CWE-121 · Stack-based Buffer Overflow (page 17)
Page 17 of 39 — CVEs classified under CWE-121, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-8653 | High | 8.8 | 2025-08-06 | Kenwood DMX958XR JKRadioService Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execut… |
CVE-2025-54617 | Medium | 6.8 | 2025-08-06 | Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability can cause RCE. |
CVE-2013-10068 | | 2025-08-05 | Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based buffer overflow vulnerability in the npFo… | |
CVE-2013-10064 | | 2025-08-05 | A stack-based buffer overflow vulnerability exists in ActFax Server version 5.01. The server's RAW protocol interface fails to safely process user-supplied dat… | |
CVE-2012-10031 | | 2025-08-05 | BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist fi… | |
CVE-2012-10023 | Critical | 9.8 | 2025-08-05 | A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. The server fails to properly validate input passed to the USER comman… |
CVE-2025-7032 | High | 7.8 | 2025-08-05 | A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory spa… |
CVE-2025-7844 | | 2025-08-04 | Exporting a TPM based RSA key larger than 2048 bits from the TPM could overrun a stack buffer if the default `MAX_RSA_KEY_BITS=2048` is used. If your TPM 2.0 m… | |
CVE-2025-23284 | High | 7.8 | 2025-08-02 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack buffer overflow. A successful exploit of… |
CVE-2025-23283 | High | 7.8 | 2025-08-02 | NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow… |
CVE-2013-10057 | | 2025-08-01 | A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control (PDF_IN_1.ocx), specifically the ConnectToSynactis method. When a… | |
CVE-2025-8477 | High | 7.4 | 2025-08-01 | Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute a… |
CVE-2025-8475 | High | 7.4 | 2025-08-01 | Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary… |
CVE-2025-8474 | Medium | 6.8 | 2025-08-01 | Alpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary co… |
CVE-2025-8472 | High | 7.4 | 2025-08-01 | Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute a… |
CVE-2025-53009 | High | 7.5 | 2025-08-01 | MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In versions 1.39.2 and below, w… |
CVE-2025-51385 | Low | 3.5 | 2025-07-31 | D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the yyxz_dlink_asp function via the id parameter. |
CVE-2025-51384 | Low | 3.5 | 2025-07-31 | D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_net_asp function via the remot_ip parameter. |
CVE-2025-51383 | Low | 3.5 | 2025-07-31 | D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the host_ip parameter. |
CVE-2014-125122 | | 2025-07-31 | A stack-based buffer overflow vulnerability exists in the tmUnblock.cgi endpoint of the Linksys WRT120N wireless router. The vulnerability is triggered by send… | |
CVE-2013-10042 | Critical | 9.8 | 2025-07-31 | A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a spe… |
CVE-2013-10036 | | 2025-07-31 | A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfi… | |
CVE-2012-10021 | Critical | 9.8 | 2025-07-31 | A stack-based buffer overflow vulnerability exists in D-Link DIR-605L Wireless N300 Cloud Router firmware versions 1.12 and 1.13 via the getAuthCode() function… |
CVE-2011-10008 | | 2025-07-31 | A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http… | |
CVE-2025-53022 | High | 8.6 | 2025-07-30 | TrustedFirmware-M (aka Trusted Firmware for M profile Arm CPUs) before 2.1.3 and 2.2.x before 2.2.1 lacks length validation during a firmware upgrade. While pr… |
CVE-2025-50464 | Medium | 6.5 | 2025-07-30 | A buffer overflow vulnerability exists in the upload.cgi module of the iptime NAS firmware v1.5.04. The vulnerability arises due to the unsafe use of the strcp… |
CVE-2025-4425 | High | 8.2 | 2025-07-30 | The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for… |
CVE-2025-33092 | High | 7.8 | 2025-07-29 | IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could… |
CVE-2024-52894 | Medium | 4.9 | 2025-07-29 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 throug… |
CVE-2024-51473 | Medium | 6.5 | 2025-07-29 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 throug… |
CVE-2024-49828 | Medium | 6.5 | 2025-07-29 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 throug… |
CVE-2025-8184 | High | 8.8 | 2025-07-26 | A vulnerability was found in D-Link DIR-513 up to 1.10 and classified as critical. This issue affects the function formSetWanL2TPcallback of the file /goform/f… |
CVE-2014-125117 | Critical | 9.8 | 2025-07-25 | A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a… |
CVE-2014-125114 | | 2025-07-25 | A stack-based buffer overflow vulnerability exists in i-Ftp version 2.20 due to improper handling of the Time attribute within Schedule.xml. By placing a speci… | |
CVE-2025-8159 | High | 8.8 | 2025-07-25 | A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. This issue affects the function formLanguageChange of the file /goform/formLang… |
CVE-2025-8131 | High | 8.8 | 2025-07-25 | A vulnerability was found in Tenda AC20 16.03.08.05. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /… |
CVE-2025-51088 | Medium | 5.3 | 2025-07-24 | Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet. The manipulation of the argument `shareSpeed` leads to stack-based… |
CVE-2025-51087 | High | 8.6 | 2025-07-24 | Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based… |
CVE-2025-51085 | Medium | 5.3 | 2025-07-24 | Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument `timeZone` and `timeType` leads t… |
CVE-2025-51082 | Medium | 5.3 | 2025-07-24 | Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/fast_setting_wifi_set. The manipulation of the argument `timeZone` leads to stack… |
CVE-2025-40596 | High | 7.3 | 2025-07-23 | A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or pote… |
CVE-2025-41687 | Critical | 9.8 | 2025-07-23 | An unauthenticated remote attacker may use a stack based buffer overflow in the u-link Management API to gain full access on the affected devices. |
CVE-2025-8060 | High | 8.8 | 2025-07-23 | A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical. Affected by this vulnerability is the function sub_46C940 of the file /gof… |
CVE-2025-8017 | High | 8.8 | 2025-07-22 | A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function formSetMacFilterCfg of the file /goform/setMac… |
CVE-2025-7921 | Critical | 9.8 | 2025-07-21 | Certain modem models developed by Askey has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's exe… |
CVE-2025-7911 | High | 8.8 | 2025-07-20 | A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf of the file /upnp_ctrl.asp of the compo… |
CVE-2025-7910 | High | 8.8 | 2025-07-20 | A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function sprintf of the file /goform/formSetWanNonLogin of the c… |
CVE-2025-7909 | High | 8.8 | 2025-07-20 | A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. Affected by this issue is the function sprintf of the file /goform/formLanSetup… |
CVE-2025-7908 | High | 8.8 | 2025-07-20 | A vulnerability was found in D-Link DI-8100 1.0. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file /ddns.asp… |
CVE-2025-7855 | High | 8.8 | 2025-07-19 | A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromqossetting of the file /goform/qoss… |
CVE-2025-7854 | High | 8.8 | 2025-07-19 | A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function fromVirtualSer of the file /goform/VirtualSer. The manip… |
CVE-2025-7853 | High | 8.8 | 2025-07-19 | A vulnerability was found in Tenda FH451 1.0.0.9. It has been rated as critical. This issue affects the function fromSetIpBind of the file /goform/SetIpBind. T… |
CVE-2025-7807 | High | 8.8 | 2025-07-18 | A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. This issue affects the function fromSafeUrlFilter of the file /goform… |
CVE-2025-7806 | High | 8.8 | 2025-07-18 | A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. This vulnerability affects the function fromSafeClientFilter of the file /goform/SafeC… |
CVE-2025-7805 | High | 8.8 | 2025-07-18 | A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromPptpUserSetting of the file /goform/PPTPUserSetting… |
CVE-2025-7796 | High | 8.8 | 2025-07-18 | A vulnerability, which was classified as critical, was found in Tenda FH451 1.0.0.9. This affects the function fromPptpUserAdd of the file /goform/PPTPDClient… |
CVE-2025-7795 | High | 8.8 | 2025-07-18 | A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. Affected by this issue is the function fromP2pListFilter of the file… |
CVE-2025-7794 | High | 8.8 | 2025-07-18 | A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromNatStaticSetting of the file /gofor… |
CVE-2025-7793 | High | 8.8 | 2025-07-18 | A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary. T… |
CVE-2025-7792 | High | 8.8 | 2025-07-18 | A vulnerability was found in Tenda FH451 1.0.0.9. It has been rated as critical. This issue affects the function formSafeEmailFilter of the file /goform/SafeEm… |
CVE-2025-7790 | High | 8.8 | 2025-07-18 | A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. This affects an unknown part of the file /menu_nat.asp of the compo… |
CVE-2025-7762 | High | 8.8 | 2025-07-17 | A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some unknown processing of the file /menu_na… |
CVE-2025-34127 | | 2025-07-16 | A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can… | |
CVE-2025-34124 | | 2025-07-16 | A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0 via malicious .h3m map files t… | |
CVE-2025-34123 | | 2025-07-16 | A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted .VSC configuration file. The issue occu… | |
CVE-2025-36097 | High | 7.5 | 2025-07-16 | IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused by a stac… |
CVE-2025-52082 | Medium | 6.5 | 2025-07-15 | In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs whe… |
CVE-2025-52081 | Medium | 6.5 | 2025-07-15 | In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerabil… |
CVE-2025-52080 | Medium | 6.5 | 2025-07-15 | In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerabil… |
CVE-2025-34108 | | 2025-07-15 | A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterprise version 9.0.34. An attacker can send a specially crafted… | |
CVE-2025-34107 | | 2025-07-15 | A buffer overflow vulnerability exists in the WinaXe FTP Client version 7.7 within the FTP banner parsing functionality, WCMDPA10.dll. When the client connects… | |
CVE-2025-7603 | High | 7.2 | 2025-07-14 | A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. Affected is an unknown function of the file /jingx.asp of the compo… |
CVE-2025-7602 | High | 7.2 | 2025-07-14 | A vulnerability was found in D-Link DI-8100 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /arp_sys.asp of the c… |
CVE-2025-7598 | High | 8.8 | 2025-07-14 | A vulnerability classified as critical was found in Tenda AX1803 1.0.0.1. Affected by this vulnerability is the function formSetWifiMacFilterCfg of the file /g… |
CVE-2025-7597 | High | 8.8 | 2025-07-14 | A vulnerability classified as critical has been found in Tenda AX1803 1.0.0.1. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg… |
CVE-2025-7596 | High | 8.8 | 2025-07-14 | A vulnerability was found in Tenda FH1205 2.0.0.7(775). It has been rated as critical. This issue affects the function formWifiExtraSet of the file /goform/Wif… |
CVE-2025-7586 | High | 8.8 | 2025-07-14 | A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. Affected by this vulnerability is the function formSetAPCfg of the fi… |
CVE-2025-7551 | High | 8.8 | 2025-07-14 | A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been declared as critical. Affected by this vulnerability is the function fromPptpUserAdd of th… |
CVE-2025-7550 | High | 8.8 | 2025-07-13 | A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been classified as critical. Affected is the function fromGstDhcpSetSer of the file /goform/Gst… |
CVE-2025-7549 | High | 8.8 | 2025-07-13 | A vulnerability was found in Tenda FH1201 1.2.0.14(408) and classified as critical. This issue affects the function frmL7ProtForm of the file /goform/L7Prot. T… |
CVE-2025-7548 | High | 8.8 | 2025-07-13 | A vulnerability has been found in Tenda FH1201 1.2.0.14(408) and classified as critical. This vulnerability affects the function formSafeEmailFilter of the fil… |
CVE-2025-7544 | High | 8.8 | 2025-07-13 | A vulnerability was found in Tenda AC1206 15.03.06.23. It has been rated as critical. This issue affects the function formSetMacFilterCfg of the file /goform/s… |
CVE-2025-7532 | High | 8.8 | 2025-07-13 | A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. This vulnerability affects the function fromwebExcptypemanFilter of th… |
CVE-2025-7531 | High | 8.8 | 2025-07-13 | A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). This affects the function fromPptpUserSetting of the file /goform/P… |
CVE-2025-7530 | High | 8.8 | 2025-07-13 | A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function fromPptpUserAdd of the… |
CVE-2025-7529 | High | 8.8 | 2025-07-13 | A vulnerability classified as critical was found in Tenda FH1202 1.2.0.14(408). Affected by this vulnerability is the function fromNatlimit of the file /goform… |
CVE-2025-7528 | High | 8.8 | 2025-07-13 | A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14(408). Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetS… |
CVE-2025-7527 | High | 8.8 | 2025-07-13 | A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects the function fromAdvSetWan of the file /goform/AdvSe… |
CVE-2025-7506 | High | 8.8 | 2025-07-12 | A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromNatlimit of the file /goform/Natlim… |
CVE-2025-7505 | High | 8.8 | 2025-07-12 | A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function frmL7ProtForm of the file /goform/L7Prot of the componen… |
CVE-2025-7434 | High | 8.8 | 2025-07-11 | A vulnerability was found in Tenda FH451 up to 1.0.0.9 and classified as critical. Affected by this issue is the function fromAddressNat of the file /goform/ad… |
CVE-2025-7423 | High | 8.8 | 2025-07-11 | A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). Affected by this vulnerability is the function formWifiMacFilterSet of the file… |
CVE-2025-7422 | High | 8.8 | 2025-07-11 | A vulnerability classified as critical has been found in Tenda O3V2 1.0.0.12(3880). Affected is the function setAutoReboot of the file /goform/setNetworkServic… |
CVE-2025-7421 | High | 8.8 | 2025-07-11 | A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been rated as critical. This issue affects the function fromMacFilterModify of the file /goform/… |
CVE-2025-7420 | High | 8.8 | 2025-07-11 | A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been declared as critical. This vulnerability affects the function formWifiBasicSet of the file… |
CVE-2025-7419 | High | 8.8 | 2025-07-10 | A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been classified as critical. This affects the function fromSpeedTestSet of the file /goform/setR… |
CVE-2025-7418 | High | 8.8 | 2025-07-10 | A vulnerability was found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this issue is the function fromPingResultGet of the file /goform… |
CVE-2025-7417 | High | 8.8 | 2025-07-10 | A vulnerability has been found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this vulnerability is the function fromNetToolGet of the fi… |
CVE-2025-7416 | High | 8.8 | 2025-07-10 | A vulnerability, which was classified as critical, was found in Tenda O3V2 1.0.0.12(3880). Affected is the function fromSysToolTime of the file /goform/setSysT… |
CVE-2025-7206 | Critical | 9.8 | 2025-07-09 | A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10. This issue affects the function sub_410DDC of the file switch_languag… |