Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.6 HIGH
CVE-2019-25695 — R 3.4.4 Local Buffer Overflow Windows XP SP3

R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting malicious input into the GUI Preferences language field. Attackers can craft a payl…

r | Memory Corruption
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
7.1 HIGH
CVE-2019-25693 — ResourceSpace 8.6 SQL Injection via collection_edit.php

ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keywords parameter in collection…

Remote | Injection
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
8.6 HIGH
CVE-2019-25691 — Faleemi Desktop Software 1.8 Local Buffer Overflow SEH DEP Bypass

Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attackers to bypass DEP protections through structured exception handling exploitati…

| Memory Corruption
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
8.6 HIGH
CVE-2019-25689 — HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH

HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can craft a malicious payl…

html5_video_player | Memory Corruption
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
8.6 HIGH
CVE-2018-25258 — RGui 3.5.0 Local Buffer Overflow SEH DEP Bypass

RGui 3.5.0 contains a local buffer overflow vulnerability in the GUI preferences dialog that allows attackers to bypass DEP protections through structured exception handling exploitation. Attackers c…

| Memory Corruption
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
7.1 HIGH
CVE-2018-25257 — Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile

Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code through the name field in SystemProfileF…

Remote | Injection
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
6.1 MEDIUM
CVE-2017-20239 — MDwiki Cross-Site Scripting via Location Hash Parameter

MDwiki contains a cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the location hash parameter. Attackers can craft …

Remote | Cross-Site Scripting
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
7.5 HIGH
CVE-2026-6126 — zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication

A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4. The affected element is an unknown function of the component Administrative HTTP Endpoint. This manipulation causes missin…

Remote | Authentication
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
6.5 MEDIUM
CVE-2026-6125 — Dromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injection

A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler…

Remote | Injection
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
9.0 HIGH
CVE-2026-6124 — Tenda F451 httpd SafeMacFilter fromSafeMacFilter stack-based overflow

A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects the function fromSafeMacFilter of the file /goform/SafeMacFilter of the component httpd. Executing a manipulation of t…

f451_firmware | Remote | Memory Corruption
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
9.0 HIGH
CVE-2026-6123 — Tenda F451 httpd addressNat fromAddressNat stack-based overflow

A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Performing a manipulation of the argument entrys resul…

f451_firmware | Remote | Memory Corruption
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
9.0 HIGH
CVE-2026-6122 — Tenda F451 httpd L7Prot frmL7ProtForm stack-based overflow

A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Such manipulation of the argument page le…

f451_firmware | Remote | Memory Corruption
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
9.0 HIGH
CVE-2026-6121 — Tenda F451 httpd WrlclientSet stack-based overflow

A flaw has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function WrlclientSet of the file /goform/WrlclientSet of the component httpd. This manipulation of the argument GO …

f451_firmware | Remote | Memory Corruption
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
9.0 HIGH
CVE-2026-6120 — Tenda F451 httpd DhcpListClient fromDhcpListClient stack-based overflow

A vulnerability was detected in Tenda F451 1.0.0.7. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. The manipulation of the argument page result…

f451_firmware | Remote | Memory Corruption
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
6.5 MEDIUM
CVE-2026-6119 — AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery

A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function post_data.get of the component API Endpoint. Such manipulation leads to server-side request fo…

astrbot | Remote | Server-Side Request Forgery
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
0.0 NA
CVE-2026-31413 — bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR maybe_fork_scalars() is called for both BPF_AND and BPF_OR whe…

linux_kernel | Memory Corruption
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
6.5 MEDIUM
CVE-2026-6118 — AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection

A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1. Impacted is the function add_mcp_server of the file astrbot/dashboard/routes/tools.py of the component MCP Endpoint. This manipulat…

astrbot | Remote | Injection
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
6.5 MEDIUM
CVE-2026-6117 — AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox

A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function install_plugin_upload of the file astrbot/dashboard/routes/plugin.py of the component install-upload End…

astrbot | Remote | Misconfiguration
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
10.0 HIGH
CVE-2026-6116 — Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection

A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The man…

a7100ru_firmware | Remote | Injection
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
10.0 HIGH
CVE-2026-6115 — Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection

A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setAppCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argu…

a7100ru_firmware | Remote | Injection
Apr 12, 2026 Apr 12, 2026
Apr 12, 2026
Apr 12, 2026
Showing 20 of 6020 Results