VulnSea

CWE-120

CVEs classified under CWE-120, newest first.

283 CVEsRSS

CVE-2025-50654High· 7.5
5mo ago

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of the id parameter in the /thd_member.asp endpoint.

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of the id parameter in the /thd_member.asp endpoint.

▾ Twilightdlink · di-8003_firmwareEPSS 0.52%via NVD
CVE-2025-50653High· 7.5
5mo ago

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name and mem parameters in the /time_group.asp endpoint.

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name and mem parameters in the /time_group.asp endpoint.

▾ Twilightdlink · di-8003_firmwareEPSS 0.52%via NVD
CVE-2025-50652High· 7.5
5mo ago

An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparm_usb.asp endpoint.

An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparm_usb.asp endpoint.

▾ Twilightdlink · di-8003_firmwareEPSS 0.47%via NVD
CVE-2025-50650High· 7.5
5mo ago

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the routes_static parameter in the /router.asp endpoint.

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the routes_static parameter in the /router.asp endpoint.

▾ Twilightdlink · di-8003_firmwareEPSS 0.52%via NVD
CVE-2025-50649High· 7.5
5mo ago

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper input validation in the vlan_name parameter in the /shut_set.asp endpoint.

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper input validation in the vlan_name parameter in the /shut_set.asp endpoint.

▾ Twilightdlink · di-8003_firmwareEPSS 0.52%via NVD
CVE-2025-50648High· 7.5
5mo ago

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate input validation in the /tggl.asp endpoint.

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate input validation in the /tggl.asp endpoint.

▾ Twilightdlink · di-8003_firmwareEPSS 0.52%via NVD
CVE-2025-50647High· 7.5
5mo ago

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1, specifically in the handling of the wans parameter in the qos.asp endpoint.

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1, specifically in the handling of the wans parameter in the qos.asp endpoint.

▾ Twilightdlink · di-8003_firmwareEPSS 0.52%via NVD
CVE-2025-50646High· 7.5
5mo ago

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qos_type_asp.asp endpoint.

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qos_type_asp.asp endpoint.

▾ Twilightdlink · di-8003_firmwareEPSS 0.52%via NVD
CVE-2025-50645High· 7.5
5mo ago

A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint is manipulated

A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint is manipulated. By sending a crafted request with an excessively large value fo…

▾ Twilightdlink · di-8003_firmwareEPSS 0.52%via NVD
CVE-2025-50644High· 7.5
5mo ago

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of user input in the qj.asp endpoint.

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of user input in the qj.asp endpoint.

▾ Twilightdlink · di-8003_firmwareEPSS 0.52%via NVD
CVE-2025-52222High· 7.5
5mo ago

D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffe…

D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffe…

▾ Twilightdlink · di-8100_firmwareEPSS 0.33%via NVD
CVE-2025-52221Critical· 9.8
5mo ago

Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.

Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.

▾ Midnighttenda · ac6_firmwareEPSS 0.39%via NVD
CVE-2025-45059High· 7.5
5mo ago

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

▾ Twilightdlink · di-8300_firmwareEPSS 0.40%via NVD
CVE-2025-45058High· 7.5
5mo ago

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

▾ Twilightdlink · di-8300_firmwareEPSS 0.40%via NVD
CVE-2025-45057High· 7.5
5mo ago

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

▾ Twilightdlink · di-8300_firmwareEPSS 0.40%via NVD
CVE-2026-30075High· 7.5
5mo ago

OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (For example 100 byte)

OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (For example 100 byte). The response is decoded by AMF and…

▾ Twilightopenairinterface · oai-cn5g-amfEPSS 0.66%via NVD
CVE-2026-5567High· 8.8
5mo ago

A flaw has been found in Tenda M3 1.0.0.10

A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead …

▾ Twilighttenda · m3_firmwareEPSS 1.0%via NVD
CVE-2026-5566High· 8.8
5mo ago

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBind results in buffer overflow. Remote explo…

▾ TwilightEPSS 0.79%via NVD
CVE-2018-25237Critical· 9.8
5mo ago

Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled that allows remote attackers to crash the device or execute arbitrary code by…

Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled that allows remote attackers to crash the device or execute arbitrary code by…

▾ MidnightEPSS 0.82%via NVD
CVE-2026-27459Critical· 9.8⚖ disputed
6mo ago

pyOpenSSL is a Python wrapper around the OpenSSL library

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL wou…

▾ Midnightpyopenssl · pyopensslEPSS 0.88%via NVD
CVE-2026-3082High· 7.80day
6mo ago

GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required …

▾ Abyssalgstreamer · gstreamerEPSS 0.38%via NVD
CVE-2026-2920High· 7.80day
6mo ago

GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required …

▾ Abyssalgstreamer · gstreamerEPSS 0.37%via NVD
CVE-2026-2007High· 8.2
7mo ago

Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string

Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of a…

▾ Twilightpostgresql · postgresqlEPSS 0.50%via NVD
CVE-2026-2005High· 8.8PoC
7mo ago

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

▾ Midnightpostgresql · postgresqlEPSS 1.3%via NVD
CVE-2026-20652High· 7.5
7mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A remote attacker may be able to cause a denial-of-service.

▾ Twilightapple · safariEPSS 0.62%via NVD
CVE-2026-20644Medium· 6.5
7mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an…

▾ Sunlitapple · safariEPSS 0.31%via NVD
CVE-2026-20636Medium· 6.5
7mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.

▾ Sunlitapple · safariEPSS 0.40%via NVD
CVE-2026-20635Medium· 4.3
7mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing maliciously crafted w…

▾ Sunlitapple · safariEPSS 0.31%via NVD
CVE-2026-20608Medium· 5.5
7mo ago

This issue was addressed through improved state management

This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead …

▾ Sunlitapple · safariEPSS 0.24%via NVD
CVE-2020-37212High· 7.5
7mo ago

SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application

SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger a…

▾ Twilightnsasoft · spotmsnEPSS 0.29%via NVD
CWE-120 vulnerabilities (CVEs) — page 7 · VulnSea