VulnSea

CWE-119

CVEs classified under CWE-119, newest first.

883 CVEsRSS

CVE-2025-15217High· 8.8
10mo ago

A security flaw has been discovered in Tenda AC23 16.03.07.52

A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Performing a manipulation of the argument list results in buffer overflow. The attack…

▾ Twilighttenda · ac23_firmwareEPSS 0.74%via NVD
CVE-2025-15216High· 8.8
10mo ago

A vulnerability was identified in Tenda AC23 16.03.07.52

A vulnerability was identified in Tenda AC23 16.03.07.52. This impacts the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument bindnum leads to stack-based buffer overflow. It is possible to laun…

▾ Twilighttenda · ac23_firmwareEPSS 0.74%via NVD
CVE-2025-15215High· 8.8
10mo ago

A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49

A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. This manipulation of the argument list c…

▾ Twilighttenda · ac10u_firmwareEPSS 0.70%via NVD
CVE-2025-15247High· 7.3
10mo ago

A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424

A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424. Affected by this issue is the function snap7_rs::client::S7Client::download of the file client.rs. Such manipulation leads to heap-based bu…

▾ Twilightgmg137 · snap7-rsEPSS 0.45%via NVD
CVE-2025-15164High· 7.2
10mo ago

A security flaw has been discovered in Tenda WH450 1.0.0.18

A security flaw has been discovered in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/SafeMacFilter. The manipulation of the argument page results in stack-based buffer overflow. The attack may be performed from r…

▾ Twilighttenda · wh450_firmwareEPSS 0.79%via NVD
CVE-2025-15163High· 7.2
10mo ago

A vulnerability was identified in Tenda WH450 1.0.0.18

A vulnerability was identified in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack is p…

▾ Twilighttenda · wh450_firmwareEPSS 0.79%via NVD
CVE-2025-15162High· 7.2
10mo ago

A vulnerability was determined in Tenda WH450 1.0.0.18

A vulnerability was determined in Tenda WH450 1.0.0.18. Affected by this vulnerability is an unknown functionality of the file /goform/RouteStatic. Executing a manipulation of the argument page can lead to stack-based buffer overflow. Th…

▾ Twilighttenda · wh450_firmwareEPSS 0.79%via NVD
CVE-2025-15194Critical· 9.8
10mo ago

A vulnerability was found in D-Link DIR-600 up to 2.15WWb02

A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality of the file hedwig.cgi of the component HTTP Header Handler. The manipulation of the argument Cookie results in stack…

▾ Midnightdlink · dir-600_firmwareEPSS 1.2%via NVD
CVE-2025-15193High· 8.8
10mo ago

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulation of the argument submit-url results in buffer overflow. The attack is possib…

▾ Twilightdlink · dwr-m920_firmwareEPSS 0.79%via NVD
CVE-2025-15190High· 8.8
10mo ago

A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50

A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub_42261C of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in stack-based buffer overflow. The attack may be l…

▾ Twilightdlink · dwr-m920_firmwareEPSS 0.79%via NVD
CVE-2025-15189High· 8.8
10mo ago

A vulnerability was identified in D-Link DWR-M920 up to 1.1.50

A vulnerability was identified in D-Link DWR-M920 up to 1.1.50. This issue affects the function sub_464794 of the file /boafrm/formDefRoute. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiate…

▾ Twilightdlink · dwr-m920_firmwareEPSS 0.79%via NVD
CVE-2025-15180High· 7.2
10mo ago

A vulnerability was identified in Tenda WH450 1.0.0.18

A vulnerability was identified in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/webExcptypemanFilte of the component HTTP Request Handler. Such manipulation of the argument page leads to stack-base…

▾ Twilighttenda · wh450_firmwareEPSS 1.1%via NVD
CVE-2025-15179High· 7.2
10mo ago

A vulnerability was determined in Tenda WH450 1.0.0.18

A vulnerability was determined in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/qossetting. This manipulation of the argument page causes stack-based buffer overflow. The attack may be initiated remotely. The …

▾ Twilighttenda · wh450_firmwareEPSS 0.87%via NVD
CVE-2025-15178High· 7.2
10mo ago

A vulnerability was found in Tenda WH450 1.0.0.18

A vulnerability was found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/VirtualSer of the component HTTP Request Handler. The manipulation of the argument page results in stack-based buffer overf…

▾ Twilighttenda · wh450_firmwareEPSS 0.79%via NVD
CVE-2025-15177High· 7.2
10mo ago

A vulnerability has been found in Tenda WH450 1.0.0.18

A vulnerability has been found in Tenda WH450 1.0.0.18. This vulnerability affects unknown code of the file /goform/SetIpBind of the component HTTP Request Handler. The manipulation of the argument page leads to stack-based buffer overfl…

▾ Twilighttenda · wh450_firmwareEPSS 0.79%via NVD
CVE-2025-15161High· 7.2
10mo ago

A vulnerability was found in Tenda WH450 1.0.0.18

A vulnerability was found in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/PPTPUserSetting. Performing a manipulation of the argument delno results in stack-based buffer overflow. Remote exploitation of the at…

▾ Twilighttenda · wh450_firmwareEPSS 1.1%via NVD
CVE-2025-15160High· 7.2
10mo ago

A vulnerability has been found in Tenda WH450 1.0.0.18

A vulnerability has been found in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/PPTPServer. Such manipulation of the argument ip1 leads to stack-based buffer overflow. The attack may be launched remotely. The…

▾ Twilighttenda · wh450_firmwareEPSS 0.87%via NVD
CVE-2025-15155Medium· 5.3
10mo ago

A vulnerability was detected in floooh sokol up to 16cbcc864012898793cd2bc57f802499a264ea40

A vulnerability was detected in floooh sokol up to 16cbcc864012898793cd2bc57f802499a264ea40. The impacted element is the function _sg_pipeline_desc_defaults in the library sokol_gfx.h. The manipulation results in stack-based buffer overf…

▾ Sunlitfloooh · sokolEPSS 0.22%via NVD
CVE-2025-15150Medium· 5.3
10mo ago

A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0

A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0. Affected by this issue is the function MavlinkLogHandler::state_listing/MavlinkLogHandler::log_entry_from_id of the file src/modules/mavlink/mavlink_log_handler.cpp. The manipu…

▾ Sunlitdronecode · px4_drone_autopilotEPSS 0.25%via NVD
CVE-2025-15092High· 8.8
10mo ago

A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114

A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/ConfigExceptMSN. Such manipulation of the argument remark leads to buffer overflow. It is possible to launch the attack…

▾ Twilightutt · 512w_firmwareEPSS 0.85%via NVD
CVE-2025-15091High· 8.8
10mo ago

A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114

A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/formPictureUrl. This manipulation of the argument importpictureurl causes buffer overflow. It is possible to ini…

▾ Twilightutt · 512w_firmwareEPSS 0.85%via NVD
CVE-2025-12771High· 7.8
10mo ago

IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking

IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

▾ Twilightibm · concertEPSS 0.16%via NVD
CVE-2025-15090High· 8.8
10mo ago

A vulnerability was found in UTT 进取 512W up to 1.7.7-171114

A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file /goform/formConfigNoticeConfig. The manipulation of the argument timestart results in buffer overflow. The attack may…

▾ Twilightutt · 512w_firmwareEPSS 0.77%via NVD
CVE-2025-15089High· 8.8
10mo ago

A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114

A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy of the file /goform/APSecurity. The manipulation of the argument wepkey1 leads to buffer overflow. The attack is possible to be carried ou…

▾ Twilightutt · 512w_firmwareEPSS 0.77%via NVD
CVE-2025-15007Critical· 9.8
10mo ago

A security vulnerability has been detected in Tenda WH450 1.0.0.18

A security vulnerability has been detected in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality of the file /goform/L7Im of the component HTTP Request Handler. Such manipulation of the argument page leads to stac…

▾ Midnighttenda · wh450_firmwareEPSS 1.0%via NVD
CVE-2025-15006Critical· 9.8
10mo ago

A weakness has been identified in Tenda WH450 1.0.0.18

A weakness has been identified in Tenda WH450 1.0.0.18. Affected by this vulnerability is an unknown functionality of the file /goform/CheckTools of the component HTTP Request Handler. This manipulation of the argument ipaddress causes s…

▾ Midnighttenda · wh450_firmwareEPSS 0.97%via NVD
CVE-2025-14994High· 8.8
10mo ago

A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155)

A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument webSiteId causes s…

▾ Twilighttenda · fh1201_firmwareEPSS 0.75%via NVD
CVE-2025-14995High· 8.8
10mo ago

A vulnerability has been found in Tenda FH1201 1.2.0.14(408)

A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from r…

▾ Twilighttenda · fh1201_firmwareEPSS 0.74%via NVD
CVE-2025-14993High· 8.8
10mo ago

A vulnerability was detected in Tenda AC18 15.03.05.05

A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg of the component HTTP Request Handler. The manipulation of the argument scanList results in stack-based buffer overf…

▾ Twilighttenda · ac18_firmwareEPSS 0.74%via NVD
CVE-2025-14861High· 8.8
10mo ago

Memory safety bugs present in Firefox 146

Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Fire…

▾ Twilightmozilla · firefoxEPSS 0.25%via NVD
CWE-119 vulnerabilities (CVEs) — page 21 · VulnSea