CWE-121 · 2,920 records
Stack-based Buffer Overflow
CVEs in this class
2,928 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
99Now | CVE-2025-22457Weaponized | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTAivanti · connect secure · CWE-121 | Critical9.8 | KEV | 100.0% | Apr 3, 2025 |
99Now | CVE-2021-20038Weaponized | A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticsonicwall · sma 200 firmware · CWE-121 | Critical9.8 | KEV | 99.9% | Dec 8, 2021 |
96Now | CVE-2025-0282Weaponized | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neuivanti · connect secure · CWE-121 | Critical9.0 | KEV | 100.0% | Jan 8, 2025 |
91Now | CVE-2022-20699Weaponized | Cisco Small Business RV Series Routers Vulnerabilitiescisco · rv340 firmware · CWE-121 | Critical9.8 | KEV | 72.5% | Feb 10, 2022 |
78This week | CVE-2025-32756Weaponized | A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versionfortinet · fortimail · CWE-121 | Critical9.8 | KEV | 29.8% | May 13, 2025 |
76This week | CVE-2020-5735Weaponized | Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777.amcrest · 1080-lite 8ch firmware · CWE-121 | High8.8 | KEV | 36.2% | Apr 8, 2020 |
72This week | CVE-2025-20352Weaponized | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the fcisco · ios xe sd-wan · CWE-121 | High7.7 | KEV | 39.4% | Sep 24, 2025 |
71This week | CVE-2022-20700Weaponized | Cisco Small Business RV Series Routers Vulnerabilitiescisco · rv340 firmware · CWE-121 | Critical9.8 | KEV | 5.7% | Feb 10, 2022 |
70This week | CVE-2025-42599Weaponized | Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability.qualitia · active\! mail · CWE-121 | Critical9.8 | KEV | 3.3% | Apr 18, 2025 |
68This week | CVE-2025-53521Weaponized | BigIP APM Vulnerabilityf5 · big-ip access policy manager · CWE-121 | Critical9.3 | KEV | 2.3% | Oct 15, 2025 |
67This week | CVE-2014-9163Weaponized | Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.adobe · flash player · CWE-121 | High7.8 | KEV | 20.7% | Dec 10, 2014 |
66This week | CVE-2022-20708Weaponized | Cisco Small Business RV Series Routers Vulnerabilitiescisco · rv340 firmware · CWE-121 | High8.0 | KEV | 14.9% | Feb 10, 2022 |
66This week | CVE-2026-7273Weaponized | A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow azyxel · gs1900-8 firmware · CWE-121 | High8.8 | KEV | 2.5% | Jun 15, 2026 |
65This week | CVE-2022-20703Weaponized | Cisco Small Business RV Series Routers Vulnerabilitiescisco · rv340 firmware · CWE-121 | High8.0 | KEV | 9.2% | Feb 10, 2022 |
64This week | CVE-2022-20701Weaponized | Cisco Small Business RV Series Routers Vulnerabilitiescisco · rv340 firmware · CWE-121 | High7.8 | KEV | 9.7% | Feb 10, 2022 |
63This week | CVE-2022-20705Weaponized | Cisco Small Business RV Series Routers Vulnerabilitiescisco · rv340 firmware · CWE-121 | Critical9.8 | — | 80.0% | Feb 10, 2022 |
63This week | CVE-2016-6563Weaponized | D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login actiondlink · dir-823 firmware · CWE-121 | Critical9.8 | — | 79.7% | Jul 13, 2018 |
63This week | CVE-2021-27137Weaponized | An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724.dd-wrt · dd-wrt · CWE-121 | High8.1 | KEV | 4.0% | Jul 16, 2026 |
63This week | CVE-2013-2597Weaponized | Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used codeaurora · android-msm · CWE-121 | High8.4 | KEV | 1.5% | Aug 31, 2014 |
62This week | CVE-2022-22274Proof of concept | A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Servsonicwall · sonicos · CWE-121 | Critical9.8 | — | 75.5% | Mar 25, 2022 |
61This week | CVE-2020-10924Weaponized | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rnetgear · r6700 firmware · CWE-121 | High8.8 | — | 87.3% | Jul 28, 2020 |
61This week | CVE-2022-35690No exploit | Adobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution Vulnerabilityadobe · coldfusion · CWE-121 | Critical9.8 | — | 72.2% | Oct 14, 2022 |
60This week | CVE-2018-10594Weaponized | Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, Edeltaww · commgr · CWE-121 | Critical9.8 | — | 68.6% | Jun 26, 2018 |
59Plan | CVE-2017-13089Proof of concept | GNU Wget: stack overflow in HTTP protocol handlinggnu · wget · CWE-121 | High8.8 | — | 79.9% | Oct 27, 2017 |
59Plan | CVE-2018-1161No exploit | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13.quest · netvault backup · CWE-121 | Critical9.8 | — | 66.7% | Feb 8, 2018 |
- CVE-2025-2245799Now
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA
CriticalCVSS 9.8KEVWeaponizedEPSS 100%ivanti · connect secureApr 3, 2025
- CVE-2021-2003899Now
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthentic
CriticalCVSS 9.8KEVWeaponizedEPSS 100%sonicwall · sma 200 firmwareDec 8, 2021
- CVE-2025-028296Now
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu
CriticalCVSS 9.0KEVWeaponizedEPSS 100%ivanti · connect secureJan 8, 2025
- CVE-2022-2069991Now
Cisco Small Business RV Series Routers Vulnerabilities
CriticalCVSS 9.8KEVWeaponizedEPSS 72%cisco · rv340 firmwareFeb 10, 2022
- CVE-2025-3275678This week
A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all version
CriticalCVSS 9.8KEVWeaponizedEPSS 30%fortinet · fortimailMay 13, 2025
- CVE-2020-573576This week
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777.
HighCVSS 8.8KEVWeaponizedEPSS 36%amcrest · 1080-lite 8ch firmwareApr 8, 2020
- CVE-2025-2035272This week
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the f
HighCVSS 7.7KEVWeaponizedEPSS 39%cisco · ios xe sd-wanSep 24, 2025
- CVE-2022-2070071This week
Cisco Small Business RV Series Routers Vulnerabilities
CriticalCVSS 9.8KEVWeaponizedEPSS 6%cisco · rv340 firmwareFeb 10, 2022
- CVE-2025-4259970This week
Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability.
CriticalCVSS 9.8KEVWeaponizedEPSS 3%qualitia · active\! mailApr 18, 2025
- CVE-2025-5352168This week
BigIP APM Vulnerability
CriticalCVSS 9.3KEVWeaponizedEPSS 2%f5 · big-ip access policy managerOct 15, 2025
- CVE-2014-916367This week
Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.
HighCVSS 7.8KEVWeaponizedEPSS 21%adobe · flash playerDec 10, 2014
- CVE-2022-2070866This week
Cisco Small Business RV Series Routers Vulnerabilities
HighCVSS 8.0KEVWeaponizedEPSS 15%cisco · rv340 firmwareFeb 10, 2022
- CVE-2026-727366This week
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a
HighCVSS 8.8KEVWeaponizedEPSS 3%zyxel · gs1900-8 firmwareJun 15, 2026
- CVE-2022-2070365This week
Cisco Small Business RV Series Routers Vulnerabilities
HighCVSS 8.0KEVWeaponizedEPSS 9%cisco · rv340 firmwareFeb 10, 2022
- CVE-2022-2070164This week
Cisco Small Business RV Series Routers Vulnerabilities
HighCVSS 7.8KEVWeaponizedEPSS 10%cisco · rv340 firmwareFeb 10, 2022
- CVE-2022-2070563This week
Cisco Small Business RV Series Routers Vulnerabilities
CriticalCVSS 9.8WeaponizedEPSS 80%cisco · rv340 firmwareFeb 10, 2022
- CVE-2016-656363This week
D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action
CriticalCVSS 9.8WeaponizedEPSS 80%dlink · dir-823 firmwareJul 13, 2018
- CVE-2021-2713763This week
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724.
HighCVSS 8.1KEVWeaponizedEPSS 4%dd-wrt · dd-wrtJul 16, 2026
- CVE-2013-259763This week
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used
HighCVSS 8.4KEVWeaponizedEPSS 2%codeaurora · android-msmAug 31, 2014
- CVE-2022-2227462This week
A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Serv
CriticalCVSS 9.8Proof of conceptEPSS 76%sonicwall · sonicosMar 25, 2022
- CVE-2020-1092461This week
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 r
HighCVSS 8.8WeaponizedEPSS 87%netgear · r6700 firmwareJul 28, 2020
- CVE-2022-3569061This week
Adobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 72%adobe · coldfusionOct 14, 2022
- CVE-2018-1059460This week
Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, E
CriticalCVSS 9.8WeaponizedEPSS 69%deltaww · commgrJun 26, 2018
- CVE-2017-1308959Plan
GNU Wget: stack overflow in HTTP protocol handling
HighCVSS 8.8Proof of conceptEPSS 80%gnu · wgetOct 27, 2017
- CVE-2018-116159Plan
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13.
CriticalCVSS 9.8No exploitEPSS 67%quest · netvault backupFeb 8, 2018