Browse CVEs

CRITICAL 9.0 CVE-2025-59947 NanoMQ is a messaging broker/bus for IoT Edge & SDV. Versions prior to 0.24.4 have a buffer overflow case while the PUBLISH packets trigger both shar… Nanomq 0.24.4+ Fix from $2,3002025-12-15 CRITICAL 9.8 CVE-2023-53874 GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the applicati… Gom Player Mitigation only Fix from $2,3002025-12-15 HIGH 7.5 CVE-2025-14708EPSS 6% A weakness has been identified in Shiguangwu sgwbox N3 2.0.25. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/http_… N3 Firmware after 2.0.25 Fix from $1,9502025-12-15 CRITICAL 9.8 CVE-2025-14709EPSS 6% A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functionality of the file /usr/sbin… N3 Firmware after 2.0.25 Fix from $2,3002025-12-15 HIGH 8.8 CVE-2025-14656 A weakness has been identified in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedWifi. Executing a manipulation… Ac20 Firmware No fix yet Fix from $1,9502025-12-14 MEDIUM 5.5 CVE-2025-43520 KEV A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1,… Ipados 14.8.2 / 15.7.2+ Fix from $1,6002025-12-12 HIGH 7.8 CVE-2025-36927 In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local esca… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36928 In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36930 In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36931 In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502025-12-11 MEDIUM 6.5 CVE-2025-36917 In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. This could lead to remote denial … Android No fix yet Fix from $1,6002025-12-11 HIGH 8.0 CVE-2025-36924 In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lea… Android Mitigation only Fix from $1,9502025-12-11 CRITICAL 9.8 CVE-2025-14535EPSS 6% A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. T… 512w Firmware after 1.7.7-171114 Fix from $2,3002025-12-11 CRITICAL 9.8 CVE-2025-14534EPSS 6% A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the co… 512w Firmware after 1.7.7-171114 Fix from $2,3002025-12-11 HIGH 8.8 CVE-2025-14526 A security flaw has been discovered in Tenda CH22 1.0.0.1. This affects the function frmL7ImForm of the file /goform/L7Im. Performing a manipulation … Ch22 Firmware No fix yet Fix from $1,9502025-12-11 MEDIUM 6.5 CVE-2025-65288 A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostname… Mr816 Firmware No fix yet Fix from $1,6002025-12-09 CRITICAL 9.3 CVE-2025-14310 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in rethinkdb.This issue affects rethinkdb: before 2.4.4. Patch available Fix from $2,3002025-12-09 HIGH 8.8 CVE-2025-14196 A weakness has been identified in H3C Magic B1 up to 100R004. The affected element is the function sub_44de0 of the file /goform/aspForm. This manipu… No fix yet Fix from $1,9502025-12-07 CRITICAL 9.8 CVE-2025-14191 A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2PLimitCon… 512w Firmware after 1.7.7-171114 Fix from $2,3002025-12-07 HIGH 7.2 CVE-2025-14187 A weakness has been identified in UGREEN DH2100+ up to 5.3.0.251125. This affects the function handler_file_backup_create of the file /v1/file/backup… Mitigation only Fix from $1,9502025-12-07 CRITICAL 9.8 CVE-2025-14141 A flaw has been found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formArpBindConfig. Executing man… 520w Firmware Mitigation only Fix from $2,3002025-12-06 MEDIUM 6.5 CVE-2025-14140 A vulnerability was detected in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/websHostFilter. Performin… 520w Firmware No fix yet Fix from $1,6002025-12-06 MEDIUM 5.7 CVE-2025-14139 A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Impacted is the function strcpy of the file /goform/formConfigDnsFilterGlob… 520w Firmware No fix yet Fix from $1,6002025-12-06 HIGH 7.5 CVE-2025-64053 A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary command… X210 Firmware No fix yet Fix from $1,9502025-12-05 CRITICAL 9.8 CVE-2025-14015 A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulatio… Magic B0 Firmware after 100R002 Fix from $2,3002025-12-04 HIGH 8.8 CVE-2025-66287 A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. Mitigation only Fix from $1,9502025-12-04 MEDIUM 5.1 CVE-2025-50361 Buffer Overflow was found in SmallBASIC community SmallBASIC with SDL Before v12_28, and commit sha:298a1d495355959db36451e90a0ac74bcc5593fe in the f… Smallbasic 12.28+ Fix from $1,6002025-12-03 CRITICAL 9.8 CVE-2025-11780 Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'showMeterReport()' function, there is an unlimited user i… Sge Plc1000 Firmware Mitigation only Fix from $2,3002025-12-02 MEDIUM 6.5 CVE-2025-65403 A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input. Lightftp No fix yet Fix from $1,6002025-12-01 MEDIUM 6.5 CVE-2025-65404 A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a cra… Streaming Media No fix yet Fix from $1,6002025-12-01