|
1351
|
- |
|
-
|
-
|
SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, the fix for CVE-2026-30869 only added a denylist check (IsSensitivePath) but did not address the root cause — a redundan…
|
CWE-22
Path Traversal
|
CVE-2026-41894
|
2026-04-28 03:53 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1352
|
8.4 |
HIGH
Local
|
-
|
-
|
Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler (SEH) overwrite. Attacker…
|
CWE-120
Classic Buffer Overflow
|
CVE-2018-25263
|
2026-04-28 03:53 |
2026-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1353
|
6.2 |
MEDIUM
Local
|
-
|
-
|
Faleemi Plus 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can paste a 2000-byte payload into the…
|
CWE-120
Classic Buffer Overflow
|
CVE-2018-25275
|
2026-04-28 03:53 |
2026-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1354
|
6.2 |
MEDIUM
Local
|
-
|
-
|
Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can create a ma…
|
CWE-120
Classic Buffer Overflow
|
CVE-2018-25292
|
2026-04-28 03:53 |
2026-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1355
|
6.2 |
MEDIUM
Local
|
-
|
-
|
Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long string in the optional …
|
CWE-120
Classic Buffer Overflow
|
CVE-2018-25293
|
2026-04-28 03:53 |
2026-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1356
|
7.5 |
HIGH
Network
|
-
|
-
|
CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data…
|
CWE-120
Classic Buffer Overflow
|
CVE-2018-25294
|
2026-04-28 03:53 |
2026-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1357
|
6.2 |
MEDIUM
Local
|
-
|
-
|
ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the IP input field. Attackers …
|
CWE-789
Memory Allocation with Excessive Size Value
|
CVE-2018-25295
|
2026-04-28 03:53 |
2026-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1358
|
5.5 |
MEDIUM
Local
|
-
|
-
|
P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the application by submitting an oversized input strin…
|
CWE-120
Classic Buffer Overflow
|
CVE-2018-25296
|
2026-04-28 03:53 |
2026-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1359
|
9.8 |
CRITICAL
Network
|
-
|
-
|
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulat…
|
CWE-77 CWE-78
Command Injection OS Command
|
CVE-2026-7037
|
2026-04-28 03:50 |
2026-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1360
|
3.3 |
LOW
Local
|
-
|
-
|
A weakness has been identified in tufantunc ssh-mcp up to 1.5.0. Impacted is an unknown function of the file src/index.ts of the component Command Line Handler. This manipulation causes insufficientl…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2026-7038
|
2026-04-28 03:50 |
2026-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|