Advantech WebAccess/SCADA BwBacNetJ Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the BwBacNetJ driver. The issue results from the lack of proper validation of...

Advantech WebAccess IOCTL 0x2711 bwscrp Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwscrp.exe when invoked via IOCTL 0x2711. The issue results from the lack of proper...

Trading Technologies X_TRADER disconnect_proxy_site Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trading Technologies XTRADER. Authentication is not required to exploit this vulnerability. The specific flaw exists within the messaging daemon. The issue results from the lack of proper validation ...

Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104...

CVE-2017-18865

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104...

CVE-2017-18865

CVE-2017-18865 affects NETGEAR R8300 and R8500 routers with firmware versions before 1.0.2.104. The issue is a stack-based buffer overflow caused by an authenticated user, with potential for memory corruption. Public documents consistently describe the affected devices and the firmware boundary; ...

Updated gnuchess packages fix security vulnerability

Updated gnuchess package fixes security vulnerability: A vulnerability was found in GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmdload function in frontend/cmd.cc via a crafted chess position in an EPD file CVE-2019-15767...

libsndfile security update

1.0.28-10 - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function i2alawarray in alaw 1673085 1.0.28-9 - fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility 1598482...

EulerOS Virtualization for ARM 64 3.0.2.0 : sudo (EulerOS-SA-2020-1564)

According to the versions of the sudo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used ...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2020-1564)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-5621

ABBS Software Audio Media Player version 3.1 suffers from an instance of CWE-121: Stack-based Buffer Overflow...

CVE-2019-5618

A-PDF WAV to MP3 version 1.0.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow...

CVE-2019-5619

AASync.com AASync version 2.2.1.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow...

CVE-2019-5621 ABBS Software Audio Media Player Stack-based Buffer Overflow

ABBS Software Audio Media Player version 3.1 suffers from an instance of CWE-121: Stack-based Buffer Overflow...

CVE-2019-5621

ABBS Software Audio Media Player 3.1 is affected by CVE-2019-5621 due to a stack-based buffer overflow (CWE-121). Connected sources confirm the vulnerability in the product/version and describe memory boundary handling as the root cause, with potential as an overflow in read/write operations. The...

CVE-2019-5619 AASync.com AASync Stack-based Buffer Overflow

AASync.com AASync version 2.2.1.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow...

CVE-2019-5618

The CVE-2019-5618 entry concerns A-PDF WAV to MP3 version 1.0.0. Multiple connected sources confirm a CWE-121 stack-based buffer overflow vulnerability arising from memory operations without proper data boundary validation on this product. Affected component: the WAV->MP3 conversion tool (vers...

Buffer Overflows

liblouis.so is vulnerable to buffer overflows. It does not allocate the size of pattern parameter in the function includeFile in compileTranslationTable.c, resulting in a stack-based buffer overflows when an input bigger than the allocated size is provided by the user...

Privilege Escalation

LibRaw is vulnerable to privilege escalation. The vulnerability exists through a stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp...

RHEL 8 : GNOME (RHSA-2020:1766)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1766 advisory. GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fixes: LibRaw: stack-based buffer overflow in the...