CVE Vulnerability Catalog

Buffer overflow vulnerability in the formL2TPSetup function in /goform/formL2TPSetup on Edimax BR-6478AC 1.23. Manipulating the L2TPUserName argument can lead to buffer overflow.

Buffer overflow vulnerability in the formiNICSiteSurvey function in /goform/formiNICSiteSurvey on Edimax BR-6478AC 1.23. Manipulating the selSSID argument can lead to buffer overflow.

A vulnerability in Apache Airflow providers-google causes `ComputeEngineSSHHook` to disable SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to man-in-the-middle attacks. An in-path network attacker can intercept or modify the SSH session.

In the Tenda F1202 router version 1.2.0.20(408), a stack-based buffer overflow exists in the function fromPptpUserAdd of the file /goform/PptpUserAdd. Manipulating the opttype argument can cause a buffer overflow.

In the Tenda F1202 router version 1.2.0.20(408), a stack-based buffer overflow exists in the function formGstDhcpSetSer of the file /goform/GstDhcpSetSerof. Manipulating the dips argument can cause a buffer overflow.

A vulnerability in Tenda F1202 1.2.0.20(408) affects the formWrlExtraSet function in the file /goform/WrlExtraSet. Manipulation of the delno argument leads to a stack-based buffer overflow. The attack can be launched remotely, and the exploit has been publicly disclosed.

A vulnerability in Tenda F1202 1.2.0.20(408) affects the fromPPTPUserSetting function in the file /goform/PPTPUserSetting. Manipulation of the delno argument leads to a stack-based buffer overflow. The attack can be launched remotely, and the exploit has been publicly disclosed.

Command Centre Service installers may log Service Account credentials into log files. This only affects installations using a custom Service Account (not the default Network Service).

Edimax EW-7438RPn version 1.31 is vulnerable to a stack-based buffer overflow in the formWlSiteSurvey function of the /goform/formWlSiteSurvey file in the webs component. Manipulation of the selSSID/submit-url arguments causes the overflow. The attack can be performed remotely and the exploit is publicly available.

Edimax EW-7438RPn version 1.31 is vulnerable to a stack-based buffer overflow in the formHwSet function of the /goform/formHwSet file. Manipulation of multiple arguments such as Anntena, Mcs, regDomain, nic0Addr, and others causes the overflow. The attack can be performed remotely and the exploit is publicly available.

Edimax EW-7438RPn version 1.31 is vulnerable to a stack-based buffer overflow in the formWlanMP function of the /goform/formWlanMP file. Manipulation of multiple arguments such as ateFunc, ateGain, ateTxCount, and others causes the overflow. The attack can be performed remotely and the exploit is publicly available.

In KLiK SocialMediaWebsite 1.0, an injection vulnerability exists in the HTTP POST request parameter handler. The attack can be launched remotely and the exploit is publicly available.

In KLiK SocialMediaWebsite 1.0, the uniqid function in upload.inc.php allows unrestricted file upload. The attack can be performed remotely, and the exploit is publicly available.

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product's web console, they may be able to execute arbitrary OS commands via adjacent network.

NitroSense 3.x before 3.01.3052 contains a Local Privilege Escalation vulnerability. The program exposes a misconfigured Windows Named Pipe that allows any authenticated local user to execute arbitrary code with SYSTEM privileges and delete arbitrary files with SYSTEM privileges.

Edimax BR-6675nD version 1.12 is vulnerable to a buffer overflow in the formWlSiteSurvey function of the /goform/formWlSiteSurvey file in the POST Request Handler component. Manipulation of the selSSID argument causes the overflow. The attack can be performed remotely and the exploit is publicly available.

Edimax BR-6675nD version 1.12 is vulnerable to a buffer overflow in the formWanTcpipSetup function of the /goform/formWanTcpipSetup file in the POST Request Handler component. Manipulation of the pppUserName argument causes the overflow. The attack can be performed remotely and the exploit is publicly available.

Edimax BR-6675nD version 1.12 is vulnerable to a buffer overflow in the formsetPPPoE function of the /goform/formsetPPPoE file in the POST Request Handler component. Manipulation of the pppUserName argument causes the overflow. The attack can be performed remotely and the exploit is publicly available.

Wine ships a .desktop file that registers itself as a MIME handler for EXE files and other Windows executables. In some configurations, handling an EXE file causes it to be blindly executed with the invoker's permissions, allowing escape from Flatpak and Snap sandboxes.

A weakness has been identified in Besen BS20 EV Charging Station up to 20260426 in the OTA Update Installation Handler component. Manipulation leads to improper authorization. The attack can be carried out remotely but requires high complexity.