Vulnerabilities (CVE)

Filtered by CWE-120
Total 3333 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-51011 1 Netgear 6 R6400v2, R6400v2 Firmware, R7000p and 3 more 2025-05-21 N/A 5.7 MEDIUM
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVE-2024-52023 1 Netgear 6 R6400v2, R6400v2 Firmware, R7000p and 3 more 2025-05-21 N/A 5.7 MEDIUM
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVE-2024-52024 1 Netgear 6 R6400v2, R6400v2 Firmware, R7000p and 3 more 2025-05-21 N/A 5.7 MEDIUM
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVE-2024-52025 1 Netgear 6 R6400v2, R6400v2 Firmware, R7000p and 3 more 2025-05-21 N/A 5.7 MEDIUM
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVE-2024-52026 1 Netgear 6 R6400v2, R6400v2 Firmware, R7000p and 3 more 2025-05-21 N/A 5.7 MEDIUM
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVE-2024-56914 1 Dlink 2 Dsl-3782, Dsl-3782 Firmware 2025-05-21 N/A 5.7 MEDIUM
D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /New_GUI/ParentalControl.asp.
CVE-2024-37607 1 Dlink 2 Dap-2555, Dap-2555 Firmware 2025-05-21 N/A 6.5 MEDIUM
A Buffer overflow vulnerability in D-Link DAP-2555 REVA_FIRMWARE_1.20 allows remote attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2024-37606 1 Dlink 2 Dcs-932l, Dcs-932l Firmware 2025-05-21 N/A 6.5 MEDIUM
A Stack overflow vulnerability in D-Link DCS-932L REVB_FIRMWARE_2.18.01 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2024-33773 1 Dlink 2 Dir-619l, Dir-619l Firmware 2025-05-21 N/A 6.5 MEDIUM
A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage."
CVE-2024-33771 1 Dlink 2 Dir-619l, Dir-619l Firmware 2025-05-21 N/A 6.5 MEDIUM
A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage."
CVE-2024-48150 1 Dlink 2 Dir-820l, Dir-820l Firmware 2025-05-21 N/A 9.8 CRITICAL
D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_451208 function.
CVE-2025-4846 2025-05-19 7.5 HIGH 7.3 HIGH
A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MPUT Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-4149 1 Netgear 2 Ex6200, Ex6200 Firmware 2025-05-19 9.0 HIGH 8.8 HIGH
A vulnerability was found in Netgear EX6200 1.0.3.94. It has been classified as critical. This affects the function sub_54014. The manipulation of the argument host leads to buffer overflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-4117 1 Netgear 2 Jwnr2000, Jwnr2000 Firmware 2025-05-16 5.2 MEDIUM 5.5 MEDIUM
A vulnerability, which was classified as critical, was found in Netgear JWNR2000v2 1.0.0.11. This affects the function sub_41A914. The manipulation of the argument host leads to buffer overflow. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-4290 1 Pcman 1 Ftp Server 2025-05-16 7.5 HIGH 7.3 HIGH
A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component SMNT Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-4289 1 Pcman 1 Ftp Server 2025-05-16 7.5 HIGH 7.3 HIGH
A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component RNTO Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-4288 1 Pcman 1 Ftp Server 2025-05-16 7.5 HIGH 7.3 HIGH
A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RNFR Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-4255 1 Pcman 1 Ftp Server 2025-05-16 7.5 HIGH 7.3 HIGH
A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RMD Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-4254 1 Pcman 1 Ftp Server 2025-05-16 7.5 HIGH 7.3 HIGH
A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component LIST Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-4253 1 Pcman 1 Ftp Server 2025-05-16 7.5 HIGH 7.3 HIGH
A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HASH Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.