Vulnerabilities (CVE)

Filtered by CWE-121
Total 3797 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-46405 1 F5 1 Big-ip Access Policy Manager 2026-06-17 N/A 7.5 HIGH
When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-45867 1 Totolink 2 A3002r, A3002r Firmware 2026-06-17 N/A 5.4 MEDIUM
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface.
CVE-2025-45862 1 Totolink 2 A3002r, A3002r Firmware 2026-06-17 N/A 6.5 MEDIUM
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in the formDhcpv6s interface.
CVE-2025-45847 1 Alfa 2 Aip-w512, Aip-w512 Firmware 2026-06-17 N/A 6.5 MEDIUM
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function.
CVE-2025-45846 1 Alfa 2 Aip-w512, Aip-w512 Firmware 2026-06-17 N/A 8.8 HIGH
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function.
CVE-2025-45845 1 Totolink 2 Nr1800x, Nr1800x Firmware 2026-06-17 N/A 8.8 HIGH
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.
CVE-2025-45844 1 Totolink 2 Nr1800x, Nr1800x Firmware 2026-06-17 N/A 8.8 HIGH
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.
CVE-2025-45843 1 Totolink 2 Nr1800x, Nr1800x Firmware 2026-06-17 N/A 8.8 HIGH
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.
CVE-2025-45842 1 Totolink 2 Nr1800x, Nr1800x Firmware 2026-06-17 N/A 8.8 HIGH
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function.
CVE-2025-45841 1 Totolink 2 Nr1800x, Nr1800x Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.
CVE-2025-45797 1 Totolink 2 A950rg, A950rg Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cste_modules/system.so.
CVE-2025-45790 1 Totolink 2 A3100r, A3100r Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/firewall.so.
CVE-2025-45789 1 Totolink 2 A3100r, A3100r Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules.
CVE-2025-45788 1 Totolink 2 A3100r, A3100r Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules.
CVE-2025-45787 1 Totolink 2 A3100r, A3100r Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules.
CVE-2025-45587 1 Audi 2 Universal Traffic Recorder, Universal Traffic Recorder Firmware 2026-06-17 N/A 7.0 HIGH
A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-45514 1 Tenda 2 Fh451, Fh451 Firmware 2026-06-17 N/A 6.5 MEDIUM
Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm.
CVE-2025-45513 1 Tenda 2 Fh451, Fh451 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter.
CVE-2025-45429 1 Tenda 2 Ac9, Ac9 Firmware 2026-06-17 N/A 9.8 CRITICAL
In the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution.
CVE-2025-45428 1 Tenda 2 Ac9, Ac9 Firmware 2026-06-17 N/A 9.8 CRITICAL
In Tenda ac9 v1.0 with firmware V15.03.05.14_multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary code execution.