Lucene search
K

6900 matches found

Prion
Prion
added 2023/02/06 10:15 p.m.13 views

Stack overflow

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

7.5CVSS8.9AI score0.01277EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2023/02/06 12:0 a.m.59 views

CVE-2021-31578

CVE-2021-31578 affects Boa and involves a stack buffer overflow. The consequence is remote escalation of privilege from a nearby attacker with no required privileges and no user interaction. The issue is attributed to Boa’s handling of stack buffers, enabling a proximal attacker to elevate privil...

9.8CVSS9AI score0.01277EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/02/06 12:0 a.m.14 views

CVE-2021-31578

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

9.3AI score0.01277EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/02/06 12:0 a.m.20 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : EditorConfig Core C vulnerability (USN-5842-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5842-1 advisory. Mark Esler and David Fernandez Gonzalez discovered that EditorConfig Core C incorrectly handled memory when handling certain...

7.8CVSS7.8AI score0.00965EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2023/02/06 12:0 a.m.4 views

The vulnerability of the microprogrammed software of D-Link DAP-2020 and DAP-1360 allows a intruder to execute arbitrary code.

The vulnerability of D-Link DAP-2020 and DAP-1360 wireless access points’ microprogramming software is related to buffer overflow attacks on the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

8.8CVSS6.3AI score
Exploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2023/02/02 12:0 a.m.5 views

PT-2023-1547 · Delta Electronics · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics DOPSoft versions 4.00.16.22 and prior Description: The issue is caused by a stack-based buffer overflow. This could allow an attacker to execute arbitrary code remotely when a specially crafted file is introduced to the...

7.8CVSS8.1AI score0.00245EPSS
Exploits0References10
Cvelist
Cvelist
added 2023/02/01 5:19 a.m.32 views

CVE-2022-34403

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM...

7.5CVSS9.1AI score0.00166EPSS
Exploits0References1
NVD
NVD
added 2023/02/01 12:15 a.m.24 views

CVE-2023-0341

A stack buffer overflow exists in the ecglob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over th...

7.8CVSS8.1AI score0.00965EPSS
Exploits1References5
Prion
Prion
added 2023/02/01 12:15 a.m.11 views

Stack overflow

A stack buffer overflow exists in the ecglob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over th...

4.4CVSS8.1AI score0.00965EPSS
Exploits1References4Affected Software1
AlpineLinux
AlpineLinux
added 2023/02/01 12:15 a.m.23 views

CVE-2023-0341

A stack buffer overflow exists in the ecglob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over th...

7.8CVSS8.2AI score0.00965EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2023/01/31 11:22 p.m.3 views

CVE-2023-0341 Stack Buffer Overflow in editorconfig-core-c

A stack buffer overflow exists in the ecglob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over th...

7.8CVSS8.1AI score0.00965EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/01/31 11:22 p.m.24 views

CVE-2023-0341 Stack Buffer Overflow in editorconfig-core-c

A stack buffer overflow exists in the ecglob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over th...

7.8CVSS8.2AI score0.00965EPSS
Exploits1References4
CVE
CVE
added 2023/01/31 11:22 p.m.81 views

CVE-2023-0341

CVE-2023-0341 affects editorconfig-core-c prior to 0.12.6, where a stack buffer overflow in the ec_glob function could allow an attacker to arbitrarily write to the stack and possibly achieve remote code execution. The vulnerability is mitigated in version 0.12.6 by bound checking all write opera...

7.8CVSS8AI score0.00965EPSS
Exploits1References5Affected Software1
Debian CVE
Debian CVE
added 2023/01/31 11:22 p.m.28 views

CVE-2023-0341

A stack buffer overflow exists in the ecglob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over th...

7.8CVSS8.1AI score0.00965EPSS
Exploits1
OSV
OSV
added 2023/01/31 4:15 p.m.24 views

CVE-2022-28331

On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in aprsocketsendv. This is a result of integer overflow...

9.8CVSS3.6AI score
Exploits0References1
OSV
OSV
added 2023/01/31 4:15 p.m.2 views

ALPINE-CVE-2022-28331

On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in aprsocketsendv. This is a result of integer overflow...

9.8CVSS7.2AI score0.01575EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2023/01/31 4:15 p.m.42 views

CVE-2022-28331

On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in aprsocketsendv. This is a result of integer overflow...

9.8CVSS7.4AI score0.01575EPSS
Exploits0References2
CVE
CVE
added 2023/01/31 3:55 p.m.132 views

CVE-2022-28331

CVE-2022-28331 affects Apache Portable Runtime (APR) 1.7.0 and earlier on Windows, with a write beyond the end of a stack-based buffer in apr_socket_sendv() caused by integer overflow. The vulnerability can lead to arbitrary code execution or a crash and has a CVSS v3.1 base score of 9.8 (CRITICA...

9.8CVSS9.5AI score0.01575EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2023/01/31 3:55 p.m.19 views

CVE-2022-28331

On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in aprsocketsendv. This is a result of integer overflow...

9.8CVSS8.8AI score0.01575EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/01/31 12:0 a.m.4 views

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to elevate their privileges to the root level.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system arises due to an overflow in the buffer on the stack. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level by using a malicious printer...

7.8CVSS7.5AI score0.00313EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder