CWE-121 · Stack-based Buffer Overflow (page 10)
Page 10 of 39 — CVEs classified under CWE-121, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24640 | Medium | 6.6 | 2026-03-10 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all ve… |
CVE-2025-54820 | High | 8.1 | 2026-03-10 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManag… |
CVE-2026-30929 | High | 7.7 | 2026-03-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MagnifyImage uses a fi… |
CVE-2026-28690 | Medium | 6.9 | 2026-03-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflo… |
CVE-2026-28494 | High | 7.1 | 2026-03-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflo… |
CVE-2025-70250 | High | 7.5 | 2026-03-09 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formdumpeasysetup. |
CVE-2025-70243 | High | 7.5 | 2026-03-09 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard534. |
CVE-2025-70238 | High | 7.5 | 2026-03-09 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard52. |
CVE-2026-3811 | High | 8.8 | 2026-03-09 | A vulnerability was found in Tenda FH1202 1.2.0.14(408). This impacts the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the… |
CVE-2026-3810 | High | 8.8 | 2026-03-09 | A vulnerability has been found in Tenda FH1202 1.2.0.14(408). This affects the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation… |
CVE-2026-3809 | High | 8.8 | 2026-03-09 | A flaw has been found in Tenda FH1202 1.2.0.14(408). The impacted element is the function fromNatStaticSetting of the file /goform/NatSaticSetting. Executing a… |
CVE-2026-3808 | High | 8.8 | 2026-03-09 | A vulnerability was detected in Tenda FH1202 1.2.0.14(408). The affected element is the function formWebTypeLibrary of the file /goform/webtypelibrary. Perform… |
CVE-2026-3823 | Critical | 9.8 | 2026-03-09 | EHG2408 series switch developed by Atop Technologies has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the… |
CVE-2026-3807 | High | 8.8 | 2026-03-09 | A security vulnerability has been detected in Tenda FH1202 1.2.0.14(408). Impacted is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Such ma… |
CVE-2026-3804 | High | 8.8 | 2026-03-09 | A security flaw has been discovered in Tenda i3 1.0.0.6(2204). This vulnerability affects the function formWifiMacFilterSet of the file /goform/WifiMacFilterSe… |
CVE-2026-3803 | High | 8.8 | 2026-03-09 | A vulnerability was identified in Tenda i3 1.0.0.6(2204). This affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. The manipulation… |
CVE-2026-3802 | High | 8.8 | 2026-03-09 | A vulnerability was determined in Tenda i3 1.0.0.6(2204). Affected by this issue is the function formexeCommand of the file /goform/exeCommand. Executing a man… |
CVE-2026-3801 | High | 8.8 | 2026-03-09 | A vulnerability was found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formSetAutoPing of the file /goform/setAutoPing. Performing… |
CVE-2026-3799 | High | 8.8 | 2026-03-09 | A flaw has been found in Tenda i3 1.0.0.6(2204). This impacts the function formSetCfm of the file /goform/setcfm. This manipulation of the argument funcpara1 c… |
CVE-2026-3769 | High | 8.8 | 2026-03-08 | A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function WrlclientSet of the file /goform/WrlclientSet. The manipulation of t… |
CVE-2026-3768 | High | 8.8 | 2026-03-08 | A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSe… |
CVE-2026-3732 | High | 8.8 | 2026-03-08 | A security vulnerability has been detected in Tenda F453 1.0.0.3. This affects the function strcpy of the file /goform/exeCommand. The manipulation of the argu… |
CVE-2026-3729 | High | 8.8 | 2026-03-08 | A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the a… |
CVE-2026-3728 | High | 8.8 | 2026-03-08 | A vulnerability was determined in Tenda F453 1.0.0.3/1.If. This issue affects the function fromSetCfm of the file /goform/setcfm. This manipulation of the argu… |
CVE-2026-3727 | High | 8.8 | 2026-03-08 | A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function sub_3C6C0 of the file /goform/QuickIndex. The manipulation of the argu… |
CVE-2026-3726 | High | 8.8 | 2026-03-08 | A vulnerability has been found in Tenda F453 1.0.0.3. This affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipula… |
CVE-2026-3715 | High | 8.8 | 2026-03-08 | A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of… |
CVE-2026-3697 | Medium | 6.3 | 2026-03-08 | A vulnerability was determined in Planet ICG-2510 1.0_20250811. The impacted element is the function sub_40C8E4 of the file /usr/sbin/httpd of the component La… |
CVE-2026-3679 | High | 8.8 | 2026-03-07 | A vulnerability was identified in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex. Such manip… |
CVE-2026-3678 | High | 8.8 | 2026-03-07 | A vulnerability was determined in Tenda FH451 1.0.0.9. Affected is the function sub_3C434 of the file /goform/AdvSetWan. This manipulation of the argument wanm… |
CVE-2026-3677 | High | 8.8 | 2026-03-07 | A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/fu… |
CVE-2026-29068 | High | 7.5 | 2026-03-06 | PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmed… |
CVE-2026-3613 | High | 7.2 | 2026-03-06 | A vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the file /cgi-bin/login.cgi. Such manipulat… |
CVE-2025-70616 | High | 7.8 | 2026-03-05 | A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver (version 1.2.0.0) in the IOCTL handler for code 0x80102058. The v… |
CVE-2025-70233 | Critical | 9.8 | 2026-03-05 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetEnableWizard. |
CVE-2025-70232 | Critical | 9.8 | 2026-03-05 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetMACFilter. |
CVE-2025-70230 | Critical | 9.8 | 2026-03-05 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS. |
CVE-2025-70229 | Critical | 9.8 | 2026-03-05 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSchedule. |
CVE-2025-70222 | Critical | 9.8 | 2026-03-04 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode. |
CVE-2025-70225 | Critical | 9.8 | 2026-03-04 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curtime parameter to the goform/formEasySetupWWConfig component |
CVE-2025-70221 | Critical | 9.8 | 2026-03-04 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin. |
CVE-2025-70219 | Critical | 9.8 | 2026-03-04 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the goform/formDeviceReboot. |
CVE-2025-70226 | Critical | 9.8 | 2026-03-04 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formEasySetupWizard. |
CVE-2025-70223 | Critical | 9.8 | 2026-03-04 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAdvNetwork. |
CVE-2025-70220 | Critical | 9.8 | 2026-03-04 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAutoDetecWAN_wizard4. |
CVE-2025-70218 | Critical | 9.8 | 2026-03-04 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via POST to the goform/formAdvFirewall component. |
CVE-2026-3439 | Medium | 4.9 | 2026-03-04 | A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall. |
CVE-2025-70240 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard51. |
CVE-2025-70239 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard55. |
CVE-2025-70234 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetQoS. |
CVE-2025-70241 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANType_Wizard5. |
CVE-2025-70237 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetPortTr. |
CVE-2025-70236 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDomainFilter. |
CVE-2025-69765 | High | 7.5 | 2026-03-03 | Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote c… |
CVE-2025-70252 | High | 7.5 | 2026-03-02 | An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to sprintf… |
CVE-2026-3400 | High | 8.8 | 2026-03-02 | A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConver… |
CVE-2026-28422 | Low | 2.2 | 2026-02-27 | Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline… |
CVE-2026-24497 | Critical | 9.8 | 2026-02-27 | Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue affects ThinkWise: from 7 through 23. |
CVE-2026-20797 | Medium | 4.3 | 2026-02-27 | A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stack corruption and a… |
CVE-2026-23747 | Low | 3.7 | 2026-02-26 | Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils. The golioth_payload_as_in… |
CVE-2026-27821 | High | 7.8 | 2026-02-26 | GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in `src/filters/d… |
CVE-2026-3137 | Medium | 5.3 | 2026-02-25 | A security vulnerability has been detected in CodeAstro Food Ordering System 1.0. This affects an unknown function of the file food_ordering.exe. Such manipula… |
CVE-2026-0399 | Medium | 4.9 | 2026-02-24 | Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint. |
CVE-2026-25968 | High | 7.4 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflo… |
CVE-2026-25967 | High | 7.4 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a stack-based buffer overflow exists… |
CVE-2026-3044 | High | 8.8 | 2026-02-24 | A vulnerability has been found in Tenda AC8 16.03.34.06. This affects the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Se… |
CVE-2025-69700 | High | 7.5 | 2026-02-23 | Tenda FH1203 V2.0.1.6 contains a stack-based buffer overflow vulnerability in the modify_add_client_prio function, which is reachable via the formSetClientPrio… |
CVE-2026-2962 | High | 8.8 | 2026-02-23 | A vulnerability was found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_460F30 of the file /boafrm/formDateReboot of the component Sc… |
CVE-2026-2961 | High | 8.8 | 2026-02-23 | A vulnerability has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4196C4 of the file /boafrm/formVpnConfigSetup of the component VPN Con… |
CVE-2026-2960 | High | 8.8 | 2026-02-23 | A flaw has been found in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_468D64 of the file /boafrm/formDhcpv6s. Executing a manipulation o… |
CVE-2026-2959 | High | 8.8 | 2026-02-23 | A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_44E0F8 of the file /boafrm/formNewSchedule. Perform… |
CVE-2026-2958 | High | 8.8 | 2026-02-23 | A security vulnerability has been detected in D-Link DWR-M960 1.01.07. Affected is the function sub_457C5C of the file /boafrm/formWsc. Such manipulation of th… |
CVE-2026-2930 | Medium | 6.3 | 2026-02-22 | A vulnerability was identified in Tenda A18 15.13.07.13. The affected element is the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the compone… |
CVE-2026-2929 | High | 8.8 | 2026-02-22 | A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_453140 of the file /boafrm/formWlAc of the component Wireless Access Co… |
CVE-2026-2928 | High | 8.8 | 2026-02-22 | A vulnerability was found in D-Link DWR-M960 1.01.07. This issue affects the function sub_452CCC of the file /boafrm/formWlEncrypt of the component WLAN Encryp… |
CVE-2026-2927 | High | 8.8 | 2026-02-22 | A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_462590 of the file /boafrm/formOpMode of the component O… |
CVE-2026-2926 | High | 8.8 | 2026-02-22 | A flaw has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4237AC of the file /boafrm/formLteSetup of the component LTE Configuration Endp… |
CVE-2026-2925 | High | 8.8 | 2026-02-22 | A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_42B5A0 of the file /boafrm/formBridgeVlan of the component… |
CVE-2026-2910 | High | 8.8 | 2026-02-22 | A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument… |
CVE-2026-2909 | High | 8.8 | 2026-02-22 | A vulnerability was detected in Tenda HG9 300001138. This affects an unknown part of the file /boaform/formPing of the component Diagnostic Ping Endpoint. Perf… |
CVE-2026-2908 | High | 8.8 | 2026-02-22 | A security vulnerability has been detected in Tenda HG9 300001138. Affected by this issue is some unknown functionality of the file /boaform/formLoopBack of th… |
CVE-2026-2907 | High | 8.8 | 2026-02-22 | A weakness has been identified in Tenda HG9 300001138. Affected by this vulnerability is an unknown functionality of the file /boaform/formgponConf of the comp… |
CVE-2026-2906 | High | 8.8 | 2026-02-22 | A security flaw has been discovered in Tenda HG9 300001138. Affected is an unknown function of the file /boaform/formSamba of the component Samba Configuration… |
CVE-2026-2905 | High | 8.8 | 2026-02-22 | A vulnerability was identified in Tenda HG9 300001138. This impacts an unknown function of the file /boaform/formWlanSetup of the component Wireless Configurat… |
CVE-2026-2886 | High | 8.8 | 2026-02-21 | A weakness has been identified in Tenda A21 1.0.0.0. This affects the function set_device_name of the file /goform/SetOnlineDevName. This manipulation of the a… |
CVE-2026-2885 | High | 8.8 | 2026-02-21 | A security flaw has been discovered in D-Link DWR-M960 1.01.07. The impacted element is the function sub_469104 of the file /boafrm/formIpv6Setup. The manipula… |
CVE-2026-2884 | High | 8.8 | 2026-02-21 | A vulnerability was identified in D-Link DWR-M960 1.01.07. The affected element is the function sub_41914C of the file /boafrm/formWanConfigSetup of the compon… |
CVE-2026-2883 | High | 8.8 | 2026-02-21 | A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_427D74 of the file /boafrm/formIpQoS. Executing a manipulation of the a… |
CVE-2026-2882 | High | 8.8 | 2026-02-21 | A vulnerability was found in D-Link DWR-M960 1.01.07. This issue affects the function sub_46385C of the file /boafrm/formDosCfg. Performing a manipulation of t… |
CVE-2026-2881 | High | 8.8 | 2026-02-21 | A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_425FF8 of the file /boafrm/formFirewallAdv of the compon… |
CVE-2026-2877 | High | 8.8 | 2026-02-21 | A vulnerability has been found in Tenda A18 15.13.07.13. This affects the function strcpy of the file /goform/WifiExtraSet of the component Httpd Service. The… |
CVE-2026-2876 | High | 8.8 | 2026-02-21 | A vulnerability was determined in Tenda A18 15.13.07.13. This affects the function parse_macfilter_rule of the file /goform/setBlackRule. This manipulation of… |
CVE-2026-2874 | High | 8.8 | 2026-02-21 | A flaw has been found in Tenda A21 1.0.0.0. Impacted is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. Executing a manipula… |
CVE-2026-2873 | High | 8.8 | 2026-02-21 | A vulnerability was detected in Tenda A21 1.0.0.0. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. Performing a manipulation of… |
CVE-2026-2872 | High | 8.8 | 2026-02-21 | A security vulnerability has been detected in Tenda A21 1.0.0.0. This vulnerability affects the function set_device_name of the file /goform/setBlackRule of th… |
CVE-2026-2871 | High | 8.8 | 2026-02-21 | A weakness has been identified in Tenda A21 1.0.0.0. This affects the function fromSetIpMacBind of the file /goform/SetIpMacBind. This manipulation of the argu… |
CVE-2026-2870 | High | 8.8 | 2026-02-21 | A security flaw has been discovered in Tenda A21 1.0.0.0. Affected by this issue is the function set_qosMib_list of the file /goform/formSetQosBand. The manipu… |
CVE-2019-25437 | Medium | 6.2 | 2026-02-20 | Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supply… |
CVE-2019-25435 | High | 7.8 | 2026-02-20 | Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to exe… |
CVE-2019-25434 | High | 7.5 | 2026-02-20 | SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in t… |