Total
4083 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-76655 | 2026-10-14 | N/A | 7.5 HIGH | ||
| A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution | |||||
| CVE-2026-73795 | 2026-10-14 | N/A | 6.4 MEDIUM | ||
| A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service. | |||||
| CVE-2026-97333 | 2026-10-14 | N/A | N/A | ||
| QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server. | |||||
| CVE-2026-103854 | 2026-10-14 | N/A | 7.8 HIGH | ||
| Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-87676 | 1 Broadcom | 1 Fabric Operating System | 2026-10-14 | N/A | 5.7 MEDIUM |
| A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier (AKI) extension before copying string tokens into an internal memory buffer. An authenticated user with administrative privileges to import custom certificates can supply a certificate containing an intentionally oversized AKI extension. When the system processes or renders the certificate attributes, this can trigger a stack memory corruption leading to a denial-of-service (DoS) condition by crashing the management daemon. | |||||
| CVE-2026-87684 | 1 Broadcom | 1 Fabric Operating System | 2026-10-14 | N/A | 9.8 CRITICAL |
| A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution. | |||||
| CVE-2026-109157 | 2026-10-14 | 9.0 HIGH | 9.9 CRITICAL | ||
| A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor confirms: "As this router was EOL'd in 2011, we have no way of testing if such vulnerability exists. We will notify our customers of a potential vulnerability on this product." This vulnerability only affects products that are no longer supported by the maintainer. | |||||
| CVE-2026-109109 | 2026-10-14 | 10.0 HIGH | 10.0 CRITICAL | ||
| A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COOKIE/X-Cmd results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure. | |||||
| CVE-2022-2078 | 3 Debian, Linux, Redhat | 4 Debian Linux, Linux Kernel, Enterprise Linux and 1 more | 2026-10-14 | 2.1 LOW | 5.5 MEDIUM |
| A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code. | |||||
| CVE-2025-71384 | 2026-10-14 | N/A | 6.7 MEDIUM | ||
| Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field, | |||||
| CVE-2025-53597 | 1 Qnap | 1 License Center | 2026-10-14 | N/A | 6.5 MEDIUM |
| A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later | |||||
| CVE-2026-70571 | 2026-10-14 | N/A | 8.1 HIGH | ||
| Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-105732 | 2026-10-13 | N/A | 7.3 HIGH | ||
| Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-108893 | 2026-10-13 | 9.0 HIGH | 9.9 CRITICAL | ||
| A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlan_set leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. | |||||
| CVE-2026-87683 | 1 Broadcom | 1 Fabric Operating System | 2026-10-13 | N/A | 8.8 HIGH |
| Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device configuration attributes or port mapping requests) the REST API service fails to properly validate incoming array counts and string lengths against internal buffer capacities. An authenticated attacker with REST API access can transmit crafted, oversized request parameters to induce memory corruption on the execution stack. This may result in a denial-of-service condition (daemon crash) or potential arbitrary code execution within the management process context. | |||||
| CVE-2026-87665 | 1 Broadcom | 1 Fabric Operating System | 2026-10-13 | N/A | 7.5 HIGH |
| A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits. An unauthenticated remote attacker can exploit this vulnerability by sending a single, specifically crafted UDP packet (Port 500) containing an oversized Nonce payload. Successful exploitation results in a denial of service (data-plane process crash) | |||||
| CVE-2026-87668 | 1 Broadcom | 1 Fabric Operating System | 2026-10-13 | N/A | 6.5 MEDIUM |
| A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum array capacity. An authenticated user with administrative access can exploit this vulnerability by supplying a crafted diagnostic command string containing an excessive number of tokenized arguments. This leads to a memory overwrite resulting in a denial of service (process crash). | |||||
| CVE-2026-9216 | 1 Netgear | 10 Rax30, Rax30 Firmware, Rax35 and 7 more | 2026-10-13 | N/A | 3.5 LOW |
| An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network. | |||||
| CVE-2026-65148 | 2026-10-13 | N/A | 7.3 HIGH | ||
| NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service. | |||||
| CVE-2026-104332 | 2026-10-13 | N/A | 5.5 MEDIUM | ||
| IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table | |||||