Vulnerabilities (CVE)

Filtered by CWE-787
Total 14169 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-51136 1 Totolink 2 X2000r, X2000r Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.
CVE-2023-51135 1 Totolink 2 X2000r, X2000r Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.
CVE-2023-51133 1 Totolink 2 X2000r, X2000r Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.
CVE-2023-51102 1 Tenda 2 W9, W9 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.
CVE-2023-51101 1 Tenda 2 W9, W9 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.
CVE-2023-51097 1 Tenda 2 W9, W9 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.
CVE-2023-51095 1 Tenda 2 M3, M3 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.
CVE-2023-51093 1 Tenda 2 M3, M3 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.
CVE-2023-51092 1 Tenda 2 M3, M3 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.
CVE-2023-51091 1 Tenda 2 M3, M3 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.
CVE-2023-51090 1 Tenda 2 M3, M3 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig.
CVE-2023-51084 1 Hyavijava 1 Hyavijava 2026-06-17 N/A 9.8 CRITICAL
hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method.
CVE-2023-51080 1 Hutool 1 Hutool 2026-06-17 N/A 7.5 HIGH
The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
CVE-2023-50965 1 Starnight 1 Micro Http Server 2026-06-17 N/A 9.8 CRITICAL
In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI.
CVE-2023-50807 1 Samsung 6 Exynos 9110, Exynos 9110 Firmware, Exynos Modem 5123 and 3 more 2026-06-17 N/A 8.1 HIGH
A vulnerability was discovered in Samsung Wearable Processor and Modems with versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G (no auth).
CVE-2023-50805 1 Samsung 32 Exynos 1080, Exynos 1080 Firmware, Exynos 1280 and 29 more 2026-06-17 N/A 8.1 HIGH
A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G (no auth).
CVE-2023-50711 1 Rust-vmm 1 Vmm-sys-util 2026-06-17 N/A 5.7 MEDIUM
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the `FamStructWrapper::deserialize` implementation provided by the crate for `vmm_sys_util::fam::FamStructWrapper` can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array length. Mismatch in the lengths might allow out of bounds memory access through Rust-safe methods. The issue was corrected in version 0.12.0 by inserting a check that verifies the lengths of compared flexible arrays are equal for any deserialized header and aborting deserialization otherwise. Moreover, the API was changed so that header length can only be modified through Rust-unsafe code. This ensures that users cannot trigger out-of-bounds memory access from Rust-safe code.
CVE-2023-50671 1 Aertherwide 1 Exiftags 2026-06-17 N/A 7.8 HIGH
In exiftags 1.01, nikon_prop1 in nikon.c has a heap-based buffer overflow (write of size 28) because snprintf can write to an unexpected address.
CVE-2023-50585 1 Tenda 2 A18, A18 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
CVE-2023-50572 1 Jline 1 Jline 2026-06-17 N/A 5.5 MEDIUM
An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.