Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 29,319

Export CSV
CVE-2026-90732

Remote High-Privilege Network Attacker Can Trigger Buffer Overflow Leading to Denial of Service in Dell PowerProtect Data Domain

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerprotect Data Domain
CVE-2026-90731

Stack-based Buffer Overflow in Dell PowerProtect Data Domain Allowing Remote Denial of Service

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerprotect Data Domain
CVE-2026-90725

Stack‑based Buffer Overflow in Dell PowerProtect Data Domain Leading to Denial of Service

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerprotect Data Domain
CVE-2026-86392

Heap-Based Buffer Overflow in Dell PowerProtect Data Domain Leading to Denial of Service

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerprotect Data Domain
CVE-2026-57184

Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, insufficient bounds checking in the `chan_ooh323` `Q.931` `information-element parser` permits an `out-of-bounds read` that may allow an unauthenticated attacker to crash Asterisk using carefully crafted `setup packets`. The `chan_ooh323` addon channel driver must be explicitly compiled and installed, which is not the default, and its port must be publicly reachable. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Asterisk
Products
Asterisk Certified Asterisk
CVE-2026-103390

Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification

An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Juniper
Products
Session Smart Conductor Session Smart Router
CVE-2026-116726

gbsplay through 0.0.103 Heap Out-of-Bounds Read via gbr_open GBR Title

Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scanning the GBR ROM title field. Attackers can supply a crafted GBR file of 0x21 to 0x162 bytes to read past the heap buffer, crashing gbsplay or leaking memory.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Mmitch
Products
Gbsplay
CVE-2026-116738

VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoder

VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line, corrupting stack memory to crash the application or potentially execute code.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Kisli
Products
Vmime
CVE-2026-9659

Stack-Based Buffer Overflow in Totolink X2000R boa formFilter Allows Remote Code Execution

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability deals with the vpnUser parameter.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
X2000r
CVE-2026-42020

Stack-Based Buffer Overflow in Totolink X2000R Boa formIpv6Setup PPPoE Enables Remote Code Execution

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the pppoe_dns2 parameter.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
X2000r
CVE-2026-42019

Stack-based Buffer Overflow in Totolink X2000R PPPoE DNS Parameter Leading to Arbitrary Code Execution

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the pppoe_dns1 parameter.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
X2000r
CVE-2026-41223

Stack-based buffer overflow in Totolink X2000R enables remote code execution

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
X2000r
CVE-2026-41222

Stack-based buffer overflow in Totolink X2000R formParentControl allows arbitrary code execution

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
X2000r
CVE-2026-40615

Stack-Based Buffer Overflow in Totolink X2000R DeviceName Handling

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
X2000r
CVE-2026-28763

Stack-based buffer overflow in boa formMapDelDevice hostname functionality of X2000R

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
X2000r
CVE-2023-53675

scsi: ses: Fix possible desc_ptr out-of-bounds accesses

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible desc_ptr out-of-bounds accesses Sanitize possible desc_ptr out-of-bounds accesses in ses_enclosure_data_process().

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Linux
Products
Linux Kernel