Lucene search
K

5922 matches found

FreeBSD
FreeBSD
added 2024/12/03 12:0 a.m.15 views

gstreamer1-plugins-vorbis -- Stack buffer-overflow in Vorbis decoder

The GStreamer Security Center reports: Stack buffer-overflow in Vorbis decoder that can cause crashes for certain input files...

9.8CVSS6.9AI score0.01237EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 9:23 p.m.10 views

CVE-2018-9418

In handleappcurvalresponse of dtifrc.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

7.2AI score0.00255EPSS
Exploits0References1
OSV
OSV
added 2024/11/28 12:15 a.m.2 views

CVE-2024-11789

Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerabili...

7.8CVSS6.3AI score0.00268EPSS
Exploits0References1
OSV
OSV
added 2024/11/27 12:15 p.m.11 views

CVE-2024-36468

The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session-securityEngineID to localrecord.engineid without proper bounds checking...

8.2CVSS7.1AI score
Exploits0References1
NVD
NVD
added 2024/11/27 12:15 p.m.13 views

CVE-2024-36468

The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session-securityEngineID to localrecord.engineid without proper bounds checking...

8.2CVSS0.005EPSS
Exploits0References1
OSV
OSV
added 2024/11/27 12:15 p.m.3 views

DEBIAN-CVE-2024-36468

The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session-securityEngineID to localrecord.engineid without proper bounds checking...

8.2CVSS5AI score0.005EPSS
Exploits0References1
CVE
CVE
added 2024/11/27 12:3 p.m.113 views

CVE-2024-36468

CVE-2024-36468 describes a stack buffer overflow in the Zabbix server/proxy code, specifically in the function zbx_snmp_cache_handle_engineid . The issue arises when copying data from session->securityEngineID to local_record.engineid without proper bounds checking, enabling an out-of-bounds w...

8.2CVSS7.6AI score0.005EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/27 12:3 p.m.13 views

CVE-2024-36468 Stack buffer overflow in zbx_snmp_cache_handle_engineid

The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session-securityEngineID to localrecord.engineid without proper bounds checking...

3CVSS7.6AI score0.005EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/27 12:0 a.m.0 views

Fuji Electric Monitouch V-SFT 安全漏洞

Fuji Electric Monitouch V-SFT is a configuration software for Human Machine Interfaces HMI provided by Fuji Electric. A stack buffer overflow vulnerability exists in Fuji Electric Monitouch V-SFT V10 file parsing, which originates from not properly validating the length of user-supplied data befo...

7.8CVSS7.6AI score0.00288EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/27 12:0 a.m.2 views

Fuji Electric Monitouch V-SFT 安全漏洞

Fuji Electric Monitouch V-SFT is a configuration software for Human Machine Interfaces HMI from Fuji Electric. It supports a variety of features including customizable home screen, PDF document viewer, video player, alarm messages, 10 pop-up windows, and more. A stack buffer overflow vulnerabilit...

7.8CVSS7.6AI score0.00268EPSS
Exploits0References1
NVD
NVD
added 2024/11/26 8:15 a.m.12 views

CVE-2024-28038

The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. More precisely, giving too long character string to MFPSESSIONID parameter results in a stack buffer overflow. As for the details of affected product names, model numbers, and...

9CVSS0.0263EPSS
Exploits1References7
Cvelist
Cvelist
added 2024/11/26 7:37 a.m.29 views

CVE-2024-28038

The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. More precisely, giving too long character string to MFPSESSIONID parameter results in a stack buffer overflow. As for the details of affected product names, model numbers, and...

9CVSS0.0263EPSS
Exploits1References6
OSV
OSV
added 2024/11/25 2:15 p.m.10 views

CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS7AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/25 1:8 p.m.19 views

CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

6.9CVSS7.3AI score0.00607EPSS
Exploits0References1
CVE
CVE
added 2024/11/25 1:8 p.m.84 views

CVE-2024-11498

CVE-2024-11498 affects the libjxl (JPEG XL) library. A crafted file can trigger a stack-based overflow, causing the decoder to allocate large stack space (up to 256–512 MB) and potentially exhaust stack memory, leading to denial of service. Multiple advisories and deployable updates reference thi...

7.5CVSS6.9AI score0.00607EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2024/11/25 1:8 p.m.12 views

CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS6.6AI score0.00607EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.6 views

The vulnerability in the l2tp.cgi script of NETGEAR R7000P router software allows a hacker to induce a service failure.

The vulnerability of the l2tp.cgi script in the NETGEAR R7000P router’s microprogramming system is related to buffer overflows in the stack when processing the l2tpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted...

5.7CVSS5.8AI score0.00292EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.5 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.2AI score0.00361EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.2 views

Trimble SketchUp 安全漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a security vulnerability that stems from a stack-based buffer overflow issue contained in SKP file parsing. An...

7.8CVSS8.1AI score0.0034EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.3 views

IrfanView 安全漏洞

IrfanView is an image viewer. It supports image browsing, image editing, image format conversion and so on. A buffer overflow remote code execution vulnerability exists in the IrfanView WBZ plugin WB1 Stack File Parsing, which is caused by failing to properly validate the length of user-supplied...

7.8CVSS8.4AI score0.00354EPSS
Exploits0References1
Rows per page
Query Builder