VulnSea

CWE-119

CVEs classified under CWE-119, newest first.

882 CVEsRSS

CVE-2025-51678High· 7.5
3mo ago

An issue was discovered in RISC-V PicoRV32 commit 87c89a

An issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior.

▾ TwilightEPSS 0.61%via NVD
CVE-2026-20156High· 8.1
3mo ago

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresse…

▾ Twilightcisco · roomosEPSS 0.46%via NVD
CVE-2026-15545High· 8.8
3mo ago

A vulnerability was identified in Shibby Tomato up to 1.28.0000

A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is the function main of the file www/apcupsd/tomatodata.cgi of the component apcupsd. Such manipulation leads to out-of-bounds write. The att…

▾ TwilightEPSS 0.73%via NVD
CVE-2026-15544High· 8.8
3mo ago

A vulnerability was determined in Shibby Tomato up to 1.28.0000

A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function getupsvar of the file www/apcupsd/tomatodata.cgi of the component apcupsd. This manipulation of the argument Field causes stack-based buffer overfl…

▾ TwilightEPSS 0.79%via NVD
CVE-2026-15543High· 8.8
3mo ago

A vulnerability was found in Tenda CH22 1.0.0.1

A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. The attack can be launched remotely. The expl…

▾ TwilightEPSS 0.85%via NVD
CVE-2026-15520Medium· 5.3
3mo ago

A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035

A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section of the file src/decode.c of the component R2004 Section Decompression. Executing a manipulation can lead to heap-base…

▾ SunlitEPSS 0.19%via NVD
CVE-2026-15506High· 7.8
3mo ago

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An a…

▾ TwilightEPSS 0.20%via NVD
CVE-2026-15484High· 8.8
3mo ago

A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01

A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation results in buffer overflow. It is possible to launch t…

▾ TwilightEPSS 0.79%via NVD
CVE-2026-15483High· 8.8
3mo ago

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation of the argument nslookup_target leads to buffer over…

▾ TwilightEPSS 0.57%via NVD
CVE-2026-15480High· 8.8
3mo ago

A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03

A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument device_name leads to stack-based buffer overf…

▾ TwilightEPSS 0.79%via NVD
CVE-2026-15194Low· 3.3
4mo ago

A security flaw has been discovered in Open5GS 2.7.7

A security flaw has been discovered in Open5GS 2.7.7. This affects the function amf_context_final of the file src/amf/context.c of the component AMF. Performing a manipulation results in use after free. The attack is only possible with l…

▾ SunlitEPSS 0.16%via NVD
CVE-2026-15105Medium· 6.3
4mo ago

A flaw has been found in davenardella snap7 up to 1.4.3

A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker::PerformFunctionRead of the file src/core/s7_server.cpp of the component ReadVar Request Handler. This manipulation causes out-of-bounds write. …

▾ SunlitEPSS 0.38%via NVD
CVE-2025-15668Low· 3.3
4mo ago

A vulnerability was identified in GPAC up to b40ce70f5

A vulnerability was identified in GPAC up to b40ce70f5. This issue affects the function sgpd_del_entry of the file src/isomedia/box_code_base.c of the component MP4Box. Such manipulation of the argument data leads to heap-based buffer ov…

▾ SunlitEPSS 0.18%via NVD
CVE-2025-15667Low· 3.3
4mo ago

A vulnerability was determined in GPAC up to 2.5-DEV

A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gf_isom_nalu_sample_rewrite of the file src/isomedia/avc_ext.c of the component MP4Box. This manipulation of the argument nalu_out_bs causes do…

▾ SunlitEPSS 0.16%via NVD
CVE-2022-46292High· 7.8
4mo ago

Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)

Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)

▾ Twilightopenbabel · openbabelEPSS 0.80%via GHSA
CVE-2026-14610Medium· 5.3
4mo ago

A flaw has been found in Open Asset Import Library Assimp up to 6.0.5

A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. This manipulation causes h…

▾ SunlitEPSS 0.13%via NVD
CVE-2026-14607Medium· 5.5
4mo ago

A weakness has been identified in RT-Thread up to 5.0.2

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sys_getaddrinfo of the file components/lwp/lwp_syscall.c. Executing a manipulation of the argument ai_addr can lead to memory corruption. The attack can o…

▾ SunlitEPSS 0.17%via NVD
CVE-2026-14606High· 7.8
4mo ago

A security flaw has been discovered in RT-Thread up to 5.0.2

A security flaw has been discovered in RT-Thread up to 5.0.2. Affected by this issue is the function CAN_Receive in the library bsp/synwit/libraries/SWM341_CSL/CMSIS/DeviceSupport/SWM341.h of the component SWM341 CAN Handler. Performing …

▾ TwilightEPSS 0.20%via NVD
CVE-2026-14605High· 7.8
4mo ago

A vulnerability was identified in RT-Thread up to 5.0.2

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1c_can.h of the component ls1c CAN Handler. Such manipulation leads to stack-…

▾ TwilightEPSS 0.20%via NVD
CVE-2026-14604Medium· 6.3
4mo ago

A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4

A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the function Assimp::Exporter::ExportToBlob of the file code/AssetLib/Ply/PlyLoader.cpp of the component PLY Model Handler. This manipulation cau…

▾ SunlitEPSS 0.23%via NVD
CVE-2025-15666Medium· 5.3
4mo ago

A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3

A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file code/Common/SceneCombiner.cpp of the component Model File …

▾ SunlitEPSS 0.12%via NVD
CVE-2026-14407High· 8.8
4mo ago

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

▾ Twilightgoogle · chromeEPSS 0.44%via NVD
CVE-2026-14383High· 8.8
4mo ago

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

▾ Twilightgoogle · chromeEPSS 0.48%via NVD
CVE-2025-10997High· 7.8
4mo ago

Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies

Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies

▾ Twilightopenbabel · openbabelEPSS 0.29%via GHSA
CVE-2022-37331High· 7.8
4mo ago

Open Babel has out-of-bounds write in Gaussian coords_type orientation parser

Open Babel has out-of-bounds write in Gaussian coords_type orientation parser

▾ Twilightopenbabel · openbabelEPSS 0.68%via GHSA
CVE-2022-43467High· 7.8
4mo ago

Open Babel has out-of-bounds write in PQS coord_file parser

Open Babel has out-of-bounds write in PQS coord_file parser

▾ Twilightopenbabel · openbabelEPSS 0.83%via GHSA
CVE-2022-43607High· 7.8
4mo ago

Open Babel has out-of-bounds write in MOL2 attribute/value parser

Open Babel has out-of-bounds write in MOL2 attribute/value parser

▾ Twilightopenbabel · openbabelEPSS 0.78%via GHSA
CVE-2022-46291High· 7.8
4mo ago

Open Babel has out-of-bounds write in Gaussian translationVectors[]

Open Babel has out-of-bounds write in Gaussian translationVectors[]

▾ Twilightopenbabel · openbabelEPSS 0.80%via GHSA
CVE-2022-46293High· 7.8
4mo ago

Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)

Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)

▾ Twilightopenbabel · openbabelEPSS 0.85%via GHSA
CVE-2022-46294High· 7.8
4mo ago

Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)

Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)

▾ Twilightopenbabel · openbabelEPSS 0.85%via GHSA
CWE-119 vulnerabilities (CVEs) — page 17 · VulnSea