CVE Intelligence
Início / CVEs

Base de CVEs

Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.

Severidade
Limpar

683 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2021-47814 Média · 5.5 CWE-120 15/01/2026
NBMonitor 1.6.8 - Denial of Service (PoC)
NBMonitor 1.6.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input field. Attackers can paste a 256-character buffer into the registration key field to trigger an application crash and potential system instability.
CVE-2021-47813 Alta · 7.5 CWE-120 15/01/2026
Backup Key Recovery 2.2.7 - Denial of Service (PoC)
Backup Key Recovery 2.2.7 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input field. Attackers can paste a large buffer of 256 repeated characters into the registration key field to trigger application instability and potential crash.
CVE-2021-47798 Crítica · 9.8 CWE-120 15/01/2026
NoteBurner 2.35 - Estouro de buffer com negação de serviço
O NoteBurner 2.35 contém uma vulnerabilidade de estouro de buffer no campo de entrada do código de licença que permite que atacantes derrubem a aplicação. Atacantes podem gerar um payload de 6000 bytes e colá-lo nos campos 'Name' e 'Code' para provocar a falha da aplicação.
CVE-2021-47797 Alta · 7.5 CWE-120 15/01/2026
Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
Leawo Prof. Media 11.0.0.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized payload in the activation keycode field. Attackers can generate a 6000-byte buffer of repeated characters to trigger an application crash when pasted into the registration interface.
CVE-2023-54328 Média · 6.5 CWE-120 13/01/2026
AimOne Video Converter 2.04 Build 103 Buffer Overflow in Registration Form
AimOne Video Converter 2.04 Build 103 contains a buffer overflow vulnerability in its registration form that causes application crashes. Attackers can generate a 7000-byte payload to trigger the denial of service and potentially exploit the software's registration mechanism.
CVE-2022-50922 Crítica · 9.8 CWE-120 13/01/2026
Audio Conversion Wizard v2.01 - Buffer Overflow
Audio Conversion Wizard v2.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory with a specially crafted registration code. Attackers can generate a payload that overwrites the application's memory stack, potentially enabling remote code execution through a carefully constructed input buffer.
CVE-2025-29329 Crítica · 9.8 CWE-120 12/01/2026
Classic Buffer Overflow em Sagemcom F@st 3686 Firmware
Buffer Overflow in the ippprint (Internet Printing Protocol) service in Sagemcom F@st 3686 MAGYAR_4.121.0 allows remote attacker to execute arbitrary code by sending a crafted HTTP request.
CVE-2026-21639 Alta · 8.8 CWE-120 08/01/2026
Classic Buffer Overflow em Ui Airmax Ac Firmware
A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.
CVE-2025-69258 Crítica · 9.8 CWE-120 08/01/2026
Classic Buffer Overflow em Trend Micro, Inc. Trend Micro Apex Central
A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.
CVE-2025-47394 Alta · 7.8 CWE-120 07/01/2026
Buffer Copy Without Checking Size of Input in DSP Service
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
CVE-2025-47388 Alta · 7.8 CWE-120 07/01/2026
Buffer Copy without Checking Size of Input in DSP Service
Memory corruption while passing pages to DSP with an unaligned starting address.
CVE-2025-47335 Média · 6.7 CWE-120 07/01/2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while parsing clock configuration data for a specific hardware type.
CVE-2025-47334 Média · 6.7 CWE-120 07/01/2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2026-0640 Crítica · 9.8 CWE-120 06/01/2026
Estouro de buffer em sscanf no PowerSaveSet do Tenda AC23
Uma fragilidade foi identificada no Tenda AC23 16.03.07.52. Ela afeta a função sscanf do arquivo /goform/PowerSaveSet. A manipulação do argumento Time pode levar a um estouro de buffer. O ataque pode ser realizado remotamente. O exploit foi disponibilizado ao público e pode ser usado em ataques.
CVE-2025-53966 Alta · 8.4 CWE-120 05/01/2026
Classic Buffer Overflow em Samsung Exynos 1380 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow during handling of an IOCTL message.
CVE-2025-49495 Alta · 8.4 CWE-120 05/01/2026
Classic Buffer Overflow em Samsung Exynos 1380 Firmware
An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580. Mishandling of an NL80211 vendor command leads to a buffer overflow.
CVE-2025-48721 Média · 6.5 CWE-120 02/01/2026
QTS, QuTS hero
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QTS 5.2.8.3332 build 20251128 and later
CVE-2025-52872 Alta · 8.1 CWE-120 02/01/2026
QTS, QuTS hero
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.0.3192 build 20250716 and later
CVE-2025-52864 Alta · 8.1 CWE-120 02/01/2026
QTS, QuTS hero
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.0.3192 build 20250716 and later
CVE-2025-52863 Alta · 8.1 CWE-120 02/01/2026
QTS, QuTS hero
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3256 build 20250913 and later QuTS hero h5.2.7.3256 build 20250913 and later QuTS hero h5.3.0.3192 build 20250716 and later
CVE-2025-15356 Alta · 8.8 CWE-120 30/12/2025
Tenda AC20 PowerSaveSet sscanf buffer overflow
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file /goform/PowerSaveSet. The manipulation of the argument powerSavingEn/time/powerSaveDelay/ledCloseType leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-15092 Crítica · 9.8 CWE-120 25/12/2025
UTT 进取 512W ConfigExceptMSN strcpy buffer overflow
A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/ConfigExceptMSN. Such manipulation of the argument remark leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
CVE-2025-15091 Crítica · 9.8 CWE-120 25/12/2025
UTT 进取 512W formPictureUrl strcpy buffer overflow
A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/formPictureUrl. This manipulation of the argument importpictureurl causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-15090 Crítica · 9.8 CWE-120 25/12/2025
UTT 进取 512W formConfigNoticeConfig strcpy buffer overflow
A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file /goform/formConfigNoticeConfig. The manipulation of the argument timestart results in buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.
CVE-2025-15089 Crítica · 9.8 CWE-120 25/12/2025
UTT 进取 512W APSecurity strcpy buffer overflow
A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy of the file /goform/APSecurity. The manipulation of the argument wepkey1 leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.