CWE-121— Stack-based Buffer Overflow

CVE-2024-32286CRITICALCVSS 9.8EG 9.8

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the password parameter in the formaddUserName function.

CVE-2024-32287MEDIUMCVSS 6.5EG 6.5

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function.

CVE-2024-32288MEDIUMCVSS 6.3EG 6.3

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function.

CVE-2024-32290MEDIUMCVSS 6.7EG 6.7

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function.

CVE-2024-32291HIGHCVSS 7.5EG 7.5

Tenda W30E v1.0 v1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromAddressNat function.

CVE-2024-32293HIGHCVSS 8.0EG 8.0

Tenda W30E v1.0 firmware v1.0.1.25(633) has a stack overflow vulnerability via the page parameter in the fromNatlimit function.

CVE-2024-32299HIGHCVSS 8.8EG 8.8

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromDhcpListClient function.

CVE-2024-32301CRITICALCVSS 9.8EG 9.8

Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.

CVE-2024-32302MEDIUMCVSS 6.3EG 6.3

Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.

CVE-2024-32303HIGHCVSS 8.0EG 8.0

Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.

CVE-2024-32305HIGHCVSS 8.8EG 8.8

Tenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

CVE-2024-32306MEDIUMCVSS 5.7EG 5.7

Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

CVE-2024-32307HIGHCVSS 7.4EG 7.4

Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

CVE-2024-32310HIGHCVSS 8.0EG 8.0

Tenda FH1205 V2.0.0.7(775) firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

CVE-2024-32311MEDIUMCVSS 6.5EG 6.5

Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the PPW parameter of the fromWizardHandle function.

CVE-2024-32312MEDIUMCVSS 5.7EG 5.7

Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.

CVE-2024-32313MEDIUMCVSS 6.5EG 6.5

Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the adslPwd parameter of the formWanParameterSetting function.

CVE-2024-32315MEDIUMCVSS 4.7EG 4.7

Tenda FH1205 V2.0.0.7(775) firmware has a stack overflow vulnerability located via the adslPwd parameter of the formWanParameterSetting function.

CVE-2024-32316MEDIUMCVSS 6.5EG 6.5

Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.

CVE-2024-32317HIGHCVSS 7.5EG 7.5

Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability in the fromDhcpListClient function.

CVE-2024-32318CRITICALCVSS 9.8EG 9.8

Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.

CVE-2024-32320MEDIUMCVSS 5.9EG 5.9

Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function.

CVE-2024-3286HIGHCVSS 7.5EG 7.5

Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function.

2024-05-16

A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request.

CVE-2024-33181HIGHCVSS 8.8EG 8.8

2024-07-16

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter.

CVE-2024-33182CRITICALCVSS 9.8EG 9.8

2024-07-16

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter.

CVE-2024-33211HIGHCVSS 7.3EG 7.3

CVE-2024-33212HIGHCVSS 8.8EG 8.8

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex.

CVE-2024-33213MEDIUMCVSS 6.5EG 6.5

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm.

CVE-2024-33215CRITICALCVSS 9.8EG 9.8

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic.

CVE-2024-33217HIGHCVSS 7.5EG 7.5

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/addressNat.

CVE-2024-33511CRITICALCVSS 9.8EG 9.8

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat.

CVE-2024-33512CRITICALCVSS 9.8EG 9.8

There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management prot…

CVE-2024-33513MEDIUMCVSS 5.9EG 5.9

There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point …

CVE-2024-33514MEDIUMCVSS 5.3EG 5.3

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the aff…

CVE-2024-33515MEDIUMCVSS 5.3EG 5.3

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the aff…

CVE-2024-33516MEDIUMCVSS 5.3EG 5.3

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the aff…

CVE-2024-33517MEDIUMCVSS 5.3EG 5.3

An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation…

CVE-2024-33518MEDIUMCVSS 5.3EG 5.3

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation o…

CVE-2024-33577HIGHCVSS 7.8EG 7.8

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation o…

2024-05-14

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could all…

CVE-2024-33599HIGHCVSS 8.1EG 8.1

2024-05-06

nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow.…

CVE-2024-33772MEDIUMCVSS 5.7EG 5.7

2024-05-14

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service (DoS) through the parameter "curTime."

CVE-2024-33781HIGHCVSS 7.5EG 7.5

2024-05-07

MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::get_bytes in /Tools/octetStream.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message.

CVE-2024-33782HIGHCVSS 7.5EG 7.5

2024-05-07

MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix::extend in /OT/OTExtensionWithMatrix.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message.

CVE-2024-33835CRITICALCVSS 9.8EG 9.8