Vulnerabilities (CVE)

Filtered by CWE-120
Total 4546 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-31624 1 Tendacn 2 Ac9, Ac9 Firmware 2026-07-09 5.8 MEDIUM 8.8 HIGH
Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the urls parameter.
CVE-2020-35990 1 Foxit 1 Pdf Reader 2026-07-09 N/A 5.5 MEDIUM
Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, allows local attackers to cause a denial of service (DoS) via crafted .pdf file.
CVE-2020-20118 1 Avast 1 Antivirus 2026-07-09 N/A 5.5 MEDIUM
Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to the aswSnx.sys driver.
CVE-2018-9333 1 K7computing 4 Antivrius, Enterprise Security, Total Security and 1 more 2026-07-09 4.6 MEDIUM 7.8 HIGH
K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe.
CVE-2018-8726 1 K7computing 4 Antivrius, Enterprise Security, Total Security and 1 more 2026-07-09 4.6 MEDIUM 7.8 HIGH
K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe.
CVE-2018-8725 1 K7computing 4 Antivrius, Enterprise Security, Total Security and 1 more 2026-07-09 4.6 MEDIUM 7.8 HIGH
K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe.
CVE-2025-29329 1 Sagemcom 2 F\@st 3686, F\@st 3686 Firmware 2026-07-05 N/A 9.8 CRITICAL
Buffer Overflow in the ippprint (Internet Printing Protocol) service in Sagemcom F@st 3686 MAGYAR_4.121.0 allows remote attacker to execute arbitrary code by sending a crafted HTTP request.
CVE-2025-46035 1 Tenda 2 Ac6, Ac6 Firmware 2026-07-05 N/A 7.5 HIGH
Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the oversized schedStartTime and schedEndTime parameters in an unauthenticated HTTP GET request to the /goform/openSchedWifi endpoint
CVE-2025-57573 1 Tenda 2 F3, F3 Firmware 2026-07-05 N/A 5.6 MEDIUM
Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the wifiTimeClose parameter in goform/setWifi.
CVE-2025-57572 1 Tenda 2 F3, F3 Firmware 2026-07-05 N/A 5.6 MEDIUM
Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the onlineList parameter in goform/setParentControl.
CVE-2025-57571 1 Tenda 2 F3, F3 Firmware 2026-07-05 N/A 5.6 MEDIUM
Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow. via the macFilterList parameter in goform/setNAT.
CVE-2025-57570 1 Tenda 2 F3, F3 Firmware 2026-07-05 N/A 5.6 MEDIUM
Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the QosList parameter in goform/setQoS.
CVE-2025-57569 1 Tenda 2 F3, F3 Firmware 2026-07-05 N/A 5.6 MEDIUM
Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT.
CVE-2024-42642 1 Crucial 6 Ct1000mx500ssd1, Ct2000mx500ssd1, Ct250mx500ssd1 and 3 more 2026-07-05 N/A 6.7 MEDIUM
Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. NOTE: The supplier states that this vulnerability was fully remediated in December 2024 and that updated firmware is available through Crucial’s official support page.
CVE-2025-46060 1 Totolink 2 N600r, N600r Firmware 2026-07-05 N/A 9.8 CRITICAL
Buffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866_B2022506 allows a remote attacker to execute arbitrary code via the UPLOAD_FILENAME component
CVE-2025-22916 1 Edimax 2 Re11s, Re11s Firmware 2026-07-05 N/A 9.8 CRITICAL
RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.
CVE-2025-22907 1 Edimax 2 Re11s, Re11s Firmware 2026-07-05 N/A 9.8 CRITICAL
RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.
CVE-2025-22904 1 Edimax 2 Re11s, Re11s Firmware 2026-07-05 N/A 9.8 CRITICAL
RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.
CVE-2024-57483 1 Tenda 2 I24, I24 Firmware 2026-07-05 N/A 9.8 CRITICAL
Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function.
CVE-2024-57482 1 H3c 2 N12, N12 Firmware 2026-07-05 N/A 9.8 CRITICAL
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.