rainbutterfly/cve_corpus huggingface dataset:
CVE-2025-44846 
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44847 
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44848 
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44854 
TOTOLINK CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the setUpgradeUboot function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44860 
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44861 
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44862 
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44863 
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44864 
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44865 
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44866 
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44867 
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-01T00:00:00.000Z
CVE-2025-44868 
Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-02T00:00:00.000Z
CVE-2025-44872 
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-02T00:00:00.000Z
CVE-2025-44877 
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-02T00:00:00.000Z
CVE-2025-44879 
WS-WN572HP3 V230525 was discovered to contain a buffer overflow in the component /www/cgi-bin/upload.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-14T00:00:00.000Z
CVE-2025-44880 
A command injection vulnerability in the component /cgi-bin/adm.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44881 
A command injection vulnerability in the component /cgi-bin/qos.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44882 
A command injection vulnerability in the component /cgi-bin/firewall.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44883 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the tacIp parameter in the web_tacplus_serverEdit_post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44884 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the web_sys_infoContact_post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44885 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the remote_ip parameter in the web_snmpv3_remote_engineId_add_post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44886 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName parameter in the web_acl_mgmt_Rules_Edit_postcontains function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44887 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radIpkey parameter in the web_radiusSrv_post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44888 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the stp_conf_name parameter in the web_stp_globalSetting_post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44890 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_notifyv3_add_post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44891 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_v3host_add_post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44892 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ownekey parameter in the web_rmon_alarm_post_rmon_alarm function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-21T00:00:00.000Z
CVE-2025-44893 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ruleNamekey parameter in the web_acl_mgmt_Rules_Apply_post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44894 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radDftParamKey parameter in the web_radiusSrv_dftParam_post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44895 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ipv4Aclkey parameter in the web_acl_ipv4BasedAceAdd function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-21T00:00:00.000Z
CVE-2025-44896 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bindEditMACName parameter in the web_acl_bindEdit_post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44897 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp_srvip parameter in the web_tool_upgradeManager_post function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44898 
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the web_aaa_loginAuthlistEdit function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-20T00:00:00.000Z
CVE-2025-44899 
There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the fromSetWifiGusetBasic function of the web url /goform/ WifiGuestSet, the manipulation of the parameter shareSpeed leads to stack overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-06T00:00:00.000Z
CVE-2025-44900 
In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads to stack overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-06T00:00:00.000Z
CVE-2025-44904 
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-30T00:00:00.000Z
CVE-2025-44905 
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-30T00:00:00.000Z
CVE-2025-44906 
jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-30T00:00:00.000Z
CVE-2025-44951 
A missing length check in `ogs_pfcp_dev_add` function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacker to cause a Buffer Overflow by changing the `session.dev` field with a value with length greater than 32.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-06-18T00:00:00.000Z
CVE-2025-44952 
A missing length check in `ogs_pfcp_subnet_add` function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacker to cause a Buffer Overflow by changing the `session.dnn` field with a value with length greater than 101.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-06-18T00:00:00.000Z
CVE-2025-44954 
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.
Problem types: cwe_id: CWE-1394
description: CWE-1394 Use of Default Cryptographic Key
Affected products: vendor: RUCKUS
product: SmartZone
default_status: unknown
CVSS v3.1: version: 3.1
baseScore: 9
baseSeverity: CRITICAL
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Published: 2025-08-04T00:00:00.000Z
CVE-2025-44955 
RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.
Problem types: cwe_id: CWE-259
description: CWE-259 Use of Hard-coded Password
Affected products: vendor: RUCKUS
product: Network Director
default_status: unknown
CVSS v3.1: version: 3.1
baseScore: 8.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published: 2025-08-04T00:00:00.000Z
CVE-2025-44957 
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.
Problem types: cwe_id: CWE-288
description: CWE-288 Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: RUCKUS
product: SmartZone
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 8.5
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Published: 2025-08-04T00:00:00.000Z
CVE-2025-44958 
RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.
Problem types: cwe_id: CWE-257
description: CWE-257 Storing Passwords in a Recoverable Format
Affected products: vendor: RUCKUS
product: Network Director
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 5.3
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
Published: 2025-08-04T00:00:00.000Z
CVE-2025-44960 
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
Problem types: cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: RUCKUS
product: SmartZone
default_status: unknown
CVSS v3.1: version: 3.1
baseScore: 8.5
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Published: 2025-08-04T00:00:00.000Z
CVE-2025-44961 
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.
Problem types: cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: RUCKUS
product: SmartZone
default_status: unknown
CVSS v3.1: version: 3.1
baseScore: 9.9
baseSeverity: CRITICAL
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published: 2025-08-04T00:00:00.000Z
CVE-2025-44962 
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
Problem types: cwe_id: CWE-24
description: CWE-24 Path Traversal: '../filedir'
Affected products: vendor: RUCKUS
product: SmartZone
default_status: unknown
CVSS v3.1: version: 3.1
baseScore: 5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Published: 2025-08-04T00:00:00.000Z
CVE-2025-44963 
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.
Problem types: cwe_id: CWE-321
description: CWE-321 Use of Hard-coded Cryptographic Key
Affected products: vendor: RUCKUS
product: Network Director
default_status: unknown
CVSS v3.1: version: 3.1
baseScore: 9
baseSeverity: CRITICAL
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Published: 2025-08-04T00:00:00.000Z
CVE-2025-44964 
A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-08-05T00:00:00.000Z
CVE-2025-44998 
A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-23T00:00:00.000Z
CVE-2025-45001 
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-06-09T00:00:00.000Z
CVE-2025-45002 
Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-06-09T00:00:00.000Z
CVE-2025-45006 
Improper mstatus.SUM bit retention (non-zero) in Open-Source RISC-V Processor commit f517abb violates privileged spec constraints, enabling potential physical memory access attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-07-01T00:00:00.000Z
CVE-2025-45007 
A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-30T00:00:00.000Z
CVE-2025-45009 
A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-30T00:00:00.000Z
CVE-2025-45010 
A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-30T00:00:00.000Z
CVE-2025-45011 
A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata POST request parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-30T00:00:00.000Z
CVE-2025-45015 
A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-30T00:00:00.000Z
CVE-2025-45017 
A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the tprice POST request parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-30T00:00:00.000Z
CVE-2025-45018 
A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-30T00:00:00.000Z
CVE-2025-45019 
A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the cprice POST request parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-30T00:00:00.000Z
CVE-2025-45020 
A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter in a POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-30T00:00:00.000Z
CVE-2025-45021 
A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0. Attackers can exploit this vulnerability via the email parameter in a POST request to execute arbitrary SQL commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-30T00:00:00.000Z
CVE-2025-45029 
WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENT_LENGTH variable at /cgi-bin/upload.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-07-02T00:00:00.000Z
CVE-2025-45042 
Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-05-05T00:00:00.000Z
CVE-2025-45055 
Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module. An authenticated user can upload a malicious SVG file as an event attachment, which, when viewed by an administrator, executes embedded JavaScript in the admin's session. This allows attackers to escalate privileges by creating a new administrator account. The vulnerability arises from insufficient sanitization of SVG files and weak CSRF protections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-06-09T00:00:00.000Z
CVE-2025-45057 
D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-04-08T00:00:00.000Z
CVE-2025-45058 
D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-04-08T00:00:00.000Z
CVE-2025-45059 
D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-04-08T00:00:00.000Z
CVE-2025-45065 
employee record management system in php and mysql v1 was discovered to contain a SQL injection vulnerability via the loginerms.php endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-07-07T00:00:00.000Z