Vulnerabilities (CVE)

Filtered by CWE-120
Total 4144 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-29047 1 Alfa 2 Wifi Camppro, Wifi Camppro Firmware 2026-06-17 N/A 9.8 CRITICAL
Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the hiddenIndex in the function StorageEditUser
CVE-2025-29046 1 Alfa 2 Wifi Camppro, Wifi Camppro Firmware 2026-06-17 N/A 9.8 CRITICAL
Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the GAPSMinute3 key value
CVE-2025-29045 1 Alfa 2 Wifi Camppro, Wifi Camppro Firmware 2026-06-17 N/A 9.8 CRITICAL
Buffer Overflow vulnerability in ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the newap_text_0 key value
CVE-2025-29044 1 Netgear 2 R6100, R6100 Firmware 2026-06-17 N/A 9.8 CRITICAL
Buffer Overflow vulnerability in Netgear- R61 router V1.0.1.28 allows a remote attacker to execute arbitrary code via the QUERY_STRING key value
CVE-2025-29032 1 Tendacn 2 Ac9, Ac9 Firmware 2026-06-17 N/A 5.9 MEDIUM
Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.
CVE-2025-28398 1 Dlink 2 Di-8100, Di-8100 Firmware 2026-06-17 N/A 7.1 HIGH
D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_net_asp function via the remot_ip parameter.
CVE-2025-28395 1 Dlink 2 Di-8100, Di-8100 Firmware 2026-06-17 N/A 7.1 HIGH
D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the host_ip parameter.
CVE-2025-28361 1 Telesquare 2 Tlr-2005ksh, Tlr-2005ksh Firmware 2026-06-17 N/A 7.5 HIGH
Unauthorized stack overflow vulnerability in Telesquare TLR-2005KSH v.1.1.4 allows a remote attacker to obtain sensitive information via the systemutil.cgi component.
CVE-2025-28221 1 Tenda 2 W6-s, W6-s Firmware 2026-06-17 N/A 7.5 HIGH
Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the set_local_time function, which allows remote attackers to cause web server crash via parameter time passed to the binary through a POST request.
CVE-2025-28220 1 Tenda 2 W6-s, W6-s Firmware 2026-06-17 N/A 7.5 HIGH
Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request.
CVE-2025-28164 1 Libpng 1 Libpng 2026-06-17 N/A 5.5 MEDIUM
Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.
CVE-2025-28162 1 Libpng 1 Libpng 2026-06-17 N/A 5.5 MEDIUM
Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive
CVE-2025-28028 1 Totolink 8 A3000ru, A3000ru Firmware, A3100r and 5 more 2026-06-17 N/A 7.3 HIGH
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter.
CVE-2025-28025 1 Totolink 8 A3000ru, A3000ru Firmware, A3100r and 5 more 2026-06-17 N/A 7.3 HIGH
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.
CVE-2025-28024 1 Totolink 2 A810r, A810r Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi
CVE-2025-28022 1 Totolink 2 A810r, A810r Firmware 2026-06-17 N/A 7.3 HIGH
TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.
CVE-2025-28021 1 Totolink 2 A810r, A810r Firmware 2026-06-17 N/A 7.3 HIGH
TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parameters
CVE-2025-28020 1 Totolink 2 A800r, A800r Firmware 2026-06-17 N/A 7.3 HIGH
TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.
CVE-2025-28019 1 Totolink 2 A800r, A800r Firmware 2026-06-17 N/A 7.3 HIGH
TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component
CVE-2025-28018 1 Totolink 2 A800r, A800r Firmware 2026-06-17 N/A 7.3 HIGH
TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.