Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (24981 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-57107 1 Vtk 1 Vtk 2025-11-05 7.1 High
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.
CVE-2025-27041 1 Qualcomm 127 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 124 more 2025-11-05 5.5 Medium
Transient DOS while processing video packets received from video firmware.
CVE-2025-27045 1 Qualcomm 37 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 34 more 2025-11-05 6.1 Medium
Information disclosure while processing batch command execution in Video driver.
CVE-2025-27049 1 Qualcomm 63 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 60 more 2025-11-05 5.5 Medium
Transient DOS while processing IOCTL call for image encoding.
CVE-2025-63468 1 Totolink 2 Lr350, Lr350 Firmware 2025-11-05 7.5 High
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the sub_426EF8 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63466 1 Totolink 2 Lr350, Lr350 Firmware 2025-11-05 7.5 High
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63467 1 Totolink 2 Lr350, Lr350 Firmware 2025-11-05 7.5 High
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_425400 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63469 1 Totolink 2 Lr350, Lr350 Firmware 2025-11-05 7.5 High
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63460 1 Totolink 2 A7000r, A7000r Firmware 2025-11-05 7.5 High
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63461 1 Totolink 2 A7000r, A7000r Firmware 2025-11-05 7.5 High
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63462 1 Totolink 2 A7000r, A7000r Firmware 2025-11-05 7.5 High
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63463 1 Totolink 2 Lr350, Lr350 Firmware 2025-11-05 7.5 High
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63464 1 Totolink 2 Lr350, Lr350 Firmware 2025-11-05 7.5 High
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_42396C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63465 1 Totolink 2 Lr350, Lr350 Firmware 2025-11-05 7.5 High
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63459 1 Totolink 2 A7000r, A7000r Firmware 2025-11-05 7.5 High
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63454 1 Tenda 2 Ax3, Ax3 Firmware 2025-11-05 7.5 High
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63458 1 Tenda 2 Ax1803, Ax1803 Firmware 2025-11-05 7.5 High
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-27064 1 Qualcomm 155 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 152 more 2025-11-05 6.1 Medium
Information disclosure while registering commands from clients with diag through diagHal.
CVE-2025-47362 2 Qnx, Qualcomm 78 Qnx, Msm8996au, Msm8996au Firmware and 75 more 2025-11-05 6.1 Medium
Information disclosure while processing message from client with invalid payload.
CVE-2025-54574 1 Squid-cache 1 Squid 2025-11-05 9.3 Critical
Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.