CWE-121 · Stack-based Buffer Overflow (page 29)
Page 29 of 39 — CVEs classified under CWE-121, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-2703 | High | 8.8 | 2024-03-20 | A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49. Affected is the function formSetDeviceName of the file /goform/SetOnlineDevNa… |
CVE-2024-28582 | High | 8.4 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the rgbe_RGBEToFloat() function w… |
CVE-2024-28581 | High | 8.4 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the _assignPixel<>() function whe… |
CVE-2024-28580 | High | 8.4 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when read… |
CVE-2024-28575 | Medium | 6.2 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_read_mct() f… |
CVE-2024-28574 | Medium | 6.2 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_copy_default… |
CVE-2024-28573 | Medium | 6.2 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_exif_profi… |
CVE-2024-28568 | Medium | 6.2 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the read_iptc_profile()… |
CVE-2024-28567 | Medium | 6.2 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_CreateICCP… |
CVE-2024-28566 | High | 8.4 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the AssignPixel() function when r… |
CVE-2024-28563 | Medium | 5.9 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::DwaCompress… |
CVE-2024-28283 | Medium | 6.7 | 2024-03-19 | There is stack-based buffer overflow vulnerability in pc_change_act function in Linksys E1000 router firmware version v.2.1.03 and before, leading to remote co… |
CVE-2024-28447 | Medium | 6.5 | 2024-03-19 | Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_ipaddr parameters at /apply.cgi. |
CVE-2024-28446 | Medium | 5.7 | 2024-03-19 | Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_netmask parameter at /apply.cgi. |
CVE-2024-28547 | Medium | 6.5 | 2024-03-18 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function. |
CVE-2024-28550 | Medium | 4.3 | 2024-03-18 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function. |
CVE-2024-2581 | High | 8.8 | 2024-03-18 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function fromSetRouteStatic of the file /goform/SetStati… |
CVE-2024-23138 | High | 7.8 | 2024-03-18 | A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulne… |
CVE-2024-2558 | High | 8.8 | 2024-03-17 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execComm… |
CVE-2024-2547 | High | 8.8 | 2024-03-17 | A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function R7WebsSecurityHandler. The manipulation… |
CVE-2024-2546 | High | 8.8 | 2024-03-17 | A vulnerability has been found in Tenda AC18 15.13.07.09 and classified as critical. Affected by this vulnerability is the function fromSetWirelessRepeat. The… |
CVE-2024-2490 | High | 8.8 | 2024-03-15 | A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function setSchedWifi of the file /goform/ope… |
CVE-2024-2489 | High | 8.8 | 2024-03-15 | A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetQosBand of the file /goform/SetNetControlList… |
CVE-2024-2488 | High | 8.8 | 2024-03-15 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPServer of the file /goform/SetPp… |
CVE-2024-2487 | High | 8.8 | 2024-03-15 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetDeviceName of the file /g… |
CVE-2024-2486 | High | 8.8 | 2024-03-15 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickInde… |
CVE-2024-2485 | High | 8.8 | 2024-03-15 | A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function formSetSpeedWan of the file /goform/SetS… |
CVE-2024-28383 | Critical | 9.8 | 2024-03-14 | Tenda AX12 v1.0 v22.03.01.16 was discovered to contain a stack overflow via the ssid parameter in the sub_431CF0 function. |
CVE-2023-42790 | High | 8.1 | 2024-03-12 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 t… |
CVE-2024-28535 | Critical | 9.8 | 2024-03-12 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function. |
CVE-2024-25331 | Critical | 9.3 | 2024-03-12 | DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability e… |
CVE-2023-48725 | High | 7.2 | 2024-03-07 | A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially cr… |
CVE-2024-20336 | Medium | 6.5 | 2024-03-06 | A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to… |
CVE-2024-1220 | High | 8.2 | 2024-03-06 | A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and prior allows a remote attacker to exploit… |
CVE-2023-43549 | High | 8.4 | 2024-03-04 | Memory corruption while processing TPC target power table in FTM TPC. |
CVE-2024-27571 | High | 7.5 | 2024-03-01 | LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the makeCurRemoteApList function. This vulnerability allows a… |
CVE-2024-27570 | High | 7.5 | 2024-03-01 | LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generate_conf_router function. This vulnerability allows… |
CVE-2024-27569 | Medium | 6.5 | 2024-03-01 | LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the init_nvram function. This vulnerability allows attackers… |
CVE-2024-27568 | Medium | 6.5 | 2024-03-01 | LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter in the setupEC20Apn function. This vulnerability allows attack… |
CVE-2024-27567 | Medium | 6.5 | 2024-03-01 | LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpn_client_ip parameter in the config_vpn_pptp function. This vulnerability allows… |
CVE-2024-1941 | High | 7.8 | 2024-03-01 | Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code… |
CVE-2024-27657 | High | 8.8 | 2024-02-29 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent parameter. This vulnerability allows attackers to cause a Denial of… |
CVE-2024-27656 | High | 8.8 | 2024-02-29 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Serv… |
CVE-2024-27655 | High | 8.8 | 2024-02-29 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SOAPACTION parameter. This vulnerability allows attackers to cause a Denial of… |
CVE-2023-50734 | Critical | 9.0 | 2024-02-28 | A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to… |
CVE-2024-25751 | Critical | 9.8 | 2024-02-26 | A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via… |
CVE-2024-1783 | Critical | 9.8 | 2024-02-23 | A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130/9.3.5u.6698_B20230810. Affected is the function loginAuth of t… |
CVE-2024-25756 | High | 8.0 | 2024-02-22 | A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via… |
CVE-2024-25753 | High | 8.8 | 2024-02-22 | Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via t… |
CVE-2024-25748 | High | 8.8 | 2024-02-22 | A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code… |
CVE-2024-25746 | High | 8.8 | 2024-02-22 | Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via t… |
CVE-2024-23126 | High | 7.8 | 2024-02-22 | A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leve… |
CVE-2024-23125 | High | 7.8 | 2024-02-22 | A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can le… |
CVE-2023-24334 | High | 8.0 | 2024-02-21 | A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStar… |
CVE-2023-24332 | High | 8.1 | 2024-02-21 | A stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02.01_cn_TDC01 allows attackers to run arbitrary commands via crafted POS… |
CVE-2023-6749 | High | 8.0 | 2024-02-18 | Unchecked length coming from user input in settings shell |
CVE-2024-23982 | High | 7.5 | 2024-02-14 | When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to t… |
CVE-2024-23804 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2024-23798 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2024-23797 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2024-1151 | Medium | 5.5 | 2024-02-11 | A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls i… |
CVE-2023-43520 | High | 8.6 | 2024-02-06 | Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE. |
CVE-2023-41280 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41279 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41278 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41277 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2024-1004 | High | 7.2 | 2024-01-29 | A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139_B20201216. This affects the function loginAuth of the file /cgi-bin… |
CVE-2024-1003 | High | 7.2 | 2024-01-29 | A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by this issue is the function setLanguageC… |
CVE-2024-1002 | High | 7.2 | 2024-01-29 | A vulnerability classified as critical was found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by this vulnerability is the function setIpPortFilterRules… |
CVE-2024-1001 | High | 7.2 | 2024-01-29 | A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected is the function main of the file /cgi-bin/cstecgi.cgi… |
CVE-2024-1000 | High | 7.2 | 2024-01-29 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been rated as critical. This issue affects the function setTracerouteCfg of the file… |
CVE-2024-0999 | High | 7.2 | 2024-01-29 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been declared as critical. This vulnerability affects the function setParentalRules… |
CVE-2024-0998 | High | 7.2 | 2024-01-29 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been classified as critical. This affects the function setDiagnosisCfg of the file /… |
CVE-2024-0997 | High | 7.2 | 2024-01-29 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical. Affected by this issue is the function setOpModeCfg of the file… |
CVE-2024-0996 | High | 7.2 | 2024-01-29 | A vulnerability classified as critical has been found in Tenda i9 1.0.0.9(4122). This affects the function formSetCfm of the file /goform/setcfm of the compone… |
CVE-2024-0995 | High | 7.2 | 2024-01-29 | A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been rated as critical. Affected by this issue is the function formwrlSSIDset of the file /goform/w… |
CVE-2024-0994 | High | 7.2 | 2024-01-29 | A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been declared as critical. Affected by this vulnerability is the function formSetCfm of the file /g… |
CVE-2024-0993 | High | 7.2 | 2024-01-29 | A vulnerability was found in Tenda i6 1.0.0.9(3857). It has been classified as critical. Affected is the function formWifiMacFilterGet of the file /goform/Wifi… |
CVE-2024-0992 | High | 7.2 | 2024-01-29 | A vulnerability was found in Tenda i6 1.0.0.9(3857) and classified as critical. This issue affects the function formwrlSSIDset of the file /goform/wifiSSIDset… |
CVE-2024-0991 | High | 7.2 | 2024-01-29 | A vulnerability has been found in Tenda i6 1.0.0.9(3857) and classified as critical. This vulnerability affects the function formSetCfm of the file /goform/set… |
CVE-2024-0990 | High | 7.2 | 2024-01-29 | A vulnerability, which was classified as critical, was found in Tenda i6 1.0.0.9(3857). This affects the function formSetAutoPing of the file /goform/setAutoPi… |
CVE-2024-0962 | Medium | 6.3 | 2024-01-27 | A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_osc… |
CVE-2024-0932 | Medium | 4.7 | 2024-01-26 | A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.49_multi_TDE01. This issue affects the function setSmartPowerManageme… |
CVE-2024-0931 | Medium | 4.7 | 2024-01-26 | A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49_multi_TDE01. This vulnerability affects the function saveParentControlInfo. The man… |
CVE-2024-0930 | Medium | 4.7 | 2024-01-26 | A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function fromSetWirelessRepeat. The manipulation… |
CVE-2024-0929 | Medium | 4.7 | 2024-01-26 | A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. It has been rated as critical. Affected by this issue is the function fromNatStaticSetting. T… |
CVE-2024-0928 | Medium | 4.7 | 2024-01-26 | A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. It has been declared as critical. Affected by this vulnerability is the function fromDhcpList… |
CVE-2024-0927 | Medium | 4.7 | 2024-01-26 | A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. It has been classified as critical. Affected is the function fromAddressNat. The manipulation… |
CVE-2024-0926 | Medium | 4.7 | 2024-01-26 | A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01 and classified as critical. This issue affects the function formWifiWpsOOB. The manipulation o… |
CVE-2024-0925 | Medium | 4.7 | 2024-01-26 | A vulnerability has been found in Tenda AC10U 15.03.06.49_multi_TDE01 and classified as critical. This vulnerability affects the function formSetVirtualSer. Th… |
CVE-2024-0924 | Medium | 4.7 | 2024-01-26 | A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function formSetPPTPServer. The manipulat… |
CVE-2024-0923 | Medium | 4.7 | 2024-01-26 | A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.49_multi_TDE01. Affected by this issue is the function formSetDeviceN… |
CVE-2024-0922 | Medium | 4.7 | 2024-01-26 | A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49_multi_TDE01. Affected by this vulnerability is the function formQuickIndex. The man… |
CVE-2024-0745 | High | 8.8 | 2024-01-23 | The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. This vulnerability aff… |
CVE-2023-6340 | Medium | 5.5 | 2024-01-18 | SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has bee… |
CVE-2024-0578 | High | 8.8 | 2024-01-16 | A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function UploadCustomModule of the file /cgi-… |
CVE-2024-0577 | High | 8.8 | 2024-01-16 | A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects the function setLanguageCfg of the file… |
CVE-2024-0576 | High | 8.8 | 2024-01-16 | A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been declared as critical. This vulnerability affects the function setIpPortFilter… |
CVE-2024-0575 | High | 8.8 | 2024-01-16 | A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been classified as critical. This affects the function setTracerouteCfg of the fil… |
CVE-2024-0574 | High | 8.8 | 2024-01-16 | A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this issue is the function setParentalRules of the… |