Lucene search
+L

23611 matches found

Zero Day Initiative
Zero Day Initiative
•added 2024/01/11 12:00 a.m.•41 views

D-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.4AI score0.01126EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/01/11 12:00 a.m.•28 views

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService. The issue results from the lack of proper validation of the...

9.8CVSS9AI score0.06782EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/01/11 12:00 a.m.•32 views

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService. The issue results from the lack of proper validation of the...

9.8CVSS9AI score0.11337EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/01/11 12:00 a.m.•48 views

D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.4AI score0.01136EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/01/11 12:00 a.m.•41 views

D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.4AI score0.01126EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/01/11 12:00 a.m.•27 views

PT-2024-1093 · D Link · Dcs-8300Lhv2

Name of the Vulnerable Software and Affected Versions: D-Link DCS-8300LHV2 affected versions not specified Description: The issue is related to a stack-based buffer overflow vulnerability in the handling of the SetHostName ONVIF call. This vulnerability allows network-adjacent attackers to execut...

8CVSS8.2AI score0.01155EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
•added 2024/01/11 12:00 a.m.•33 views

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService. The issue results from the lack of proper validation of the...

9.8CVSS9AI score0.11337EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/01/11 12:00 a.m.•24 views

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService. The issue results from the lack of proper validation of the...

9.8CVSS9AI score0.06782EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/01/11 12:00 a.m.•39 views

D-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.4AI score0.01126EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•8 views

CVE-2023-48262: Stack-based Buffer Overflow

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service DoS attack or, possibly, obtain Remote Code Execution RCE via a crafted network request...

9.8CVSS8.5AI score0.00763EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•6 views

CVE-2023-48266: Stack-based Buffer Overflow

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service DoS attack or, possibly, obtain Remote Code Execution RCE via a crafted network request...

9.8CVSS8.5AI score0.00763EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•11 views

CVE-2023-48265: Stack-based Buffer Overflow

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service DoS attack or, possibly, obtain Remote Code Execution RCE via a crafted network request...

9.8CVSS8.5AI score0.00763EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•14 views

CVE-2023-48264: Stack-based Buffer Overflow

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service DoS attack or, possibly, obtain Remote Code Execution RCE via a crafted network request...

9.8CVSS8.5AI score0.00763EPSS
SaveExploits0References3
NVD
NVD
•added 2024/01/09 11:15 p.m.•39 views

CVE-2023-37293

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

9.6CVSS9.5AI score0.00308EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/01/09 11:15 p.m.•28 views

CVE-2023-37293

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

8.8CVSS8.5AI score0.00308EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/09 11:15 p.m.•33 views

Stack overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

5.8CVSS7.5AI score0.00308EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2024/01/09 11:15 p.m.•37 views

Stack overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

5.8CVSS7.6AI score0.00308EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/09 10:18 p.m.•12 views

CVE-2023-37293 stack-based buffer overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

9.6CVSS8.5AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/01/09 10:18 p.m.•42 views

CVE-2023-37293 stack-based buffer overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

9.6CVSS9.6AI score0.00308EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/09 10:15 p.m.•91 views

CVE-2023-3043

CVE-2023-3043 affects AMI MegaRAC SPx BMC, where a stack-based buffer overflow can be triggered over an adjacent network. The vulnerability in the SPx firmware could lead to confidentiality, integrity, and availability losses. Reported CVSS vectors indicate high to critical impact (CVSS v3.1: AV:...

9.6CVSS8.6AI score0.00308EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder