Browse CVEs

HIGH 7.5 CVE-2026-27942 fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. Prio… Fast Xml Parser 4.5.4 / 5.3.8+ Fix from $1,9502026-02-26 HIGH 8.8 CVE-2026-3169 A security vulnerability has been detected in Tenda F453 1.0.0.3. This impacts the function fromSafeEmailFilter of the file /goform/SafeEmailFilter o… F453 Firmware No fix yet Fix from $1,9502026-02-25 HIGH 8.8 CVE-2026-3166 A vulnerability was identified in Tenda F453 1.0.0.3. The affected element is the function fromRouteStatic of the file /goform/RouteStatic of the com… F453 Firmware No fix yet Fix from $1,9502026-02-25 HIGH 8.8 CVE-2026-3167 A security flaw has been discovered in Tenda F453 1.0.0.3. The impacted element is the function formWebTypeLibrary of the file /goform/webtypelibrary… F453 Firmware No fix yet Fix from $1,9502026-02-25 HIGH 8.8 CVE-2026-3168 A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromNatStaticSetting of the file /goform/NatStaticSetting of the comp… F453 Firmware No fix yet Fix from $1,9502026-02-25 HIGH 8.8 CVE-2026-3165 A vulnerability was determined in Tenda F453 1.0.0.3. Impacted is the function fromSetWifiGusetBasic of the file /goform/AdvSetWrlsafeset of the comp… F453 Firmware No fix yet Fix from $1,9502026-02-25 MEDIUM 6.2 CVE-2025-61147 strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decoder_context::compute_framedrop_table(). Libde265 1.0.17+ Fix from $1,6002026-02-23 HIGH 8.8 CVE-2026-3016 A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. The affected element is the function strcpy of the file /goform/formP2PLimitConf… 810g Firmware after 1.7.7-171114 Fix from $1,9502026-02-23 HIGH 8.8 CVE-2026-3015 A vulnerability was determined in UTT HiPER 810G up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/formPolicyRouteConf. Executi… 810g Firmware after 1.7.7-171114 Fix from $1,9502026-02-23 HIGH 7.2 CVE-2026-2980 A vulnerability has been found in UTT HiPER 810G up to 1.7.7-1711. Impacted is the function strcpy of the file /goform/setSysAdm. The manipulation of… 810g Firmware after 1.7.7-171114 Fix from $1,9502026-02-23 HIGH 8.8 CVE-2026-2981 A vulnerability was found in UTT HiPER 810G up to 1.7.7-1711. The affected element is the function strcpy of the file /goform/formTaskEdit_ap. The ma… 810g Firmware after 1.7.7-171114 Fix from $1,9502026-02-23 HIGH 7.2 CVE-2026-2935 A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/ConfigExceptMSN. Exec… 810g Firmware after 1.7.7-171114 Fix from $1,9502026-02-22 HIGH 8.8 CVE-2026-2911 A vulnerability has been found in Tenda FH451 up to 1.0.0.9. This issue affects some unknown processing of the file /goform/GstDhcpSetSer. The manipu… Fh451 Firmware No fix yet Fix from $1,9502026-02-22 HIGH 8.8 CVE-2026-2904 A vulnerability was determined in UTT HiPER 810G 1.7.7-171114. This affects the function strcpy of the file /goform/ConfigExceptAli. Executing a mani… 810g Firmware after 1.7.7-171114 Fix from $1,9502026-02-22 HIGH 7.8 CVE-2026-2034 Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ar… Dicom Viewer Pro 14.2.7+ Fix from $1,9502026-02-20 HIGH 8.8 CVE-2026-0797 GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… Gimp Patch available Fix from $1,9502026-02-20 MEDIUM 6.4 CVE-2025-69674 Buffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7_P161006 (Build.0333.250211) allows an attacker to execute arbitrary code via the node_mac… Mitigation only Fix from $1,6002026-02-19 HIGH 7.5 CVE-2019-25353 Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username input field that allows attackers to crash the appl… No fix yet Fix from $1,9502026-02-18 HIGH 7.5 CVE-2019-25354 iSmartViewPro 1.3.34 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the camera ID input fie… No fix yet Fix from $1,9502026-02-18 HIGH 7.5 CVE-2019-25349 ScadaApp for iOS 1.1.4.0 contains a denial of service vulnerability that allows attackers to crash the application by inputting an oversized buffer i… No fix yet Fix from $1,9502026-02-18 MEDIUM 5.5 CVE-2019-25326 ipPulse 1.92 contains a denial of service vulnerability that allows local attackers to crash the application by providing an oversized input in the E… Ippulse after 1.92 Fix from $1,6002026-02-18 MEDIUM 6.5 CVE-2025-33130 IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overw… Db2 Merge Backup Mitigation only Fix from $1,6002026-02-17 CRITICAL 9.8 CVE-2025-70314 webfsd 1.21 is vulnerable to a Buffer Overflow via a crafted request. This is due to the filename variable Webfsd Mitigation only Fix from $2,3002026-02-12 HIGH 7.5 CVE-2025-69807 p2r3 Bareiron commit: 8e4d4020d is vulnerable to Buffer Overflow, which allows unauthenticated remote attackers to cause a denial of service via a pa… Bareiron Mitigation only Fix from $1,9502026-02-12 HIGH 8.8 CVE-2026-2005 Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database.… PostgreSQL 14.21 / 15.16+ Fix from $1,9502026-02-12 HIGH 8.2 CVE-2026-2007 Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited co… PostgreSQL 18.2+ Fix from $1,9502026-02-12 HIGH 7.5 CVE-2026-20652 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, ma… Safari 18.7.5 / 26.3+ Fix from $1,9502026-02-11 MEDIUM 6.5 CVE-2026-20644 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, ma… Safari 18.7.5 / 26.3+ Fix from $1,6002026-02-11 MEDIUM 6.5 CVE-2026-20636 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3.… Safari 26.3+ Fix from $1,6002026-02-11 MEDIUM 5.5 CVE-2026-20608 This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.… Safari 18.7.5 / 26.3+ Fix from $1,6002026-02-11