Lucene search
+L

13710 matches found

Prion
Prion
added 2023/08/04 6:15 p.m.35 views

Stack overflow

Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take control over devices...

7.5CVSS9.6AI score0.00844EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/08/04 12:00 a.m.61 views

CVE-2023-33375

CVE-2023-33375 affects Connected IO ER2000 edge routers (v2.1.0 and earlier). The vulnerability is a stack-based buffer overflow in the device’s communication protocol that enables an attacker to take control of the device. Documented impact is high (CVE score 9.8; Confidentiality/Integrity/Avail...

9.8CVSS9.7AI score0.00844EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/08/04 12:00 a.m.30 views

CVE-2023-33375

Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take control over devices...

9.9AI score0.00844EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/03 12:00 a.m.16 views

PT-2023-9250

Name of the Vulnerable Software and Affected Versions Actiontec WCB6200Q affected versions not specified Description The issue is related to a stack-based buffer overflow in the uh get postdata withupload function of the HTTP server in Actiontec WCB6200Q Wi-Fi range extenders. This allows a remot...

8.8CVSS8.1AI score0.01119EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2023/08/02 12:00 a.m.18 views

Moxa AWK-3131A Series Industrial AP/Bridge/Client Stack-Based Buffer Overflow (CVE-2019-5153)

An exploitable remote code execution vulnerability exists in the iwwebs configuration parsing functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An attacker can send...

9.9CVSS9.2AI score0.0438EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2023/08/02 12:00 a.m.26 views

Moxa EDR-G902 and EDR-G903 Series Routers Stack-Based Buffer Overflow (CVE-2020-14511)

Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers versions prior to 5.4. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

9.8CVSS7.8AI score0.01395EPSS
SaveExploits0References2
Oracle linux
Oracle linux
added 2023/08/02 12:00 a.m.27 views

libeconf security update

0.4.1-3 - Fix stack-based buffer overflow in readfile. Resolves: 2212467 CVE-2023-22652...

6.5CVSS7.5AI score0.00642EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2023/08/01 8:55 a.m.15 views

libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c

A flaw was found in the libeconf library. This issue occurs when parsing a specially crafted configuration file, causing a stack-based buffer overflow, resulting in a denial of service...

6.5CVSS6AI score0.00642EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2023/08/01 6:41 a.m.45 views

Security Bulletin: IBM PowerVM Novalink is vulnerable because GraphQL Java is vulnerable to a denial of service, caused by a stack-based buffer overflow. (CVE-2023-28867)

Summary IBM PowerVM Novalink is vulnerable because GraphQL Java is vulnerable to a denial of service, caused by a stack-based buffer overflow. By sending a specially crafted GraphQL query, a remote attacker could exploit this vulnerability to cause a stack consumption. Vulnerability Details...

7.5CVSS7.6AI score0.01051EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/08/01 12:00 a.m.26 views

RHEL 9 : libeconf (RHSA-2023:4347)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4347 advisory. Libeconf is a highly flexible and configurable library to parse and manage key=value configuration files. It reads configuration file snippe...

6.5CVSS7AI score0.00642EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/07/28 12:00 a.m.11 views

PT-2023-8213 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the httpd API-AUTH Digest function of the D-Link G416 router's HTTP microprogram. This can be exploited by a remote attacker to...

8.8CVSS8.2AI score0.00637EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/07/27 12:00 a.m.19 views

PT-2023-7976 · Tp Link · Tp-Link Tl-Wr902Ac

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR902AC affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR902AC routers. Authentication is required to exploit this issue...

7.2CVSS7.4AI score0.00537EPSS
SaveExploits0References7
NVD
NVD
added 2023/07/26 3:15 p.m.25 views

CVE-2023-33308

A stack-based overflow vulnerability CWE-124 in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted packets reaching proxy...

9.8CVSS9.9AI score0.02121EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/26 3:15 p.m.34 views

Stack overflow

A stack-based overflow vulnerability CWE-124 in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted packets reaching proxy...

7.5CVSS9.9AI score0.02121EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2023/07/26 2:00 p.m.14 views

CVE-2023-33308

A stack-based overflow vulnerability CWE-124 in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted packets reaching proxy...

9.8CVSS8.6AI score0.02121EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/07/26 2:00 p.m.42 views

CVE-2023-33308

A stack-based overflow vulnerability CWE-124 in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted packets reaching proxy...

9.8CVSS10AI score0.02121EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/07/26 12:00 a.m.22 views

EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2023-2442)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. CVE-2022-1725 - Buffer Over-read in GitHub repository vim/v...

9.8CVSS5.5AI score0.01643EPSS
SaveExploits29References31
Rosalinux
Rosalinux
added 2023/07/25 10:20 a.m.32 views

Advisory ROSA-SA-2023-2199

Software: aspell 0.60.6.1 OS: ROSA Virtualization 2.1 packageevrstring: aspell-0.60.6.1.1-21.rv3.1.src.rpm CVE-ID: CVE-2019-17544 BDU-ID: None CVE-Crit: CRITICAL CVE-DESC.: libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer that is reloaded in acommon::unescape in common/getdata.cpp...

9.1CVSS7.1AI score0.03259EPSS
SaveExploits0
NVD
NVD
added 2023/07/25 12:15 a.m.44 views

CVE-2023-22363

A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via assigning cardholders to an Access Group. This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 MR2...

7.5CVSS6.8AI score0.00605EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/24 11:09 p.m.50 views

CVE-2023-22363

CVE-2023-22363 describes a stack-based buffer overflow in Gallagher’s Command Centre Server . Affected versions are vEL8.80 prior to vEL8.80.1192 (MR2) . The vulnerability allows a denial of service by an attacker who assigns cardholders to an Access Group, due to a likely overflow in the server ...

7.5CVSS6.8AI score0.00605EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder