CWE-121 · Stack-based Buffer Overflow (page 24)
Page 24 of 37 — CVEs classified under CWE-121, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-35727 | High | 8.8 | 2024-05-03 | D-Link DAP-2622 DDP Reboot Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers… |
CVE-2023-35726 | High | 8.8 | 2024-05-03 | D-Link DAP-2622 DDP User Verification Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent… |
CVE-2023-35725 | High | 8.8 | 2024-05-03 | D-Link DAP-2622 DDP User Verification Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent… |
CVE-2023-35718 | High | 8.8 | 2024-05-03 | D-Link DAP-2622 DDP Change ID Password Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacen… |
CVE-2023-35710 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2023-34306 | High | 8.8 | 2024-05-03 | Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute… |
CVE-2023-34302 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb… |
CVE-2023-34287 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb… |
CVE-2023-34285 | High | 8.8 | 2024-05-03 | NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to exec… |
CVE-2023-32149 | High | 8.8 | 2024-05-03 | D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers… |
CVE-2023-32146 | High | 8.8 | 2024-05-03 | D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to ex… |
CVE-2023-32144 | High | 8.8 | 2024-05-03 | D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attacker… |
CVE-2023-32142 | High | 8.8 | 2024-05-03 | D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execu… |
CVE-2023-32141 | High | 8.8 | 2024-05-03 | D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers t… |
CVE-2023-32140 | High | 7.5 | 2024-05-03 | D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to e… |
CVE-2023-32139 | High | 8.8 | 2024-05-03 | D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitr… |
CVE-2023-32136 | High | 8.8 | 2024-05-03 | D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execu… |
CVE-2023-27369 | High | 8.8 | 2024-05-03 | NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute ar… |
CVE-2023-27368 | High | 8.8 | 2024-05-03 | NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arb… |
CVE-2023-27361 | High | 8.0 | 2024-05-03 | NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to exe… |
CVE-2023-27346 | High | 8.8 | 2024-05-03 | TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execut… |
CVE-2023-27333 | Medium | 6.8 | 2024-05-03 | TP-Link Archer AX21 tmpServer Command 0x422 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attacke… |
CVE-2023-27332 | High | 8.8 | 2024-05-03 | TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to… |
CVE-2023-51631 | Medium | 6.8 | 2024-05-02 | D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attacker… |
CVE-2024-33518 | Medium | 5.3 | 2024-05-01 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation… |
CVE-2024-33517 | Medium | 5.3 | 2024-05-01 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation… |
CVE-2024-33516 | Medium | 5.3 | 2024-05-01 | An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitatio… |
CVE-2024-33515 | Medium | 5.3 | 2024-05-01 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vul… |
CVE-2024-33514 | Medium | 5.3 | 2024-05-01 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vul… |
CVE-2024-33513 | Medium | 5.9 | 2024-05-01 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vul… |
CVE-2024-33512 | Critical | 9.8 | 2024-05-01 | There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution… |
CVE-2024-33511 | Critical | 9.8 | 2024-05-01 | There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending spec… |
CVE-2024-26305 | Critical | 9.8 | 2024-05-01 | There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2024-26304 | Critical | 9.8 | 2024-05-01 | There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending special… |
CVE-2024-33835 | Critical | 9.8 | 2024-05-01 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the remoteIp parameter from formSetSafeWanWebMan function. |
CVE-2024-4192 | High | 7.8 | 2024-04-30 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker… |
CVE-2023-50434 | Critical | 9.8 | 2024-04-29 | emdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. Th… |
CVE-2024-34020 | Medium | 6.5 | 2024-04-29 | A stack-based buffer overflow was found in the putSDN() function of mail.c in hcode through 2.1. |
CVE-2024-4291 | High | 8.8 | 2024-04-27 | A vulnerability was found in Tenda A301 15.13.08.12_multi_TDE01. It has been rated as critical. This issue affects the function formAddMacfilterRule of the fil… |
CVE-2024-4252 | High | 8.8 | 2024-04-27 | A vulnerability classified as critical has been found in Tenda i22 1.0.0.3(4687). This affects the function formSetUrlFilterRule. The manipulation of the argum… |
CVE-2024-4251 | High | 8.8 | 2024-04-27 | A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been rated as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform… |
CVE-2024-4250 | High | 8.8 | 2024-04-27 | A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been declared as critical. Affected by this vulnerability is the function formwrlSSIDset of the f… |
CVE-2024-4249 | High | 8.8 | 2024-04-27 | A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been classified as critical. Affected is the function formwrlSSIDget of the file /goform/wifiSSID… |
CVE-2024-4248 | High | 8.8 | 2024-04-27 | A vulnerability was found in Tenda i21 1.0.0.14(4656) and classified as critical. This issue affects the function formQosManage_user. The manipulation of the a… |
CVE-2024-4247 | High | 8.8 | 2024-04-27 | A vulnerability has been found in Tenda i21 1.0.0.14(4656) and classified as critical. This vulnerability affects the function formQosManage_auto. The manipula… |
CVE-2024-4246 | High | 8.8 | 2024-04-27 | A vulnerability, which was classified as critical, was found in Tenda i21 1.0.0.14(4656). This affects the function formQosManageDouble_auto. The manipulation… |
CVE-2024-4245 | High | 8.8 | 2024-04-27 | A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.14(4656). Affected by this issue is the function formQosManageDouble_user… |
CVE-2024-4244 | High | 8.8 | 2024-04-26 | A vulnerability classified as critical was found in Tenda W9 1.0.0.7(4456). Affected by this vulnerability is the function fromDhcpSetSer of the file /goform/D… |
CVE-2024-4243 | High | 8.8 | 2024-04-26 | A vulnerability classified as critical has been found in Tenda W9 1.0.0.7(4456). Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The m… |
CVE-2024-4242 | High | 8.8 | 2024-04-26 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. This issue affects the function formwrlSSIDget of the file /goform/wifiSSID… |
CVE-2024-4241 | High | 8.8 | 2024-04-26 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. This vulnerability affects the function formQosManageDouble_auto. The ma… |
CVE-2024-4240 | High | 8.8 | 2024-04-26 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. This affects the function formQosManageDouble_user. The manipulation o… |
CVE-2024-4239 | High | 8.8 | 2024-04-26 | A vulnerability was found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this issue is the function formSetRebootTimer of the file /goform/Set… |
CVE-2024-4238 | High | 8.8 | 2024-04-26 | A vulnerability has been found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this vulnerability is the function formSetDeviceName of the file… |
CVE-2024-4237 | High | 8.8 | 2024-04-26 | A vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1. Affected is the function R7WebsSecurityHandler of the file /goform/execCo… |
CVE-2024-4236 | High | 8.8 | 2024-04-26 | A vulnerability, which was classified as critical, has been found in Tenda AX1803 1.0.0.1. This issue affects the function formSetSysToolDDNS of the file /gofo… |
CVE-2023-50362 | Medium | 5.0 | 2024-04-26 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-50361 | Medium | 5.0 | 2024-04-26 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-6116 | High | 8.9 | 2024-04-26 | Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker could inject malicious into http reque… |
CVE-2023-6095 | High | 8.9 | 2024-04-26 | Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An attacker could inject malicious HTTP header… |
CVE-2024-4171 | High | 8.8 | 2024-04-25 | A vulnerability classified as critical has been found in Tenda W30E 1.0/1.0.1.25. Affected is the function fromWizardHandle of the file /goform/WizardHandle. T… |
CVE-2024-4170 | High | 8.8 | 2024-04-25 | A vulnerability was found in Tenda 4G300 1.01.42. It has been rated as critical. This issue affects the function sub_429A30. The manipulation of the argument l… |
CVE-2024-4169 | High | 8.8 | 2024-04-25 | A vulnerability was found in Tenda 4G300 1.01.42. It has been declared as critical. This vulnerability affects the function sub_42775C/sub_4279CC. The manipula… |
CVE-2024-4168 | High | 8.8 | 2024-04-25 | A vulnerability was found in Tenda 4G300 1.01.42. It has been classified as critical. This affects the function sub_4260F0. The manipulation of the argument up… |
CVE-2024-4167 | High | 8.8 | 2024-04-25 | A vulnerability was found in Tenda 4G300 1.01.42 and classified as critical. Affected by this issue is the function sub_422AA4. The manipulation of the argumen… |
CVE-2024-4166 | High | 8.8 | 2024-04-25 | A vulnerability has been found in Tenda 4G300 1.01.42 and classified as critical. Affected by this vulnerability is the function sub_41E858. The manipulation o… |
CVE-2024-4165 | High | 8.8 | 2024-04-25 | A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502). Affected is the function modifyDhcpRule of the file /goform/modifyDh… |
CVE-2024-4164 | High | 8.8 | 2024-04-25 | A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(9502). This issue affects the function formModifyPppAuthWhiteMac of th… |
CVE-2024-4127 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. Affected is the function guestWifiRuleRefresh. The manipulation of the… |
CVE-2024-4126 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function formSetSysTime of the file /goform/SetSysTimeCfg… |
CVE-2024-4125 | High | 8.8 | 2024-04-24 | A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. This vulnerability affects the function formSetStaticRoute of the file /gof… |
CVE-2024-4124 | High | 8.8 | 2024-04-24 | A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. This affects the function formSetRemoteWebManage of the file /goform/Set… |
CVE-2024-4123 | High | 8.8 | 2024-04-24 | A vulnerability, which was classified as critical, has been found in Tenda W15E 15.11.0.14. Affected by this issue is the function formSetPortMapping of the fi… |
CVE-2024-4122 | High | 8.8 | 2024-04-24 | A vulnerability classified as critical was found in Tenda W15E 15.11.0.14. Affected by this vulnerability is the function formSetDebugCfg of the file /goform/s… |
CVE-2024-4121 | High | 8.8 | 2024-04-24 | A vulnerability classified as critical has been found in Tenda W15E 15.11.0.14. Affected is the function formQOSRuleDel. The manipulation of the argument qosIn… |
CVE-2024-4120 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been rated as critical. This issue affects the function formIPMacBindModify of the file /goform/modi… |
CVE-2024-4119 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been declared as critical. This vulnerability affects the function formIPMacBindDel of the file /gof… |
CVE-2024-4118 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. This affects the function formIPMacBindAdd of the file /goform/addIpMac… |
CVE-2024-4117 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this issue is the function formDelPortMapping of the file /goform/De… |
CVE-2024-4116 | High | 8.8 | 2024-04-24 | A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this vulnerability is the function formDelDhcpRule of the file… |
CVE-2024-4115 | High | 8.8 | 2024-04-24 | A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Affected is the function formAddDnsForward of the file /goform/AddDnsFor… |
CVE-2024-4114 | High | 8.8 | 2024-04-24 | A vulnerability, which was classified as critical, has been found in Tenda TX9 22.03.02.10. This issue affects the function sub_42C014 of the file /goform/Powe… |
CVE-2024-4113 | High | 8.8 | 2024-04-24 | A vulnerability classified as critical was found in Tenda TX9 22.03.02.10. This vulnerability affects the function sub_42D4DC of the file /goform/SetSysTimeCfg… |
CVE-2024-4112 | High | 8.8 | 2024-04-24 | A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10. This affects the function sub_42CB94 of the file /goform/SetVirtualServerCfg. T… |
CVE-2024-4111 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda TX9 22.03.02.10. It has been rated as critical. Affected by this issue is the function sub_42BD7C of the file /goform/SetLED… |
CVE-2024-4066 | High | 8.8 | 2024-04-23 | A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWa… |
CVE-2024-4065 | High | 8.8 | 2024-04-23 | A vulnerability was found in Tenda AC8 16.03.34.09. It has been rated as critical. This issue affects the function formSetRebootTimer of the file /goform/SetRe… |
CVE-2024-4064 | High | 8.8 | 2024-04-23 | A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. This vulnerability affects the function R7WebsSecurityHandler of the file… |
CVE-2024-33217 | High | 7.5 | 2024-04-23 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat. |
CVE-2024-33215 | Critical | 9.8 | 2024-04-23 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/addressNat. |
CVE-2024-33213 | Medium | 6.5 | 2024-04-23 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic. |
CVE-2024-33212 | High | 8.8 | 2024-04-23 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm. |
CVE-2024-33211 | High | 7.3 | 2024-04-23 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex. |
CVE-2023-51792 | Low | 3.3 | 2024-04-19 | Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported… |
CVE-2023-50007 | Medium | 4.0 | 2024-04-19 | FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the av_samples_set_silence function in thelibavutil/samplefmt… |
CVE-2023-5407 | Medium | 5.9 | 2024-04-17 | Controller denial of service due to improper handling of a specially crafted message received by the controller. See Honeywell Security Notification for recom… |
CVE-2023-5403 | High | 8.1 | 2024-04-17 | Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Se… |
CVE-2023-5401 | High | 8.1 | 2024-04-17 | Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker perform… |
CVE-2023-5395 | High | 8.1 | 2024-04-17 | Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution. See Ho… |
CVE-2024-32320 | Medium | 5.9 | 2024-04-17 | Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function. |