Browse CVEs

HIGH 8.8 CVE-2025-3409 A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_include_string. The manipulation o… Stb Image.h after 2.13 Fix from $1,9502025-04-08 HIGH 7.5 CVE-2024-58115 Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect avail… Harmonyos Mitigation only Fix from $1,9502025-04-07 HIGH 7.5 CVE-2024-58116 Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect avail… Harmonyos Mitigation only Fix from $1,9502025-04-07 CRITICAL 9.8 CVE-2025-3266 A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Affected by this issue is some unknown functio… Tinywebserver No fix yet Fix from $2,3002025-04-04 HIGH 8.8 CVE-2025-3259 A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11. This issue affects the function formSetDeviceName of the … Rx3 Firmware No fix yet Fix from $1,9502025-04-04 MEDIUM 5.5 CVE-2025-3196 A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD2Importer:… Assimp No fix yet Fix from $1,6002025-04-04 HIGH 7.8 CVE-2025-3166 A vulnerability classified as critical was found in code-projects Product Management System 1.0. This vulnerability affects the function search_item … Product Management System No fix yet Fix from $1,9502025-04-03 CRITICAL 9.8 CVE-2025-22457 KEVEPSS 100% A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways… Connect Secure 22.7 / 22.8+ Fix from $2,3002025-04-03 HIGH 8.8 CVE-2025-3161 A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/Sh… Ac10 Firmware Mitigation only Fix from $1,9502025-04-03 CRITICAL 9.8 CVE-2024-54808 Netgear WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the SetDefaultConnectionService function due to an unco… Wnr854t Firmware No fix yet Fix from $2,3002025-03-31 CRITICAL 9.8 CVE-2024-54809 Netgear Inc WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the parse_st_header function due to use of a reques… Wnr854t Firmware No fix yet Fix from $2,3002025-03-31 MEDIUM 5.5 CVE-2025-3007 A vulnerability was found in Novastar CX40 up to 2.44.0. It has been rated as critical. This issue affects the function getopt of the file /usr/nova/… Mitigation only Fix from $1,6002025-03-31 HIGH 7.5 CVE-2025-28135 TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi. A810r Firmware No fix yet Fix from $1,9502025-03-27 HIGH 8.8 CVE-2025-2837 Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjace… Gecko Os Mitigation only Fix from $1,9502025-03-26 CRITICAL 9.8 CVE-2025-29100 Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list. Ac8 Firmware No fix yet Fix from $2,3002025-03-24 CRITICAL 9.8 CVE-2025-29135 A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow att… Ac7 Firmware No fix yet Fix from $2,3002025-03-24 CRITICAL 9.8 CVE-2025-2621 A vulnerability was found in D-Link DAP-1620 1.03 and classified as critical. This issue affects the function check_dws_cookie of the file /storage. … Dap 1620 Firmware No fix yet Fix from $2,3002025-03-22 CRITICAL 9.8 CVE-2025-2620EPSS 9% A vulnerability has been found in D-Link DAP-1620 1.03 and classified as critical. This vulnerability affects the function mod_graph_auth_uri_handler… Dap 1620 Firmware No fix yet Fix from $2,3002025-03-22 CRITICAL 9.8 CVE-2025-2619 A vulnerability, which was classified as critical, was found in D-Link DAP-1620 1.03. This affects the function check_dws_cookie of the file /storage… Dap 1620 Firmware No fix yet Fix from $2,3002025-03-22 CRITICAL 9.8 CVE-2025-30472 Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_con… Corosync after 3.1.9 Fix from $2,3002025-03-22 HIGH 7.5 CVE-2024-13903 A vulnerability was found in quickjs-ng QuickJS up to 0.8.0. It has been declared as problematic. Affected by this vulnerability is the function JS_G… Quickjs 0.9.0+ Fix from $1,9502025-03-21 CRITICAL 9.8 CVE-2025-26336 Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller… Chassis Management Controller For Poweredge Fx2 Firmware 2.40.200.202101130302 / 3.41.200.202209300499+ Fix from $2,3002025-03-21 MEDIUM 6.5 CVE-2025-29217 Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows att… W18e Firmware No fix yet Fix from $1,6002025-03-20 MEDIUM 6.5 CVE-2025-29218 Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules. This vulnerability allows atta… W18e Firmware No fix yet Fix from $1,6002025-03-20 MEDIUM 6.5 CVE-2025-29215 Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_43fdcc function at /goform/SetNetControlList. Ax12 Firmware No fix yet Fix from $1,6002025-03-20 HIGH 7.5 CVE-2025-29121 A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fast_setting_wifi_set file form_fast_… Ac6 Firmware No fix yet Fix from $1,9502025-03-20 HIGH 7.5 CVE-2025-29149 Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function. I12 Firmware No fix yet Fix from $1,9502025-03-20 HIGH 7.5 CVE-2024-57440 D-Link DSL-3788 revA1 1.01R1B036_EU_EN is vulnerable to Buffer Overflow via the COMM_MAKECustomMsg function of the webproc cgi Dsl 3788 Firmware 1.01R1B037+ Fix from $1,9502025-03-20 HIGH 7.5 CVE-2025-29214 Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_42F69C function at /goform/setMacFilterCfg. Ax12 Firmware No fix yet Fix from $1,9502025-03-20 HIGH 7.5 CVE-2025-29101 Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the get_parentControl_list_Info function. Ac8 Firmware No fix yet Fix from $1,9502025-03-20