CWE-121 · Stack-based Buffer Overflow (page 25)
Page 25 of 37 — CVEs classified under CWE-121, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-32316 | Medium | 6.5 | 2024-04-17 | Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability in the fromDhcpListClient function. |
CVE-2024-32305 | High | 8.8 | 2024-04-17 | Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function. |
CVE-2024-32303 | High | 8.0 | 2024-04-17 | Tenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle fu… |
CVE-2024-32315 | Medium | 4.7 | 2024-04-17 | Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function. |
CVE-2024-32311 | Medium | 6.5 | 2024-04-17 | Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function. |
CVE-2024-32306 | Medium | 5.7 | 2024-04-17 | Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function. |
CVE-2024-32302 | Medium | 6.3 | 2024-04-17 | Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function. |
CVE-2024-32299 | High | 8.8 | 2024-04-17 | Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function. |
CVE-2024-32293 | High | 8.0 | 2024-04-17 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromDhcpListClient function. |
CVE-2024-32291 | High | 7.5 | 2024-04-17 | Tenda W30E v1.0 firmware v1.0.1.25(633) has a stack overflow vulnerability via the page parameter in the fromNatlimit function. |
CVE-2024-32290 | Medium | 6.7 | 2024-04-17 | Tenda W30E v1.0 v1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromAddressNat function. |
CVE-2024-32288 | Medium | 6.3 | 2024-04-17 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function. |
CVE-2024-32287 | Medium | 6.5 | 2024-04-17 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function. |
CVE-2024-32285 | High | 8.0 | 2024-04-17 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the password parameter in the formaddUserName function. |
CVE-2024-32313 | Medium | 6.5 | 2024-04-17 | Tenda FH1205 V2.0.0.7(775) firmware has a stack overflow vulnerability located via the adslPwd parameter of the formWanParameterSetting function. |
CVE-2024-32312 | Medium | 5.7 | 2024-04-17 | Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the adslPwd parameter of the formWanParameterSetting function. |
CVE-2024-32310 | High | 8.0 | 2024-04-17 | Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the PPW parameter of the fromWizardHandle function. |
CVE-2024-32307 | High | 7.4 | 2024-04-17 | Tenda FH1205 V2.0.0.7(775) firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function. |
CVE-2024-3910 | High | 8.8 | 2024-04-17 | A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.9(1307). Affected by this issue is the function fromDhcpListClient of th… |
CVE-2024-3909 | High | 8.8 | 2024-04-17 | A vulnerability classified as critical was found in Tenda AC500 2.0.1.9(1307). Affected by this vulnerability is the function formexeCommand of the file /gofor… |
CVE-2024-3907 | High | 8.8 | 2024-04-17 | A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been rated as critical. This issue affects the function formSetCfm of the file /goform/setcfm. T… |
CVE-2024-3906 | High | 8.8 | 2024-04-17 | A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /g… |
CVE-2024-3905 | High | 8.8 | 2024-04-17 | A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been classified as critical. This affects the function R7WebsSecurityHandler of the file /goform… |
CVE-2024-21054 | Medium | 4.9 | 2024-04-16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0… |
CVE-2024-21053 | Medium | 4.9 | 2024-04-16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploita… |
CVE-2024-21030 | Medium | 6.1 | 2024-04-16 | Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affecte… |
CVE-2024-20998 | Medium | 4.9 | 2024-04-16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0… |
CVE-2024-3882 | High | 8.8 | 2024-04-16 | A vulnerability was found in Tenda W30E 1.0.1.25(633). It has been classified as critical. Affected is the function fromRouteStatic of the file /goform/fromRou… |
CVE-2024-3881 | High | 8.8 | 2024-04-16 | A vulnerability was found in Tenda W30E 1.0.1.25(633) and classified as critical. This issue affects the function frmL7PlotForm of the file /goform/frmL7ProtFo… |
CVE-2024-3879 | High | 8.8 | 2024-04-16 | A vulnerability, which was classified as critical, was found in Tenda W30E 1.0.1.25(633). This affects the function formSetCfm of the file /goform/setcfm. The… |
CVE-2024-3878 | High | 8.8 | 2024-04-16 | A vulnerability, which was classified as critical, has been found in Tenda F1202 1.2.0.20(408). Affected by this issue is the function fromwebExcptypemanFilter… |
CVE-2024-3877 | High | 8.8 | 2024-04-16 | A vulnerability classified as critical was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function fromqossetting of the file /gofor… |
CVE-2024-3876 | High | 8.8 | 2024-04-16 | A vulnerability classified as critical has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromVirtualSer of the file /goform/VirtualSer. The… |
CVE-2024-3875 | High | 8.8 | 2024-04-16 | A vulnerability was found in Tenda F1202 1.2.0.20(408). It has been rated as critical. This issue affects the function fromNatlimit of the file /goform/Natlimi… |
CVE-2024-3874 | High | 8.8 | 2024-04-16 | A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file… |
CVE-2024-30840 | Medium | 6.5 | 2024-04-15 | A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN parameter in the fromDhcpListClient func… |
CVE-2024-23594 | Medium | 6.4 | 2024-04-15 | A buffer overflow vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 201… |
CVE-2024-30392 | High | 7.5 | 2024-04-12 | A Stack-based Buffer Overflow vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to… |
CVE-2024-30394 | High | 7.5 | 2024-04-12 | A Stack-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) component of Junos OS and Junos OS Evolved allows an unauthenticated, network-… |
CVE-2020-8006 | High | 8.8 | 2024-04-12 | The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the devi… |
CVE-2024-30273 | High | 7.8 | 2024-04-11 | Illustrator versions 28.3, 27.9.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-27683 | Critical | 9.8 | 2024-04-11 | D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST request to trigger th… |
CVE-2024-20772 | High | 7.8 | 2024-04-10 | Media Encoder versions 24.2.1, 23.6.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in… |
CVE-2024-29061 | High | 7.8 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-29045 | High | 7.5 | 2024-04-09 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28934 | High | 8.8 | 2024-04-09 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28925 | High | 8.0 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-28924 | Medium | 6.7 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-28898 | Medium | 6.3 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26180 | High | 8.0 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-20689 | High | 7.1 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-20688 | High | 7.1 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2023-49913 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49912 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49911 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49910 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49909 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49908 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49907 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49906 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-48724 | High | 7.5 | 2024-04-09 | A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20… |
CVE-2024-29756 | Critical | 9.8 | 2024-04-05 | In afe_callback of q6afe.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with no addition… |
CVE-2024-27337 | High | 7.8 | 2024-04-03 | Kofax Power PDF TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… |
CVE-2024-30166 | Critical | 9.1 | 2024-04-03 | In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (o… |
CVE-2024-30621 | Critical | 9.8 | 2024-04-02 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan. |
CVE-2024-1179 | High | 8.8 | 2024-04-01 | TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers… |
CVE-2023-48906 | Medium | 4.3 | 2024-04-01 | Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the char_for_nibble function. |
CVE-2024-30639 | Medium | 6.5 | 2024-03-29 | Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability in the page parameter of fromAddressNat function. |
CVE-2024-30638 | Medium | 4.3 | 2024-03-29 | Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the entrys parameter in the fromAddressNat function. |
CVE-2024-30636 | Medium | 6.5 | 2024-03-29 | Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function. |
CVE-2024-30634 | High | 8.0 | 2024-03-29 | Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the mitInterface parameter in the fromAddressNat function. |
CVE-2024-30633 | Medium | 6.5 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security parameter from the formWifiBasicSet function. |
CVE-2024-30632 | Medium | 6.5 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security_5g parameter from formWifiBasicSet function. |
CVE-2024-30631 | Medium | 4.3 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the schedStartTime parameter from setSchedWifi function. |
CVE-2024-30629 | Medium | 5.7 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the list1 parameter from fromDhcpListClient function. |
CVE-2024-30628 | Critical | 9.8 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromAddressNat function. |
CVE-2024-30627 | High | 8.8 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the deviceId parameter from saveParentControlInfo function. |
CVE-2024-30626 | High | 8.0 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the schedEndTime parameter from setSchedWifi function. |
CVE-2024-30625 | High | 8.0 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the entrys parameter from fromAddressNat function. |
CVE-2024-30624 | High | 8.8 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the urls parameter from saveParentControlInfo function. |
CVE-2024-30623 | Medium | 6.5 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromDhcpListClient function. |
CVE-2024-30622 | Critical | 9.8 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the mitInterface parameter from fromAddressNat function. |
CVE-2024-30612 | High | 8.1 | 2024-03-28 | Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function. |
CVE-2024-30603 | Medium | 6.5 | 2024-03-28 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the urls parameter of the saveParentControlInfo function. |
CVE-2024-30601 | High | 8.0 | 2024-03-28 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function. |
CVE-2024-30600 | High | 8.0 | 2024-03-28 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function. |
CVE-2024-30599 | High | 8.8 | 2024-03-28 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceMac parameter of the addWifiMacFilter function. |
CVE-2024-30598 | Medium | 6.5 | 2024-03-28 | Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability in the security_5g parameter of the formWifiBasicSet function. |
CVE-2024-30597 | Medium | 6.5 | 2024-03-28 | Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function. |
CVE-2024-30607 | High | 8.0 | 2024-03-28 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function. |
CVE-2024-30606 | High | 8.0 | 2024-03-28 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the page parameter of the fromDhcpListClient function. |
CVE-2024-30592 | High | 8.0 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the page parameter of the fromAddressNat function. |
CVE-2024-30591 | High | 8.8 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function. |
CVE-2024-30590 | Medium | 6.5 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function. |
CVE-2024-30589 | Critical | 9.8 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability in the entrys parameter of the fromAddressNat function. |
CVE-2024-30588 | Medium | 4.3 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function. |
CVE-2024-30586 | Medium | 6.5 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security_5g parameter of the formWifiBasicSet function. |
CVE-2024-30585 | Medium | 6.5 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function. |
CVE-2024-30583 | High | 8.0 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the mitInterface parameter of the fromAddressNat function. |
CVE-2024-30594 | Medium | 6.5 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceMac parameter of the addWifiMacFilter function. |