|
1811
|
8.8 |
HIGH
Network
|
tenda
|
f456_firmware
|
A flaw has been found in Tenda F456 1.0.0.5. The affected element is an unknown function of the file /goform/setcfm of the component httpd. This manipulation of the argument funcname/funcpara1 causes…
|
CWE-119 CWE-120
Incorrect Access of Indexable Resource ('Range Error') Classic Buffer Overflow
|
CVE-2026-7057
|
2026-04-30 07:18 |
2026-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1812
|
7.8 |
HIGH
Local
|
-
|
-
|
Allok AVI to DVD SVCD VCD Converter 4.0.1217 contains a structured exception handling (SEH) based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a ma…
|
CWE-120
Classic Buffer Overflow
|
CVE-2018-25302
|
2026-04-30 06:22 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1813
|
8.4 |
HIGH
Local
|
-
|
-
|
Allok Video to DVD Burner 2.6.1217 contains a stack-based buffer overflow vulnerability in the License Name field that allows local attackers to execute arbitrary code by triggering a structured exce…
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2018-25303
|
2026-04-30 06:22 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1814
|
6.5 |
MEDIUM
Network
|
-
|
-
|
VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows authenticated attackers to disclose arbitrary files by injecting path traversal seq…
|
CWE-22
Path Traversal
|
CVE-2018-25311
|
2026-04-30 06:22 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1815
|
6.5 |
MEDIUM
Network
|
-
|
-
|
LifeSize ClearSea 3.1.4 contains directory traversal vulnerabilities that allow authenticated attackers to download and upload arbitrary files by manipulating path parameters in the smartgui interfac…
|
CWE-22
Path Traversal
|
CVE-2018-25312
|
2026-04-30 06:22 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1816
|
8.4 |
HIGH
Local
|
-
|
-
|
Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized string in the License Na…
|
CWE-120
Classic Buffer Overflow
|
CVE-2018-25314
|
2026-04-30 06:22 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1817
|
8.4 |
HIGH
Local
|
-
|
-
|
Alloksoft Video joiner 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Name field. Attackers can…
|
CWE-120
Classic Buffer Overflow
|
CVE-2018-25315
|
2026-04-30 06:22 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1818
|
8.8 |
HIGH
Network
|
-
|
-
|
Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection management privilege…
|
CWE-94
Code Injection
|
CVE-2026-34965
|
2026-04-30 06:22 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1819
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A security flaw has been discovered in geldata gel-mcp 0.1.0. This impacts the function list_rules/fetch_rule of the file src/gel_mcp/server.py. The manipulation of the argument rule_name results in …
|
CWE-22
Path Traversal
|
CVE-2026-7403
|
2026-04-30 06:16 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1820
|
7.3 |
HIGH
Network
|
-
|
-
|
A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the function delete_shared_prompt of the file src/mcpo_simple_server/services/prompt_manager/base_manager.p…
|
CWE-22 CWE-23
Path Traversal Relative Path Traversal
|
CVE-2026-7404
|
2026-04-30 06:16 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|