129 matches found
CVE-2021-30072: Out-of-bounds Write
An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication...
PT-2021-18594
Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.30B08 Description An issue was discovered in prog.cgi where the misuse of strcat leads to a stack-based buffer overflow. This issue does not require authentication to be exploited. Recommendations For D-Link DIR-878...
EulerOS 2.0 SP2 : evolution-data-server (EulerOS-SA-2021-1293)
According to the versions of the evolution-data-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - evolution-data-server eds through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a 'begin...
CVE-2017-8335
An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of setting name for wireless network. These values are stored by the device in NVRAM Non-volatile RAM. It seems that the POST parameters passed in thi...
CVE-2019-12553
In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the StrCat function provided by the scripting engine allows an attacker to overwrite arbitrary memory, which could lead to code execution...
Input validation
In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the StrCat function provided by the scripting engine allows an attacker to overwrite arbitrary memory, which could lead to code execution...
CVE-2019-12553: Out-of-bounds Write
In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the StrCat function provided by the scripting engine allows an attacker to overwrite arbitrary memory, which could lead to code execution...
PT-2019-12851
Name of the Vulnerable Software and Affected Versions 010 Editor version 9.0.1 Description The issue arises from improper validation of arguments in the internal implementation of the StrCat function, which is provided by the scripting engine. This allows an attacker to overwrite arbitrary memory...
Denial Of Service (DoS)
tensorflow is vulnerable to denial of service DoS attacks. The vulnerability exists as it was possible to pass a null value into strcat when parsing a GIF, causing DoS attacks...
CVE-2018-12422
addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. NOTE: the software maintainer disputes this because "the code had computed the...
CVE-2018-12422
addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. NOTE: the software maintainer disputes this because "the code had computed the...
UBUNTU-CVE-2018-12422
addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. NOTE: the software maintainer disputes this because "the code had computed the...
CVE-2018-12422: Improper Restriction of Operations within the Bounds of a Memory Buffer
addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. NOTE: the software maintainer disputes this because "the code had computed the...
PT-2017-13056
Name of the Vulnerable Software and Affected Versions ncurses version 6.0 Description The issue is related to an illegal address access in the nc safe strcat function, located in strings.c, which can lead to a remote denial of service attack. Recommendations For ncurses version 6.0, at the moment...
CVE-2017-11420
Stack-based buffer overflow in ASUSDiscovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RTAC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66UB1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200,...
CVE-2017-11420: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in ASUSDiscovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RTAC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66UB1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200,...
PT-2017-2830
Name of the Vulnerable Software and Affected Versions Asuswrt-Merlin firmware versions for ASUS devices affected versions not specified Description The issue is caused by a stack-based buffer overflow in the ASUS Discovery.c component of the Asuswrt-Merlin firmware, specifically when handling...
Stack overflow
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more...
CVE-2017-9048
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more...
CVE-2017-9048
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more...