Browse CVEs

HIGH 7.5 CVE-2026-58181 The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack or crash on attacker input. This issue affects Apache Traffic Server… Traffic Server 9.2.15 / 10.1.4+ Fix from $1,9502026-07-29 CRITICAL 9.8 CVE-2026-58179 The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input. This issue affects Apache Traffic Server: fro… Traffic Server 9.2.15 / 10.1.4+ Fix from $2,3002026-07-29 HIGH 7.5 CVE-2026-58180 The Apache Traffic Server txn_box plugin overflows the stack from attacker-controlled input. This issue affects Apache Traffic Server: from 8.0.0 th… Traffic Server 9.2.15 / 10.1.4+ Fix from $1,9502026-07-29 MEDIUM 5.9 CVE-2026-58158 Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.… Traffic Server 9.2.15 / 10.1.4+ Fix from $1,6002026-07-29 MEDIUM 5.9 CVE-2026-33930 Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long Host hea… Traffic Server 9.2.15 / 10.1.4+ Fix from $1,6002026-07-29 HIGH 7.1 CVE-2026-43771 A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An… macOS 14.8.8 / 15.7.8+ Fix from $1,9502026-07-27 HIGH 7.5 CVE-2026-51244 schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in UnpackFrameHeader(). Multiple attacker-controlled index parameters are used … No fix yet Fix from $1,9502026-07-27 MEDIUM 5.3 CVE-2026-12495 Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G device's web interfac… No fix yet Fix from $1,6002026-07-27 HIGH 8.8 CVE-2026-16870 Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltrati… No fix yet Fix from $1,9502026-07-24 HIGH 7.5 CVE-2026-50039 The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request. No fix yet Fix from $1,9502026-07-23 HIGH 8.8 CVE-2026-64831 FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to … Ffmpeg after 8.1.2 Fix from $1,9502026-07-22 HIGH 7.2 CVE-2026-61391 There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction b… No fix yet Fix from $1,9502026-07-22 HIGH 8.8 CVE-2026-16418 Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a craft… Chrome 150.0.7871.182+ Fix from $1,9502026-07-21 CRITICAL 9.8 CVE-2026-59144 Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elem_size in ring_read_seq. The attach-time … No fix yet Fix from $2,3002026-07-21 MEDIUM 6.5 CVE-2026-16461 A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump() short mode (used by `rpcinfo -s`), version numbers from a remote … No fix yet Fix from $1,6002026-07-21 HIGH 7.3 CVE-2026-15370 A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack… Hardened Images No fix yet Fix from $1,9502026-07-21 CRITICAL 9.8 CVE-2024-51314 The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of the file /goform/setMacFilterCfg. Mitigation only Fix from $2,3002026-07-20 CRITICAL 9.8 CVE-2024-51315 The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of the file /goform/SetOnlineDevName No fix yet Fix from $2,3002026-07-20 CRITICAL 9.8 CVE-2024-51312 The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of the file /goform/SetStaticRouteCfg. No fix yet Fix from $2,3002026-07-20 CRITICAL 9.8 CVE-2024-51311 The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of the file /goform/SetNetControlList. No fix yet Fix from $2,3002026-07-20 CRITICAL 9.8 CVE-2024-51313 The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of the file /goform/SetVirtualServerCfg. No fix yet Fix from $2,3002026-07-20 HIGH 7.8 CVE-2026-48389 DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in … Dng Software Development Kit 1.7.1.2611+ Fix from $1,9502026-07-20 MEDIUM 6.5 CVE-2026-16277 A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with `rpcinfo -l`, address information r… No fix yet Fix from $1,6002026-07-20 HIGH 8.8 CVE-2026-16248 A vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of t… No fix yet Fix from $1,9502026-07-20 HIGH 8.8 CVE-2026-16096 A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub_40BB50 of the file /proc/webmon_recent_do… No fix yet Fix from $1,9502026-07-18 HIGH 8.8 CVE-2026-16097 A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C of the component Scheduler Name Handler. The mani… No fix yet Fix from $1,9502026-07-18 HIGH 7.1 CVE-2026-52584 Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG function No fix yet Fix from $1,9502026-07-17 HIGH 8.1 CVE-2021-27137 KEVEPSS 16% An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticat… Dd Wrt 45724+ Fix from $1,9502026-07-16 HIGH 7.5 CVE-2026-56455 HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validat… Dfxanalytics after 3.0 Fix from $1,9502026-07-16 HIGH 7.5 CVE-2026-48863 A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling wh… No fix yet Fix from $1,9502026-07-16