Lucene search
K

6899 matches found

OSV
OSV
added 2025/01/27 12:10 a.m.6 views

OSV-2025-63 Stack-buffer-underflow in gs_type1_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391934080 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype1interpret copiedtype1glyphoutline gsdefaultglyphinfo...

7.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/27 12:0 a.m.3 views

PT-2025-5664 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read error. Technical details include a crash type of Stack-buffer-underflow READ 4, with the crash stat...

6.8AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.4 views

Vulnerability of microprogrammed software in PLANET Technology switches, related to buffer overflow in the stack, allowing a hacker to execute arbitrary code.

The vulnerability of PLANET Technology’s microprogrammed switching software is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted HTTP request...

10CVSS8.9AI score0.01368EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2025/01/24 12:0 a.m.5 views

SunGrow WiNet-S 安全漏洞

SunGrow WiNet-S is a LAN communication module from SunGrow, China. A stack buffer overflow vulnerability exists in SunGrow WiNet-S stored messages. The vulnerability stems from the base code not checking the bounds of the buffer used to store messages when replicating timestamped reads of MQTT...

9.8CVSS7.9AI score0.00549EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/24 12:0 a.m.5 views

SunGrow WiNet-S 安全漏洞

SunGrow WiNet-S is a LAN communication module from SunGrow, China. The SunGrow WiNet-S suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service...

9.8CVSS8.1AI score0.00549EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.2 views

The vulnerability of the S1AP protocol implementation in the NextEPC module allows a violator to enhance their privileges.

The vulnerability of the S1AP protocol implementation in the NextEPC module is related to the execution of operations outside the stack buffer. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending a specially crafted NAS message...

10CVSS5.7AI score0.00381EPSS
Exploits0References3Affected Software1
GithubExploit
GithubExploit
added 2025/01/22 8:14 a.m.268 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

PoC for CVE-2025-0282 Remote Unauthenticated Stack Buffer O...

9CVSS7AI score0.99971EPSS
Exploits13
GithubExploit
GithubExploit
added 2025/01/22 8:14 a.m.440 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

PoC for CVE-2025-0282 Remote Unauthenticated Stack Buffer O...

9CVSS7AI score0.99971EPSS
Exploits13
Cvelist
Cvelist
added 2025/01/21 12:0 a.m.8 views

CVE-2023-37032

A Stack-based buffer overflow in the Mobile Management Entity MME of Magma versions = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an oversized Emergency Number Lis...

0.00714EPSS
Exploits1References1
OSV
OSV
added 2025/01/20 9:59 a.m.11 views

OPENSUSE-SU-2025:0018-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 132.0.6834.83 stable released 2024-01-14 boo1235892 CVE-2025-0434: Out of bounds memory access in V8 CVE-2025-0435: Inappropriate implementation in Navigation CVE-2025-0436: Integer overflow in Skia CVE-2025-0437: Out of bounds read ...

8.8CVSS9.1AI score0.05892EPSS
Exploits11References15
CNVD
CNVD
added 2025/01/17 12:0 a.m.7 views

Adobe Substance 3D Stager Stack Buffer Overflow Vulnerability

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.00259EPSS
Exploits0References1
NVD
NVD
added 2025/01/15 11:15 a.m.11 views

CVE-2025-0438

Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00453EPSS
Exploits0References2
OSV
OSV
added 2025/01/15 11:15 a.m.17 views

CVE-2025-0438

Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7AI score
Exploits0References2
Cvelist
Cvelist
added 2025/01/15 10:58 a.m.13 views

CVE-2025-0438

Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. Chromium security severity: High...

0.00453EPSS
Exploits0References2
CVE
CVE
added 2025/01/15 10:58 a.m.350 views

CVE-2025-0438

CVE-2025-0438 corresponds to a stack buffer overflow in Chrome/Chromium tracing code that could enable remote exploitation via a crafted HTML page. Affected software is Google Chrome (Chromium-based); impact is high per sources. Remediation across provided documents includes updating to Chromium/...

8.8CVSS7.3AI score0.00453EPSS
Exploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2025/01/15 10:58 a.m.5 views

CVE-2025-0438

Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7AI score0.00453EPSS
Exploits0
NVD
NVD
added 2025/01/14 3:15 p.m.4 views

CVE-2024-39603

A stack-based buffer overflow vulnerability exists in the wireless.cgi setwifibasicmesh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9.1CVSS0.02362EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/01/14 2:21 p.m.5 views

CVE-2024-39757

A stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9.1CVSS7.5AI score0.02362EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/01/14 2:21 p.m.12 views

CVE-2024-36258

A stack-based buffer overflow vulnerability exists in the touchlistsync.cgi touchlistsync functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability...

10CVSS0.12339EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.8 views

PT-2025-1268 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Description: The issue is related to a stack buffer overflow in the Tracing component of Google Chrome, which could allow a remote attacker to exploit stack corruption via a crafted HTML page. Thi...

10CVSS8.6AI score0.19272EPSS
Exploits26References266
Rows per page
Query Builder