Export limit exceeded: 425864 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,594

Export CSV
CVE-2008-0016

Mozilla UTF-8 stack buffer overflow

Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.

CVSS 2.0 · 10.0 Critical EPSS 43.9% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Seamonkey Enterprise Linux
CVE-2009-4228

Transfig: Stack-based buffer overflow by loading malformed .FIG files

Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Xfig
Products
Xfig
CVE-2009-2909

kernel: ax25 stack overflow

Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kernel before 2.6.31.2 allows local users to cause a denial of service (OOPS) via a crafted optlen value in an SO_BINDTODEVICE operation.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux
Products
Linux Kernel
CVE-2008-0411

ghostscript: stack-based buffer overflow in .seticcspace operator

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

CVSS 2.0 · 6.8 Medium EPSS 14.5% KEV · Not listed
Vendors
Debian Ghostscript Mandrakesoft and 3 more
Products
Debian Linux Ghostscript Mandrake Linux and 11 more
CVE-2008-4555

graphviz: buffer overflow in the graph parser

Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements.

CVSS 2.0 · 8.5 High EPSS 5.1% KEV · Not listed
Vendors
Graphviz
Products
Graphviz
CVE-2009-1759

ctorrent: stack-based buffer overflow vulnerability

Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path.

CVSS 2.0 · 9.3 Critical EPSS 13.7% KEV · Not listed
Vendors
Rahul
Products
Ctorrent Dtorrent
CVE-2009-0692

dhclient: stack overflow leads to arbitrary code execution as root

Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.

CVSS 2.0 · 10.0 Critical EPSS 25.8% KEV · Not listed
Vendors
Isc Redhat
Products
Dhcp Enterprise Linux Rhel Eus
CVE-2009-1252

ntp: remote arbitrary code execution vulnerability if autokeys is enabled

Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.

CVSS 2.0 · 6.8 Medium EPSS 21.3% KEV · Not listed
Vendors
Ntp Redhat
Products
Ntp Enterprise Linux Rhel Eus
CVE-2008-0003

tog-pegasus pam authentication buffer overflow

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.

CVSS 2.0 · 10.0 Critical EPSS 7.8% KEV · Not listed
Vendors
Openpegasus Redhat
Products
Management Server Enterprise Linux Enterprise Linux Desktop and 1 more
CVE-2009-0490

audacity: stack-based buffer overflow

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .gro file containing a long string.

CVSS 2.0 · 9.3 Critical EPSS 16.6% KEV · Not listed
Vendors
Audacityteam
Products
Audacity
CVE-2008-2357

mtr: stack buffer overflow triggerable by long DNS name

Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr.

CVSS 2.0 · 6.8 Medium EPSS 4.7% KEV · Not listed
Vendors
Matt Kimball And Roger Wolff
Products
Mtr
CVE-2009-0159

ntp: buffer overflow in ntpq

Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.

CVSS 2.0 · 6.8 Medium EPSS 13.2% KEV · Not listed
Vendors
Ntp Redhat
Products
Ntp Enterprise Linux Rhel Eus
CVE-2009-3235

cyrus-impad: CMU sieve buffer overflows

Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632.

CVSS 2.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Dovecot Redhat
Products
Dovecot Enterprise Linux
CVE-2025-34107

WinaXe 7.7 FTP Client Remote Buffer Overflow

A buffer overflow vulnerability exists in the WinaXe FTP Client version 7.7 within the FTP banner parsing functionality, WCMDPA10.dll. When the client connects to a remote FTP server and receives an overly long '220 Server Ready' response, the vulnerable component responsible for parsing the banner overflows a stack buffer, leading to arbitrary code execution under the context of the user.

CVSS 4.0 · 8.7 High EPSS 1.3% KEV · Not listed
Vendors
—
Products
—
CVE-2025-34123

VideoCharge Studio 2.12.3.685 SEH Buffer Overflow via .VSC File

A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted .VSC configuration file. The issue occurs due to improper handling of user-supplied data in the XML 'Name' attribute, leading to an SEH overwrite condition. An attacker can exploit this vulnerability by convincing a user to open a malicious .VSC file, resulting in arbitrary code execution under the context of the user.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Videocharge
Products
Videocharge Studio
CVE-2025-34127

Achat v0.150 SEH Buffer Overflow via UDP

A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler (SEH) due to insufficient bounds checking on user-supplied input leading to remote code execution.

CVSS 4.0 · 9.3 Critical EPSS 1.9% KEV · Not listed
Vendors
—
Products
—
CVE-2026-4188

D-Link DIR-619L boa formSchedule stack-based overflow

A security flaw has been discovered in D-Link DIR-619L 2.06B01. The affected element is the function formSchedule of the file /goform/formSchedule of the component boa. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
D-link
Products
Dir-619l
CVE-2026-4185

GPAC MP4Box swf_parse.c swf_def_bits_jpeg stack-based overflow

A vulnerability was found in GPAC up to 2.5-DEV-rev2167-gcc9d617c0-master. This vulnerability affects the function swf_def_bits_jpeg of the file src/scene_manager/swf_parse.c of the component MP4Box. The manipulation of the argument szName results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The patch is identified as 8961c74f87ae3fe2d3352e622f7730ca96d50cf1. A patch should be applied to remediate this issue.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Gpac
Products
Gpac
CVE-2026-4172

TRENDnet TEW-632BRP HTTP POST Request ping_response.cgi stack-based overflow

A vulnerability was detected in TRENDnet TEW-632BRP 1.010B32. This affects an unknown part of the file /ping_response.cgi of the component HTTP POST Request Handler. The manipulation of the argument ping_ipaddr results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Trendnet
Products
Tew-632brp Tew-632brp Firmware
CVE-2026-4489

Tenda A18 Pro fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow

A vulnerability was detected in Tenda A18 Pro 02.03.02.28. This vulnerability affects the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
A18 Pro