026-0836 A vulnerability was determined in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formConfigFastDirection… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-11 HIGH 8.8 CVE-2026-0822 A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function js_typed_array_sort of the file quickjs.c. The man… Quickjs after 0.11.0 Fix from $1,9502026-01-10 CRITICAL 9.8 CVE-2026-0821 A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function js_typed_array_constructor of the file qui… Quickjs after 0.11.0 Fix from $2,3002026-01-10 MEDIUM 6.5 CVE-2025-46298 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, vis… Safari 26.2+ Fix from $1,6002026-01-09 CRITICAL 9.8 CVE-2026-0640 A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation… Ac23 Firmware Mitigation only Fix from $2,3002026-01-06 MEDIUM 6.5 CVE-2026-21634 A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol ca… Unifi Protect 6.2.72+ Fix from $1,6002026-01-05 HIGH 8.8 CVE-2025-15462 A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/ConfigAdvideo. The manipulat… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-05 HIGH 8.8 CVE-2025-15461 A flaw has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/formTaskEdit. Executing a man… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-05 HIGH 8.8 CVE-2025-15459 A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formUser.… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-05 HIGH 8.8 CVE-2025-15460 A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formPptpClientConfig. Performing a m… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-05 HIGH 8.8 CVE-2025-15431 A flaw has been found in UTT 进取 512W 1.7.7-171114. This affects the function strcpy of the file /goform/formFtpServerDirConfig. Executing a manipul… 512w Firmware after 1.7.7-171114 Fix from $1,9502026-01-02 HIGH 8.8 CVE-2025-15429 A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/f… 512w Firmware after 1.7.7-171114 Fix from $1,9502026-01-02 HIGH 8.8 CVE-2025-15430 A vulnerability was detected in UTT 进取 512W 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formFtpServerShareDirSe… 512w Firmware after 1.7.7-171114 Fix from $1,9502026-01-02 HIGH 8.8 CVE-2025-15428 A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the file /goform/formRemoteControl. This manipulatio… 512w Firmware after 1.7.7-171114 Fix from $1,9502026-01-02 HIGH 7.8 CVE-2025-15412 A security vulnerability has been detected in WebAssembly wabt up to 1.0.39. This issue affects the function wabt::Decompiler::VarName of the file /s… Wabt after 1.0.39 Fix from $1,9502026-01-01 HIGH 7.8 CVE-2025-15413 A vulnerability was detected in wasm3 up to 0.5.0. Impacted is the function op_SetSlot_i32/op_CallIndirect of the file m3_exec.h. Performing a manipu… Wasm3 after 0.5.0 Fix from $1,9502026-01-01 HIGH 7.8 CVE-2025-15411 A weakness has been identified in WebAssembly wabt up to 1.0.39. This vulnerability affects the function wabt::AST::InsertNode of the file /src/repro… Wabt after 1.0.39 Fix from $1,9502026-01-01 HIGH 8.8 CVE-2025-15356 A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file /goform/PowerSaveSet. The man… Ac20 Firmware after 16.03.08.12 Fix from $1,9502025-12-30 CRITICAL 9.8 CVE-2025-15255 A vulnerability was determined in Tenda W6-S 1.0.0.4(510). This impacts an unknown function of the file /bin/httpd of the component R7websSsecurityHa… W6 S Firmware Mitigation only Fix from $2,3002025-12-30 HIGH 8.8 CVE-2025-15253 A vulnerability has been found in Tenda M3 1.0.0.13(4903). The impacted element is an unknown function of the file /goform/exeCommand. Such manipulat… M3 Firmware No fix yet Fix from $1,9502025-12-30 HIGH 8.8 CVE-2025-15252 A flaw has been found in Tenda M3 1.0.0.13(4903). The affected element is the function formSetRemoteDhcpForAp of the file /goform/setDhcpAP. This man… M3 Firmware No fix yet Fix from $1,9502025-12-30 CRITICAL 9.8 CVE-2025-15247 A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424. Affected by this issue is the function snap7_rs::cl… Snap7 Rs Mitigation only Fix from $2,3002025-12-30 HIGH 8.8 CVE-2025-15234 A weakness has been identified in Tenda M3 1.0.0.13(4903). Impacted is the function formSetRemoteInternetLanInfo of the file /goform/setInternetLanIn… M3 Firmware No fix yet Fix from $1,9502025-12-30