#cwe-120

共收录 328 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布MEDIUM

ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap that allows remote attackers to overwrite static buffers...

CVE-2026-119146

ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57191

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request...

CVE-2026-93857

A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to exec

来源摘录 · NVD

漏洞预警2026-10-22 发布HIGH

A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploi...

CVE-2026-79883

A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent at

来源摘录 · NVD

漏洞预警2026-10-22 发布CRITICAL

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially craf...

CVE-2026-79863

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent att

来源摘录 · NVD

漏洞预警2026-10-22 发布CRITICAL

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially craf...

CVE-2026-79862

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent att

来源摘录 · NVD

漏洞预警2026-10-22 发布CRITICAL

Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to...

CVE-2026-79860

Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code e

来源摘录 · NVD

漏洞预警2026-10-22 发布CRITICAL

Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacke...

CVE-2026-79859

Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code

来源摘录 · NVD

漏洞预警2026-10-22 发布INFO

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Success...

CVE-2026-97631

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorr

来源摘录 · NVD

漏洞预警2026-10-21 发布CRITICAL

A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the a...

CVE-2026-114268

A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record.

CVE-2026-101103

The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold th

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.

CVE-2026-43837

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentica

历史摘要 · 未重新核验 · NVD

安全公告2026-10-15 发布INFO

SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that...

CVE-2026-0993

SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated re

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布INFO

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.

CVE-2026-53420

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

AMI APTIOV contains vulnerabilities in BIOS where users may cause  “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer ...

CVE-2025-58772

AMI APTIOV contains vulnerabilities in BIOS where users may cause  “Classic Buffer Overflow” by local access. Successful

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-t...

CVE-2026-108954

A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer ove...

CVE-2026-108915

A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Su

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifna...

CVE-2026-108914

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party of the file src/modules/sipt/ss7_parser.c of the componen...

CVE-2026-108822

A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.

CVE-2026-15340

lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.

历史摘要 · 未重新核验 · NVD