2026

A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. This affects the function strcpy of the file /gofor

A security flaw has been discovered in UTT HiPER 810G up to 1.7.7-171114. This impacts the function strcpy of the file /

A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. Affected is the function strcpy of the file /goform

A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function

A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/fire

A vulnerability has been found in Tenda F453 1.0.0.3. This affects the function fromwebExcptypemanFilter of the file /go

A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function sub_3C6C0 of the file /goform/Q

A vulnerability was determined in Tenda F453 1.0.0.3/1.If. This issue affects the function fromSetCfm of the file /gofor

A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/

A security vulnerability has been detected in Tenda F453 1.0.0.3. This affects the function strcpy of the file /goform/e

A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrl

A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function WrlclientSet of the file /gof

A flaw has been found in Tenda i3 1.0.0.6(2204). This impacts the function formSetCfm of the file /goform/setcfm. This m

A vulnerability was found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formSetAutoPing of t

A vulnerability was determined in Tenda i3 1.0.0.6(2204). Affected by this issue is the function formexeCommand of the f

A vulnerability was identified in Tenda i3 1.0.0.6(2204). This affects the function formWifiMacFilterGet of the file /go

A security flaw has been discovered in Tenda i3 1.0.0.6(2204). This vulnerability affects the function formWifiMacFilter

A security vulnerability has been detected in Tenda FH1202 1.2.0.14(408). Impacted is the function formWrlsafeset of the

A vulnerability was detected in Tenda FH1202 1.2.0.14(408). The affected element is the function formWebTypeLibrary of t

A flaw has been found in Tenda FH1202 1.2.0.14(408). The impacted element is the function fromNatStaticSetting of the fi

A vulnerability has been found in Tenda FH1202 1.2.0.14(408). This affects the function fromDhcpListClient of the file /

A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs with elevate

A low-privileged remote attacker can exploit an arbitrary file write vulnerability in the wwupload.cgi endpoint. Due to

A low-privileged remote attacker can trigger a stack-based buffer overflow via a crafted HTTP POST request using the ubr

A vulnerability was found in Tenda FH1202 1.2.0.14(408). This impacts the function fromP2pListFilter of the file /goform

A security flaw has been discovered in UTT HiPER 810G up to 1.7.7-1711. Affected by this issue is the function strcpy of

A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives

A weakness has been identified in UTT HiPER 810G up to 1.7.7-1711. This affects the function strcpy of the file /goform/

By default, jailed processes cannot mount filesystems, including nullfs(4). However, the allow.mount.nullfs option enab

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Tw

An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.

Budibase is a low code platform for creating internal tools, workflows, and admin panels. This issue is a combination of

A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotati

Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.

Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to

Use after free in RPC Runtime allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally.

Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized att

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an ad

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a networ

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the /studiocms_ap

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Fire

Memory safety bugs present in Firefox 148.0.2. Some of these bugs showed evidence of memory corruption and we presume th

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an