Search

Search Results (315943 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-60557 2 D-link, Dlink 3 Dir-600l, Dir-600l, Dir-600l Firmware 2025-10-28 7.5 High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasy_Wizard.
CVE-2025-60554 2 D-link, Dlink 3 Dir-600l, Dir-600l, Dir-600l Firmware 2025-10-28 9.8 Critical
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard.
CVE-2025-60555 2 D-link, Dlink 3 Dir-600l, Dir-600l, Dir-600l Firmware 2025-10-28 7.5 High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode.
CVE-2025-60556 2 D-link, Dlink 3 Dir-600l, Dir-600l, Dir-600l Firmware 2025-10-28 7.5 High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizard1.
CVE-2025-60559 2 D-link, Dlink 3 Dir-600l, Dir-600l, Dir-600l Firmware 2025-10-28 7.5 High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter.
CVE-2025-60558 2 D-link, Dlink 3 Dir-600l, Dir-600l, Dir-600l Firmware 2025-10-28 7.5 High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ.
CVE-2025-60561 2 D-link, Dlink 3 Dir-600l, Dir-600l, Dir-600l Firmware 2025-10-28 7.5 High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail.
CVE-2025-60562 2 D-link, Dlink 3 Dir-600l, Dir-600l, Dir-600l Firmware 2025-10-28 7.5 High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey.
CVE-2025-60564 2 D-link, Dlink 3 Dir-600l, Dir-600l, Dir-600l Firmware 2025-10-28 7.5 High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog.
CVE-2025-60565 2 D-link, Dlink 3 Dir-600l, Dir-600l, Dir-600l Firmware 2025-10-28 7.5 High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSchedule.
CVE-2025-12279 2 Code-projects, Fabian 2 Client Details System, Client Details System 2025-10-28 2.4 Low
A vulnerability has been found in code-projects Client Details System 1.0. This vulnerability affects unknown code of the file /welcome.php. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
CVE-2025-12212 1 Tenda 2 O3, O3 Firmware1.0.0.10\(2478\) 2025-10-28 8.8 High
A weakness has been identified in Tenda O3 1.0.0.10(2478). This affects the function SetValue/GetValue of the file /goform/setNetworkService. This manipulation of the argument upnpEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-12213 1 Tenda 2 O3, O3 Firmware1.0.0.10\(2478\) 2025-10-28 8.8 High
A security vulnerability has been detected in Tenda O3 1.0.0.10(2478). This vulnerability affects the function SetValue/GetValue of the file /goform/setVlanConfig. Such manipulation of the argument lan leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-12214 1 Tenda 2 O3, O3 Firmware1.0.0.10\(2478\) 2025-10-28 8.8 High
A vulnerability was detected in Tenda O3 1.0.0.10(2478). This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing manipulation of the argument enable results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
CVE-2025-12215 1 Projectworlds 1 Online Shopping System 2025-10-28 7.3 High
A flaw has been found in projectworlds Online Shopping System 1.0. Impacted is an unknown function of the file /login_submit.php. Executing manipulation of the argument keywords can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
CVE-2025-12225 1 Tenda 2 Ac6, Ac6 Firmware 2025-10-28 8.8 High
A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown processing of the file /goform/WifiGuestSet of the component HTTP Request Handler. Such manipulation of the argument shareSpeed leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-12226 2 Mayurik, Sourcecodester 2 Best House Rental Management System, Best House Rental Management System 2025-10-28 4.7 Medium
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house of the file /admin_class.php. Performing manipulation of the argument house_no results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
CVE-2025-12227 1 Projectworlds 1 Gate Pass Management System 2025-10-28 3.5 Low
A vulnerability was determined in projectworlds Gate Pass Management System 1.0. The affected element is an unknown function of the file /add-pass.php. Executing manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-12228 1 Projectworlds 1 Expense Management System 2025-10-28 2.4 Low
A vulnerability was identified in projectworlds Expense Management System 1.0. The impacted element is an unknown function of the file /public/admin/users/create of the component Users Page. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
CVE-2025-12229 1 Projectworlds 1 Expense Management System 2025-10-28 2.4 Low
A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/admin/roles/create of the component Roles Page. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been released to the public and may be exploited.