Microsoft December 2025 Security Updates

Microsoft December 2025 Early Security Updates

Microsoft November 2025 Security Updates

Microsoft October 2025 Security Updates

Microsoft September 2025 Security Updates

Microsoft August 2025 Security Updates

Microsoft August Early 2025 Security Updates

Microsoft July 2025 Security Updates

Microsoft June 2025 Security Updates

Microsoft June Early 2025 Security Updates

Microsoft May 2025 Security Updates

Microsoft May Early 2025 Security Updates

Microsoft April 2025 Security Updates

Microsoft March 2025 Security Updates

Microsoft March 2025 Early Security Updates

Microsoft February 2025 Security Updates

Microsoft February 2025 Early Security Updates

Microsoft January 2025 Security Updates

Microsoft January 2025 Early Security Updates

Microsoft December 2024 Security Updates

Microsoft November 2024 Security Updates

Microsoft October 2024 Security Updates

Microsoft September 2024 Security Updates

Microsoft August 2024 Security Updates

Microsoft July 2024 Security Updates

Microsoft June 2024 Security Updates

Microsoft May 2024 Security Updates

Microsoft April 2024 Security Updates

Microsoft March 2024 Security Updates

Microsoft February 2024 Security Updates

Microsoft January 2024 Security Updates

Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy of the file /goform/APSecurity. The manipulation of the argument wepkey1 leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

进取 512W

A buffer overflow vulnerability in UTT 进取 512W versions up to 1.7.7-171114, specifically in the strcpy function of the /goform/APSecurity file. The vulnerability can be exploited by manipulating the wepkey1 argument, allowing remote attackers to potentially compromise the system.

Buffer Overflow via Environment Variables

Overflow Buffers

Buffer Manipulation

Client-side Injection-induced Buffer Overflow

Filter Failure through Buffer Overflow

MIME Conversion

Overflow Binary Resource File

Buffer Overflow via Symbolic Links

Overflow Variables and Tags

Buffer Overflow via Parameter Expansion

Buffer Overflow in an API Call

Buffer Overflow in Local Command-Line Utilities

String Format Overflow in syslog()

Forced Integer Overflow

A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file /goform/formConfigNoticeConfig. The manipulation of the argument timestart results in buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.

A buffer overflow vulnerability in UTT 进取 512W software versions up to 1.7.7-171114, specifically affecting the strcpy function in the /goform/formConfigNoticeConfig file. The vulnerability can be triggered by manipulating the 'timestart' argument, potentially allowing remote attackers to execute malicious code.

asyncos

Improper Input Validation

Cisco is aware of a potential vulnerability.&nbsp; Cisco is currently investigating and&nbsp;will update these details as appropriate&nbsp;as more information becomes available.

Cisco Secure Email and Web Manager

Cisco Secure Email

Cisco

Input validation vulnerability in Cisco AsyncOS affecting Secure Email and Web Security Appliances. The flaw allows unauthenticated remote code execution through network access, potentially compromising email and web security infrastructure.

Server Side Include (SSI) Injection

Cross Zone Scripting

Command Line Execution through SQL Injection

Object Relational Mapping Injection

SQL Injection through SOAP Parameter Tampering

Double Encoding

Subverting Environment Variable Values

Format String Injection

LDAP Injection

Input Data Manipulation

Flash Injection

XSS Using MIME Type Mismatch

Exploiting Trust in Client

File Content Injection

Serialized Data with Nested Payloads

Oversized Serialized Data Payloads

XML Injection

Impair Command History Logging

Dynamic Linker Hijacking

Path Interception by PATH Environment Variable

sec.cloudapps.cisco.com

Out-of-bounds Write

A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/formPictureUrl. This manipulation of the argument importpictureurl causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

A buffer overflow vulnerability in UTT 进取 512W versions up to 1.7.7-171114, specifically in the strcpy function of the /goform/formPictureUrl file. The vulnerability can be exploited by manipulating the importpictureurl argument, potentially allowing remote attackers to execute malicious code.

ds-2105_pro_firmware

ds-2105_pro\+_firmware

Missing Authorization

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Command injection vulnerability in Digiever DS-2105 Pro devices (firmware version 3.1.0.71-11) affecting the time_tzsetup.cgi component. The vulnerability allows low-privileged network attackers to inject and execute arbitrary commands on the affected device.

Exploitation of Thunderbolt Protection Flaws

Firmware Corruption

Exploitation for Defense Evasion

Modify Authentication Process

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Aidango allows Cross-Site Scripting (XSS).This issue affects Aidango: before 2.144.4.

Aidango

Verisay Communication and Information Technology Industry and Trade Ltd. Co.

DOM-Based XSS

Reflected XSS

Stored XSS

Cross-Site Scripting (XSS)

AJAX Footprinting

net-snmp

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Net-SNMP. Authentication is not required to exploit this vulnerability.The specific flaw exists within the SnmpTrapd service, which listens on UDP port 162 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Net-SNMP has issued an update to correct this vulnerability. More details can be found at: https://github.com/net-snmp/net-snmp/security/advisories/GHSA-4389-rwqf-q9gq 

A critical buffer overflow vulnerability in Net-SNMP's SnmpTrapd service, which listens on UDP port 162 by default. The flaw stems from insufficient validation of user-supplied data length before copying it to a fixed-length stack-based buffer. This allows remote attackers to execute arbitrary code without requiring authentication.

bugzilla.redhat.com

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Trizbi allows Cross-Site Scripting (XSS).This issue affects Trizbi: before 2.144.4.

Trizbi

Search CVEs by ID

Trending Vulnerabilities

Latest Patch Tuesday Reports

December 2025 Patch Tuesday: 10 Critical Vulnerabilities Amid 64 CVEs

December 2025 Early Security Update: 0 Critical Vulnerabilities Amid 1 CVEs

November 2025 Patch Tuesday: 8 Critical Vulnerabilities Amid 63 CVEs

Browse

Be the first to know about critical vulnerabilities