Lucene search
K

13311 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2024/11/14 4:44 p.m.11 views

Security Bulletin: IBM B2B Sterling Integrator is affected by Hutool's denial of service

Summary IBM B2B Sterling Integrator is affected by Hutool's denial of service Vulnerability Details CVEID:CVE-2022-45688 DESCRIPTION: Hutool is vulnerable to a denial of service, caused by stack-based buffer overflow. By persuading a specially crafted request, a remote attacker could exploit this...

7.5CVSS6.8AI score0.01181EPSS
Exploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/14 4:36 p.m.22 views

Security Bulletin: IBM B2B Sterling Integrator is affected by Fasterxml jackson-databind vulnerability to denial of service

Summary IBM B2B Sterling Integrator is affected by Fasterxml jackson-databind vulnerability to denial of service Vulnerability Details CVEID:CVE-2023-35116 DESCRIPTION: Fasterxml jackson-databind is vulnerable to a denial of service, caused by a stack-based overflow. By persuading a victim to ope...

4.7CVSS6.5AI score0.00352EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.4 views

PT-2024-29308

Name of the Vulnerable Software and Affected Versions: tsMuxer version nightly-2024-03-14-01-51-12 Description: A stack-based buffer over-read in tsMuxer allows attackers to cause Information Disclosure via a crafted TS video file. Recommendations: For tsMuxer version nightly-2024-03-14-01-51-12,...

6.5CVSS6.2AI score0.0041EPSS
Exploits1References8
CVE
CVE
added 2024/11/14 12:0 a.m.67 views

CVE-2024-41206

CVE-2024-41206 describes a stack-based buffer over-read in tsMuxer (nightly-2024-03-14-01-51-12) that can cause information disclosure when processing a crafted TS video file. Affected component is the tsMuxer code path handling transport streams; root cause is a buffer over-read, as stated in mu...

6.5CVSS6.8AI score0.0041EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2024/11/12 4:15 p.m.20 views

CVE-2024-47909

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service...

4.9CVSS0.01051EPSS
Exploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.7 views

CVE-2024-47905

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service...

4.9CVSS0.01051EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/12 4:2 p.m.24 views

CVE-2024-47909

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service...

4.9CVSS0.01051EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/12 4:2 p.m.16 views

CVE-2024-47909

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service...

4.9CVSS7AI score0.01051EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/12 4:0 p.m.25 views

CVE-2024-47907

A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

7.5CVSS0.01495EPSS
Exploits0References1
CVE
CVE
added 2024/11/12 4:0 p.m.73 views

CVE-2024-47907

CVE-2024-47907 describes a stack-based buffer overflow in the IPsec component of Ivanti Connect Secure, before version 22.7R2.3, allowing a remote unauthenticated attacker to cause a denial of service. Affected product: Ivanti Connect Secure (ICS). Connected sources consistently confirm the issue...

7.5CVSS7.7AI score0.01495EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/11/12 3:56 p.m.65 views

CVE-2024-47905

CVE-2024-47905 describes a stack-based buffer overflow in Ivanti Connect Secure prior to 22.7R2.3 and Ivanti Policy Secure prior to 22.7R1.2. The vulnerability allows a remote authenticated attacker with admin privileges to cause a denial of service. Public sources confirm affected products and f...

4.9CVSS5.3AI score0.01051EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/12 3:56 p.m.12 views

CVE-2024-47905

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service...

4.9CVSS0.01051EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.3 views

Ivanti Connect Secure 安全漏洞

Ivanti Connect Secure is a secure remote network connection tool from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Connect Secure that stems from the inclusion of a stack-based buffer overflow vulnerability...

4.9CVSS8.8AI score0.01051EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.4 views

Ivanti Connect Secure 安全漏洞

Ivanti Connect Secure is a secure remote network connection tool from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Connect Secure that stems from the inclusion of a stack-based buffer overflow vulnerability...

4.9CVSS8.8AI score0.01051EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/11/12 12:0 a.m.7 views

(0Day) Trimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.9AI score0.0034EPSS
Exploits0
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.4 views

Ivanti Connect Secure 安全漏洞

Ivanti Connect Secure is a secure remote network connection tool from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Connect Secure that stems from the inclusion of a stack-based buffer overflow vulnerability...

7.5CVSS8.8AI score0.01495EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.7 views

PT-2024-24120 · Fortinet · Fortimanager +2

Name of the Vulnerable Software and Affected Versions: FortiManager versions 7.4.0 through 7.4.2 and before 7.2.5 FortiAnalyzer versions 7.4.0 through 7.4.2 and before 7.2.5 FortiAnalyzer-BigData versions 7.4.0 and before 7.2.7 Description: A stack-based buffer overflow issue allows a privileged...

6.8CVSS8.2AI score0.00229EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.3 views

Fortinet FortiManager和FortiAnalyzer 安全漏洞

Fortinet FortiManager and Fortinet FortiAnalyzer are both products of Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains AD...

6.7CVSS7.1AI score0.00229EPSS
Exploits0References2
NVD
NVD
added 2024/11/11 3:15 p.m.12 views

CVE-2024-39354

If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code...

8.4CVSS0.00298EPSS
Exploits0References2
CVE
CVE
added 2024/11/11 2:57 p.m.56 views

CVE-2024-39605

CVE-2024-39605 affects Delta Electronics DIAScreen with a stack-based buffer overflow in the BACnetParameter (and BACnetObjectInfo per ICS advisory) parsing path when a user opens a crafted file, enabling remote code execution after successful user interaction. Documents describe affected compone...

8.4CVSS8AI score0.02878EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder