Browse CVEs

CRITICAL 10.0 CVE-2026-24823 Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in FASTSHIFT X-TRACK (Software/X-Track/USER… Patch available Fix from $2,3002026-01-27 CRITICAL 10.0 CVE-2026-24810 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in rethinkdb (src/cjson modules). This vulnerability is associat… Patch available Fix from $2,3002026-01-27 MEDIUM 5.2 CVE-2026-24799 Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in davisking dlib (dlib/external/zlib modul… Patch available Fix from $1,6002026-01-27 CRITICAL 10.0 CVE-2026-24800 Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules)… Patch available Fix from $2,3002026-01-27 HIGH 7.3 CVE-2026-24344 Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and potential remote code executi… Mitigation only Fix from $1,9502026-01-27 CRITICAL 9.8 CVE-2026-24793 Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in azerothcore azerothcore-wotlk (deps/zlib… Azerothcore after 4.0.0 Fix from $2,3002026-01-27 CRITICAL 9.8 CVE-2026-1420 A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument… Ac23 Firmware Mitigation only Fix from $2,3002026-01-26 HIGH 8.8 CVE-2026-1328 A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the… Nr1800x Firmware No fix yet Fix from $1,9502026-01-22 MEDIUM 6.9 CVE-2025-69209 ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.7 allow… Patch available Fix from $1,6002026-01-21 HIGH 8.3 CVE-2025-68137 EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in `SdpPacket::parse_header()` allows the current… Everest 2025.10.0+ Fix from $1,9502026-01-21 CRITICAL 9.8 CVE-2021-47854 DD-WRT version 45723 contains a buffer overflow vulnerability in the UPNP network discovery service that allows remote attackers to potentially execu… Mitigation only Fix from $2,3002026-01-21 HIGH 7.1 CVE-2025-55131 A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the tim… Mitigation only Fix from $1,9502026-01-20 CRITICAL 9.8 CVE-2026-1162 A flaw has been found in UTT HiPER 810 1.7.4-141218. The impacted element is the function strcpy of the file /goform/setSysAdm. This manipulation of … 810 Firmware Mitigation only Fix from $2,3002026-01-19 HIGH 8.8 CVE-2026-1158 A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bi… Lr350 Firmware No fix yet Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1157 A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Su… Lr350 Firmware No fix yet Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1156 A vulnerability was determined in Totolink LR350 9.3.5u.6369_B20220309. Affected by this issue is the function setWiFiBasicCfg of the file /cgi-bin/c… Lr350 Firmware No fix yet Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1155 A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. Affected by this vulnerability is the function setWiFiEasyGuestCfg of the file /cg… Lr350 Firmware No fix yet Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1143 A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.c… A3700r Firmware No fix yet Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1140 A vulnerability was found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/ConfigExceptAli. The manipulation… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1138 A flaw has been found in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/ConfigExceptQQ. Executing a manipulation ca… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1139 A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/ConfigExceptMSN. The… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1137 A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formWebAuthGlobalConfig… 520w Firmware after 1.7.7-180627 Fix from $1,9502026-01-19 HIGH 7.8 CVE-2026-1110 A flaw has been found in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. This affects the function rtsp_parse_method. This manipulatio… Librtsp after 2021-03-14 Fix from $1,9502026-01-18 HIGH 7.8 CVE-2026-1109 A vulnerability was detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The impacted element is the function rtsp_parse_reques… Librtsp after 2021-03-14 Fix from $1,9502026-01-18 HIGH 7.8 CVE-2026-1108 A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The affected element is the function rts… Librtsp after 2021-03-14 Fix from $1,9502026-01-18 HIGH 7.5 CVE-2021-47815 Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attac… Nsauditor 3.2.7+ Fix from $1,9502026-01-16 HIGH 7.5 CVE-2021-47813 Backup Key Recovery 2.2.7 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration c… No fix yet Fix from $1,9502026-01-16 MEDIUM 5.5 CVE-2021-47814 NBMonitor 1.6.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input … Nbmonitor No fix yet Fix from $1,6002026-01-16 CRITICAL 9.8 CVE-2021-47798 NoteBurner 2.35 contains a buffer overflow vulnerability in the license code input field that allows attackers to crash the application. Attackers ca… Mitigation only Fix from $2,3002026-01-16 HIGH 7.5 CVE-2021-47797 Leawo Prof. Media 11.0.0.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized payloa… No fix yet Fix from $1,9502026-01-16