Lucene search
K

5921 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2018-14633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI...

8.3CVSS7.5AI score0.08743EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-21533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fig2dev 3.2.7b contains a stack buffer overflow in the readtextobject function in read.c. CVE-2020-21533 Note that Nessus relies on the presence of the package ...

5.5CVSS6.7AI score0.00838EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2021-20294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffe...

7.8CVSS7AI score0.03412EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2020-27749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents...

7.2CVSS7AI score0.00573EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2017-15046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpackreadsamples in frontend/getaudio.c, a different vulnerability tha...

5.5CVSS7.5AI score0.03966EPSS
Exploits4References3
OpenVAS
OpenVAS
added 2025/03/03 12:0 a.m.8 views

openSUSE Security Advisory (SUSE-SU-2025:0754-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.5AI score0.0028EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/01 12:0 a.m.14 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wireshark (SUSE-SU-2025:0754-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0754-1 advisory. Update to version 4.2.11: - CVE-2025-1492: uncontrolled recursion leading to a stack buffer overflow can...

7.8CVSS6AI score0.0028EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/02/27 10:24 p.m.5 views

CVE-2024-53427

A flaw was discovered in the jq package. In affected versions, specially-crafted input may trigger an unsafe memory operation leading to a stack buffer overflow. This can cause an application crash or other unintended behavior...

5.3CVSS6.8AI score0.00352EPSS
Exploits1References4
OSV
OSV
added 2025/02/27 12:7 a.m.3 views

OSV-2025-169 Stack-buffer-overflow in utf8_in2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399228595 Crash type: Stack-buffer-overflow READ 1 Crash state: utf8in2 MatchRule TranslateRules...

7.2AI score
Exploits0References1
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.3 views

DrayTek Vigor 165 安全漏洞

The DrayTek Vigor 165 is a VDSL2 35b super vector modem/router from DrayTek China. A security vulnerability exists in the DrayTek Vigor 165 that originates from a stack buffer overflow in the URL parsing function, which allows remote attackers to execute arbitrary code...

9.8CVSS9.6AI score0.01137EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/02/27 12:0 a.m.32 views

CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-24928)

The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-24928 advisory. - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in...

7.8CVSS6.8AI score0.00375EPSS
Exploits0References2
OSV
OSV
added 2025/02/26 4:15 p.m.9 views

CVE-2024-53427

decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form ...

8.1CVSS8.2AI score
Exploits0References5
Cvelist
Cvelist
added 2025/02/26 12:0 a.m.14 views

CVE-2024-53427

decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form ...

8.1CVSS0.00352EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2025/02/26 12:0 a.m.79 views

CVE-2024-53427

decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form ...

8.1CVSS6AI score0.00352EPSS
Exploits1
CVE
CVE
added 2025/02/26 12:0 a.m.301 views

CVE-2024-53427

The CVE-2024-53427 issue in jq (through 1.7.1) arises from decNumberCopy in decNumber.c misinterpreting NaN as numeric, leading to a stack-based buffer overflow and out-of-bounds write. Demonstrated by using --slurp with subtraction on certain digit strings containing NaN (e.g., "1 NaN123" follow...

8.1CVSS6.8AI score0.00352EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/26 12:0 a.m.3 views

PT-2025-8729

Name of the Vulnerable Software and Affected Versions jq version 1.7.1 Description The issue is related to a stack-buffer-overflow in the decNumberCopy function within decNumber.c. Recommendations For jq version 1.7.1, at the moment, there is no information about a newer version that contains a f...

8.7CVSS5.6AI score0.00443EPSS
Exploits3References40
BDU FSTEC
BDU FSTEC
added 2025/02/26 12:0 a.m.3 views

The vulnerability of the delFacebookPic() function in the Tenda W18E router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the delFacebookPic function in the Tenda W18E router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

8CVSS6.4AI score0.00807EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/02/26 12:0 a.m.5 views

Amazon Linux 2023 : zziplib, zziplib-devel, zziplib-utils (ALAS2023-2025-859)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-859 advisory. Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the zzipparserootdirectory function at /zzip/zip.c. CVE-2024-39133 A Stack Buffer Overfl...

7.5CVSS6.1AI score0.00604EPSS
Exploits2References6
Amazon
Amazon
added 2025/02/21 12:0 a.m.6 views

Medium: zziplib

Issue Overview: Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the zzipparserootdirectory function at /zzip/zip.c. CVE-2024-39133 A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via t...

7.5CVSS6.7AI score0.00604EPSS
Exploits2
CNNVD
CNNVD
added 2025/02/21 12:0 a.m.2 views

D-Link DAP-1320 安全漏洞

The D-Link DAP-1320 is a wireless signal extender from China-based AUO D-Link. The D-Link DAP-1320 suffers from a stack buffer overflow vulnerability that originates from the function replacespecialchar in file /storagein.pd-XXXXXX.An attacker can exploit this vulnerability to cause a program cra...

9.8CVSS8.1AI score0.0144EPSS
Exploits0References7
Rows per page
Query Builder