Lucene search
+L

13519 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/05/25 12:00 a.m.33 views

Adobe Character Animator EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Character Animator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS4.8AI score0.07871EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/05/22 12:00 a.m.36 views

Palo Alto Networks PAN-OS 7.1.x / 8.0.x / 8.1.x < 8.1.14 Buffer Overflow

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x, 8.0.x, or 8.1.x prior to 8.1.14. It is, therefore, affected by a stack-based buffer overflow vulnerability. - A stack-based buffer overflow vulnerability in the management server component of PAN-OS that allows an...

9CVSS8.7AI score0.01895EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/05/20 12:00 a.m.39 views

Debian DLA-2215-1 : clamav security update

The following CVEs were found in src:clamav package. CVE-2020-3327 A vulnerability in the ARJ archive parsing module in Clam AntiVirus ClamAV could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a heap buffer...

7.5CVSS8.3AI score0.05063EPSS
SaveExploits0References4
OSV
OSV
added 2020/05/19 4:15 p.m.26 views

CVE-2020-10030

An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker with enough privileges to change the system's hostname to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. It only occurs on systems where gethostname does not...

8.8CVSS7.9AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2020/05/19 3:52 p.m.101 views

CVE-2020-10030

An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker with enough privileges to change the system's hostname to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. It only occurs on systems where gethostname does not...

8.8CVSS9.2AI score0.23889EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2020/05/19 3:52 p.m.72 views

CVE-2020-10030

An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker with enough privileges to change the system's hostname to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. It only occurs on systems where gethostname does not...

8.8CVSS9.2AI score0.23889EPSS
SaveExploits0
NVD
NVD
added 2020/05/16 2:15 a.m.25 views

CVE-2020-13109

Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the built-in modem because 0x800b3e94 aka the IF subcommand to top-level command 7 has a stack-based buffer overflow...

9.8CVSS10AI score0.04757EPSS
SaveExploits1References2
Prion
Prion
added 2020/05/16 2:15 a.m.24 views

Stack overflow

Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the built-in modem because 0x800b3e94 aka the IF subcommand to top-level command 7 has a stack-based buffer overflow...

7.5CVSS9.9AI score0.04757EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/05/16 1:56 a.m.29 views

CVE-2020-13109

Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the built-in modem because 0x800b3e94 aka the IF subcommand to top-level command 7 has a stack-based buffer overflow...

9.8CVSS10AI score0.04757EPSS
SaveExploits1References2
CVE
CVE
added 2020/05/16 1:56 a.m.130 views

CVE-2020-13109

Morita Shogi 64 (Nintendo 64)

9.8CVSS9.9AI score0.04757EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2020/05/13 7:15 p.m.21 views

CVE-2020-2006

A stack-based buffer overflow vulnerability in the management server component of PAN-OS that allows an authenticated user to potentially execute arbitrary code with root privileges. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14...

9CVSS8.2AI score0.01895EPSS
SaveExploits0References1
NVD
NVD
added 2020/05/13 3:15 p.m.24 views

CVE-2020-12763

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd in /sbin when parsing a long "Authorization: Basic" RTSP...

9.8CVSS9.8AI score0.03357EPSS
SaveExploits1References1
Prion
Prion
added 2020/05/13 3:15 p.m.29 views

Stack overflow

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd in /sbin when parsing a long "Authorization: Basic" RTSP...

7.5CVSS9.7AI score0.03357EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/05/13 12:00 a.m.59 views

IBM Spectrum Protect 7.1.x < 7.1.10.100 / 8.1.x < 8.1.9.300 Stack-based Buffer Overflow

IBM Spectrum Protect, formerly known as Tivoli Storage Manager, running on the remote host is version 7.1.x 7.1.10.100 or 8.1.x 8.1.9.300. It is, therefore, is vulnerable to a stack-based buffer overflow which could allow an unauthenticated, remote attacker to executive arbitrary code on the syst...

10CVSS9AI score0.08052EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2020/05/12 12:00 a.m.31 views

Microsoft Windows Media Player HEVC Stream Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.7AI score0.03784EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/05/10 11:22 p.m.29 views

Arbitrary Code Execution

openjpeg is vulnerable to arbitrary code execution. A stack-based buffer overflow in the pgxtoimage function in bin/jp2/convert.c allows an attacker to execute arbitrary code on the system or crash the application...

8.8CVSS4.9AI score0.05652EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
added 2020/05/10 11:21 p.m.27 views

Arbitrary Code Execution

wavpack is vulnerable to arbitrary code execution. A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c allows a remote attacker to execute arbitrary code on the system via a malicious RF64 file...

7.8CVSS8.6AI score0.05266EPSS
SaveExploits1References7Affected Software1
Veracode
Veracode
added 2020/05/10 11:21 p.m.35 views

Arbitrary Code Execution

faad2 is vulnerable to arbitrary code execution. The vulnerability exists as there is a stack-based buffer overflow in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. A crafted input will lead to a denial of service or...

7.8CVSS5.5AI score0.01281EPSS
SaveExploits1References4Affected Software1
Prion
Prion
added 2020/05/08 12:15 p.m.18 views

Stack overflow

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple stack-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution...

7.5CVSS9.9AI score0.09076EPSS
SaveExploits0References10Affected Software1
CVE
CVE
added 2020/05/08 11:50 a.m.71 views

CVE-2020-12002

CVE-2020-12002 affects Advantech WebAccess Node (versions 8.4.4 and prior, 9.0.0). The issue is described as multiple stack-based buffer overflow vulnerabilities caused by insufficient validation of the length of user-supplied data, which may allow remote code execution. Connected documents (ZDI ...

9.8CVSS9.9AI score0.09076EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder