Export limit exceeded: 425894 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,596

Export CSV
CVE-2025-70616

A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver (version 1.2.0.0) in the IOCTL handler for code 0x80102058. The vulnerability is caused by missing bounds checking on the user-controlled Options parameter before copying data into a 40-byte stack buffer (Src[40]) using memmove. An attacker with local access can exploit this vulnerability by sending a crafted IOCTL request with Options > 40, causing a stack buffer overflow that may lead to kernel code execution, local privilege escalation, or denial of service (system crash). Additionally, the same IOCTL handler can leak kernel addresses and other sensitive stack data when reading beyond the buffer boundaries.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Dieboldnixdorf Wincor
Products
Wnbios64.sys Nixdorf
CVE-2024-36600

libcdio: crafted iso image file leads to arbitrary code execution

Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Libcdio
CVE-2025-70252

An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to sprintf, they will be spliced into tmp. It is worth noting that there is no size check,which leads to a stack overflow vulnerability.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac6 Ac6 Firmware
CVE-2025-70220

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAutoDetecWAN_wizard4.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Dlink
Products
Dir-513 Dir-513 Firmware
CVE-2025-70226

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formEasySetupWizard.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Dlink
Products
Dir-513 Dir-513 Firmware
CVE-2025-70225

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curtime parameter to the goform/formEasySetupWWConfig component

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Dlink
Products
Dir-513 Dir-513 Firmware
CVE-2025-70222

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Dlink
Products
Dir-513 Dir-513 Firmware
CVE-2025-70232

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetMACFilter.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Dlink
Products
Dir-513 Dir-513 Firmware