#cwe-121

共收录 773 条相关情报。

← 返回所有主题
安全公告2026-10-23 发布INFO

ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in...

CVE-2026-115863

ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/cl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-23 发布CRITICAL

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byt...

CVE-2026-53921

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 I

来源摘录 · NVD

安全公告2026-10-23 发布INFO

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute...

CVE-2026-96185

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布CRITICAL

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must c...

CVE-2026-94502

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentiall

来源摘录 · NVD

漏洞预警2026-10-22 发布CRITICAL

In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a crash. A limited number of values can be written using t...

CVE-2026-85080

In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a

来源摘录 · NVD

漏洞预警2026-10-22 发布CRITICAL

In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come f...

CVE-2026-85079

In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially le

来源摘录 · NVD

漏洞预警2026-10-21 发布CRITICAL

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This m...

CVE-2026-114383

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The ma...

CVE-2026-114382

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa...

CVE-2026-92183

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布CRITICAL

A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component...

CVE-2026-113744

A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewa

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of use...

CVE-2026-93888

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitra...

CVE-2026-76587

IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted...

CVE-2026-9869

A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted ...

CVE-2026-9817

A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLI

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A sp...

CVE-2026-9660

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (ve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布CRITICAL

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A sp...

CVE-2026-9659

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (ve

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421...

CVE-2026-42026

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421...

CVE-2026-42025

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B2025...

CVE-2026-42024

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B2025...

CVE-2026-42023

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functio

历史摘要 · 未重新核验 · NVD