CVE-2026-74843 | Critical | 10.0 | 2026-08-17 | A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-… |
CVE-2026-19959 | Critical | 9.9 | 2026-08-16 | A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation… |
CVE-2026-19933 | Medium | 6.3 | 2026-08-16 | A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Sea… |
CVE-2026-19847 | High | 8.8 | 2026-08-14 | A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the… |
CVE-2026-19846 | High | 8.8 | 2026-08-14 | A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the co… |
CVE-2026-19845 | High | 8.8 | 2026-08-14 | A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the… |
CVE-2026-19844 | High | 8.8 | 2026-08-14 | A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the co… |
CVE-2026-19824 | High | 8.8 | 2026-08-14 | A weakness has been identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. The affected element is the function ipMacBindListStore of the file /goform/addIp… |
CVE-2026-19823 | High | 8.8 | 2026-08-14 | A security flaw has been discovered in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the co… |
CVE-2026-19822 | High | 8.8 | 2026-08-14 | A vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. This issue affects the function lstAdd of the file /goform/editQos of the compone… |
CVE-2026-19815 | High | 8.8 | 2026-08-14 | A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cg… |
CVE-2026-19814 | High | 8.8 | 2026-08-14 | A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setMacQos of the file /cgi-bin/cstecgi.cgi of the component fir… |
CVE-2026-19813 | High | 8.8 | 2026-08-14 | A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.c… |
CVE-2026-19812 | High | 8.8 | 2026-08-14 | A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the c… |
CVE-2026-19811 | High | 8.8 | 2026-08-14 | A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.c… |
CVE-2026-19791 | High | 8.8 | 2026-08-14 | A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component http… |
CVE-2026-19790 | High | 8.8 | 2026-08-14 | A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd… |
CVE-2026-19789 | High | 8.8 | 2026-08-14 | A vulnerability was determined in Tenda AC1206 15.03.06.23_multi_TD01. This vulnerability affects the function set_wl_guest_iplist of the file /goform/WifiGues… |
CVE-2026-19788 | High | 8.8 | 2026-08-14 | A vulnerability was found in Tenda AC1206 15.03.06.23_multi_TD01. This affects the function set_device_name of the file /goform/SetOnlineDevName of the compone… |
CVE-2026-14679 | High | 8.2 | 2026-08-13 | Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write o… |
CVE-2026-19695 | Medium | 4.7 | 2026-08-13 | Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service |
CVE-2026-19003 | High | 7.8 | 2026-08-12 | A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of… |
CVE-2026-10534 | High | 8.4 | 2026-08-12 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser. |
CVE-2026-13361 | High | 8.8 | 2026-08-12 | IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field. |
CVE-2026-71407 | Medium | 5.6 | 2026-08-12 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypas… |
CVE-2024-14042 | Medium | 6.3 | 2026-08-11 | A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr_cb of the file src/hss/hss-s6a-path.c… |
CVE-2026-70346 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-70344 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-68817 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68816 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68795 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-66807 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64919 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64912 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64907 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-63527 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-63526 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-62878 | Critical | 9.8 | 2026-08-11 | Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. |
CVE-2026-62877 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62824 | High | 8.8 | 2026-08-11 | Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-62792 | High | 8.1 | 2026-08-11 | Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
CVE-2026-62768 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-62755 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
CVE-2026-24911 | | | 2026-08-11 | Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged softw… |
CVE-2026-73070 | | | 2026-08-11 | Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in soc… |
CVE-2026-11735 | | | 2026-08-11 | A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the rou… |
CVE-2026-11734 | | | 2026-08-11 | A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable. |
CVE-2026-11733 | | | 2026-08-11 | A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device. |
CVE-2026-59086 | High | 7.8 | 2026-08-11 | A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions < V2606). The affected applications contain a st… |
CVE-2026-40130 | Medium | 5.3 | 2026-08-11 | SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted reque… |
CVE-2025-15683 | | | 2026-08-10 | TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can inv… |
CVE-2026-6791 | | | 2026-08-10 | When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user's home d… |
CVE-2026-21068 | | | 2026-08-10 | Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code. |
CVE-2026-19341 | High | 8.8 | 2026-08-09 | A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Su… |
CVE-2026-20345 | High | 7.5 | 2026-08-07 | A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded imp… |
CVE-2026-55980 | Medium | 5.5 | 2026-08-06 | A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition. |
CVE-2026-18909 | Medium | 4.7 | 2026-08-06 | A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows (ETD.sys and ETDSMBus.sys). During Intel SMBus reco… |
CVE-2026-67866 | High | 7.5 | 2026-08-05 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_DeleteMonitoredItem… |
CVE-2026-71267 | Critical | 9.8 | 2026-08-05 | microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) copy a caller-supplied entry name into the 100-byte field of a stack-all… |
CVE-2026-71266 | High | 7.8 | 2026-08-05 | tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(… |
CVE-2026-71265 | High | 7.5 | 2026-08-05 | Domoticz's MochadTCP::MatchLine handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte m_mochadbuffer… |
CVE-2026-61486 | Critical | 9.8 | 2026-08-05 | ** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy.
This issue affects Apache Lucy: all versions.
As this project is re… |
CVE-2026-18898 | High | 8.8 | 2026-08-05 | A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulati… |
CVE-2026-18897 | High | 8.8 | 2026-08-05 | A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTemp… |
CVE-2026-18895 | High | 8.8 | 2026-08-05 | A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipu… |
CVE-2026-45809 | | | 2026-08-05 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the w… |
CVE-2026-45538 | Critical | 9.8 | 2026-08-04 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions 4.0.0 and prior, processing a SIP message with a header name longer than 255… |
CVE-2026-49435 | Critical | 9.8 | 2026-08-04 | Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted pack… |
CVE-2017-20242 | Critical | 9.8 | 2026-08-04 | Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to cr… |
CVE-2026-25289 | Critical | 9.6 | 2026-08-04 | Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values. |
CVE-2026-10710 | High | 7.8 | 2026-08-04 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malici… |
CVE-2026-10709 | High | 7.8 | 2026-08-04 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSecti… |
CVE-2026-67673 | Medium | 4.6 | 2026-08-03 | A stack-based buffer overflow vulnerability exists in the cmd_edl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fw_f… |
CVE-2026-18607 | High | 8.8 | 2026-08-03 | A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 an… |
CVE-2026-18589 | Critical | 9.8 | 2026-08-03 | A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_password of the file nas.cgi. The manipulation of the argument… |
CVE-2026-18588 | Critical | 9.8 | 2026-08-03 | A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONT… |
CVE-2026-67822 | Critical | 9.8 | 2026-07-31 | Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to c… |
CVE-2026-15722 | High | 7.5 | 2026-07-31 | A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters… |
CVE-2026-43832 | High | 7.5 | 2026-07-31 | Full details and mitigation steps are currently restricted and will be published at a later date. |
CVE-2026-43831 | High | 7.5 | 2026-07-31 | Full details and mitigation steps are currently restricted and will be published at a later date. |
CVE-2026-43829 | High | 7.5 | 2026-07-31 | Full details and mitigation steps are currently restricted and will be published at a later date. |
CVE-2026-10535 | High | 8.4 | 2026-07-30 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc. |
CVE-2026-11771 | High | 7.5 | 2026-07-30 | OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potential… |
CVE-2026-7260 | Medium | 5.5 | 2026-07-30 | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* bef… |
CVE-2026-67248 | High | 8.8 | 2026-07-30 | A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly v… |
CVE-2026-13309 | Medium | 6.8 | 2026-07-29 | Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers… |
CVE-2026-5056 | High | 7.8 | 2026-07-29 | GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affe… |
CVE-2026-12935 | | | 2026-07-29 | The
TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking
module that can lead to a stack-based buffer overflow. The issue occurs when a… |
CVE-2026-67192 | High | 8.1 | 2026-07-29 | Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory… |
CVE-2026-58181 | High | 7.5 | 2026-07-29 | The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack or crash on attacker input.
This issue affects Apache Traffic Server: from 8.0… |
CVE-2026-58180 | High | 7.5 | 2026-07-29 | The Apache Traffic Server txn_box plugin overflows the stack from attacker-controlled input.
This issue affects Apache Traffic Server: from 8.0.0 through 8.1… |
CVE-2026-58179 | High | 8.1 | 2026-07-29 | The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input.
This issue affects Apache Traffic Server: from 8.0.0 th… |
CVE-2026-58158 | Medium | 5.9 | 2026-07-29 | Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack.
This issue affects Apache Traffic Server: from 8.0.0 throug… |
CVE-2026-33930 | Medium | 5.9 | 2026-07-29 | Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long Host header overfl… |
CVE-2026-43771 | High | 7.1 | 2026-07-27 | A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may b… |
CVE-2026-12495 | | | 2026-07-27 | Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G device's web interface. An unau… |
CVE-2026-55728 | | | 2026-07-24 | Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD th… |
CVE-2026-16870 | High | 8.8 | 2026-07-24 | Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltration. A stac… |
CVE-2026-50039 | High | 7.5 | 2026-07-23 | The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request. |
CVE-2026-64831 | High | 8.8 | 2026-07-22 | FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite… |