Browse CVEs

CRITICAL 9.8 CVE-2025-50402 FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter string fac_password. Fac1200r Firmware Mitigation only Fix from $2,3002025-11-26 CRITICAL 9.8 CVE-2025-50399 FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter password. Fac1200r Firmware Mitigation only Fix from $2,3002025-11-26 HIGH 7.6 CVE-2025-9557 ‭An out-of-bound write can lead to an arbitrary code execution. Even on devices with some form of memory protection, this can still lead to‬ ‭a crash… No fix yet Fix from $1,9502025-11-26 HIGH 7.6 CVE-2025-9558 There is a potential OOB Write vulnerability in the gen_prov_start function in pb_adv.c. The full length of the received data is copied into the link… Mitigation only Fix from $1,9502025-11-26 HIGH 8.8 CVE-2025-12970 The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating length. An at… Fluent Bit Mitigation only Fix from $1,9502025-11-24 HIGH 8.8 CVE-2025-13553 A weakness has been identified in D-Link DWR-M920 1.1.50. This affects the function sub_41C7FC of the file /boafrm/formPinManageSetup. This manipulat… Dwr M920 Firmware No fix yet Fix from $1,9502025-11-23 HIGH 8.8 CVE-2025-13552 A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the fi… Dir 822k Firmware No fix yet Fix from $1,9502025-11-23 HIGH 8.8 CVE-2025-13551 A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an unknown function of the file /b… Dir 822k Firmware No fix yet Fix from $1,9502025-11-23 HIGH 8.8 CVE-2025-13550 A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVp… Dir 822k Firmware No fix yet Fix from $1,9502025-11-23 HIGH 8.8 CVE-2025-13549 A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub_455524 of the file /boafrm/formNtp. Performing manipulation of… Dir 822k Firmware No fix yet Fix from $1,9502025-11-23 HIGH 8.8 CVE-2025-13548 A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This vulnerability affects unknown code of the file /boafr… Dir 822k Firmware No fix yet Fix from $1,9502025-11-23 HIGH 8.7 CVE-2025-65102 PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decode… Patch available Fix from $1,9502025-11-21 CRITICAL 9.8 CVE-2025-13400 A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulati… Ch22 Firmware Mitigation only Fix from $2,3002025-11-19 HIGH 7.8 CVE-2025-46776 A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7… Fortiextender Firmware 7.4.8 / 7.6.3+ Fix from $1,9502025-11-18 HIGH 8.8 CVE-2025-36553 A buffer overflow vulnerability exists in the CvManager functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to … Mitigation only Fix from $1,9502025-11-17 HIGH 8.8 CVE-2025-32089 A buffer overflow vulnerability exists in the CvManager_SBI functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior… Mitigation only Fix from $1,9502025-11-17 CRITICAL 9.8 CVE-2025-13305 A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of t… Dir 825m Firmware Mitigation only Fix from $2,3002025-11-17 HIGH 8.8 CVE-2025-13304 A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown … Dir 825m Firmware No fix yet Fix from $1,9502025-11-17 HIGH 8.8 CVE-2025-13288 A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the file /goform/PPTPUserSetting. … Ch22 Firmware No fix yet Fix from $1,9502025-11-17 HIGH 8.8 CVE-2025-13258 A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manip… Ac20 Firmware No fix yet Fix from $1,9502025-11-17 HIGH 8.7 CVE-2018-25125 Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote… No fix yet Fix from $1,9502025-11-14 HIGH 7.5 CVE-2025-63679 free5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an UplinkRANConfigurationTransfer NGAP message from a gNB, the AMF proc… Free5gc after 4.1.0 Fix from $1,9502025-11-12 HIGH 7.2 CVE-2025-40815 A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO!… Mitigation only Fix from $1,9502025-11-11 MEDIUM 6.6 CVE-2025-32732 Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System s… Quickassist Technology 2.6.0-0018+ Fix from $1,6002025-11-11 MEDIUM 5.5 CVE-2025-24519 Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. S… Quickassist Technology 2.6.0-0018+ Fix from $1,6002025-11-11 HIGH 7.8 CVE-2025-64182 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In v… Openexr 3.2.5 / 3.3.6+ Fix from $1,9502025-11-10 MEDIUM 5.3 CVE-2025-12440 Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific… Chrome 142.0.7444.59+ Fix from $1,6002025-11-10 HIGH 8.8 CVE-2025-43433 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, ma… Safari 26.1+ Fix from $1,9502025-11-04 CRITICAL 9.8 CVE-2025-12622 A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd of the file /goform/SysRunCmd.… Ac10 Firmware Mitigation only Fix from $2,3002025-11-03 CRITICAL 9.8 CVE-2025-12619 A vulnerability was found in Tenda A15 15.13.07.13. Affected is the function fromSetWirelessRepeat of the file /goform/openNetworkGateway. The manipu… A15 Firmware Mitigation only Fix from $2,3002025-11-03