Lucene search
K

6881 matches found

CNNVD
CNNVD
added 2021/12/01 12:0 a.m.2 views

D-Link DIR-809 缓冲区错误漏洞

D-Link DIR-809 is a dual-band router from D-Link China.D-Link DIR-809 device firmware version DIR-809AxFW1.12WWB0320190410 has a buffer overflow vulnerability, which originates from FUN8004776c of the software formVirtualApp A stack buffer overflow vulnerability exists in the function. The...

10CVSS6AI score0.02632EPSS
Exploits1References3
OSV
OSV
added 2021/12/01 12:0 a.m.26 views

ASB-A-199065614

In vorbisbookdecodevset of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

9.3CVSS8.1AI score0.00502EPSS
Exploits0References1
OSV
OSV
added 2021/11/30 12:0 a.m.11 views

OSV-2021-1634 Dynamic-stack-buffer-overflow in OutputJsonDNP3SetItem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41487 Crash type: Dynamic-stack-buffer-overflow READ 4 Crash state: OutputJsonDNP3SetItem JsonDNP3LogObjects JsonDNP3LogResponse...

7.2AI score
Exploits0References1
OSV
OSV
added 2021/11/28 12:1 a.m.10 views

OSV-2021-1631 Stack-buffer-overflow in TranslateNumber

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41437 Crash type: Stack-buffer-overflow READ 1 Crash state: TranslateNumber TranslateWord3 TranslateWord...

7.2AI score
Exploits0References1
OSV
OSV
added 2021/11/27 12:1 a.m.10 views

OSV-2021-1628 Stack-buffer-overflow in sprint_realloc_hinted_integer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41372 Crash type: Stack-buffer-overflow WRITE 1 Crash state: sprintreallochintedinteger sprintreallocinteger snprintinteger...

7.2AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.2 views

The vulnerability of the Adobe XMP-Toolkit-SDK software, related to buffer overflows in the stack, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe XMP-Toolkit-SDK software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00436EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2021/11/23 8:15 p.m.15 views

CVE-2021-36301

Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploit this vulnerability to control process execution and gain access to the underlying operating system...

7.2CVSS0.14489EPSS
Exploits0References1
CVE
CVE
added 2021/11/23 8:0 p.m.104 views

CVE-2021-36301

CVE-2021-36301 affects Dell EMC iDRAC8 and iDRAC9. The vulnerability is a Stack Buffer Overflow in Racadm that could allow an authenticated remote attacker to escalate control and execute code on the underlying OS. Affected versions are iDRAC9 < 4.40.40.00 and iDRAC8

7.2CVSS7.2AI score0.14489EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2021/11/23 8:0 p.m.15 views

CVE-2021-36301

Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploit this vulnerability to control process execution and gain access to the underlying operating system...

5.9CVSS7.3AI score0.14489EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:0 a.m.1 views

The vulnerability of the web-server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the web-server-based programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code using a specially crafted request...

10CVSS6.3AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:0 a.m.1 views

The vulnerability of the GlobalProtect portal and GlobalProtect Gateway interfaces to operating systems PAN-OS allows a intruder to execute arbitrary code.

The vulnerability of the GlobalProtect portal interface and the GlobalProtect Gateway server’s interface for the PAN-OS operating system is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.7AI score0.61335EPSS
Exploits1References3Affected Software1
CNVD
CNVD
added 2021/11/21 12:0 a.m.20 views

Lantronix PremierWave 2050 Stack Buffer Overflow Vulnerability (CNVD-2022-01604)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 is vulnerable to a stack buffer overflow vulnerability that could be exploited by attackers to cause remote code execution...

9.9CVSS6.9AI score0.04489EPSS
Exploits1References1
CNVD
CNVD
added 2021/11/21 12:0 a.m.11 views

Lantronix PremierWave 2050 Stack Buffer Overflow Vulnerability

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 has a security vulnerability that could be exploited by an attacker to execute remote code in a vulnerable portion of the branch deletedir...

9.1CVSS4.4AI score0.03567EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2021/11/19 12:0 a.m.22 views

openSUSE 15 Security Update : transfig (openSUSE-SU-2021:1481-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1481-1 advisory. - fig2dev 3.2.7b contains a stack buffer overflow in the bezierspline function in genepic.c. CVE-2020-21529 - fig2dev 3.2.7b contains a...

5.5CVSS6.5AI score0.00498EPSS
Exploits12References37
Mageia
Mageia
added 2021/11/18 9:50 p.m.39 views

Updated opensc packages fix security vulnerability

CVE-2021-42780: Fixed use after return in insertpin bsc1192005. CVE-2021-42779: Fixed use after free in scfilevalid bsc1191992. CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c bsc1192000. CVE-2021-42782: Stack buffer overflow issues in various places bsc1191957...

5.3CVSS1.3AI score0.00119EPSS
Exploits0References2
CNVD
CNVD
added 2021/11/18 12:0 a.m.18 views

GOCR Stack Buffer Overflow Vulnerability

GOCR is an open source OCR Optical Character Recognition program. A stack buffer overflow vulnerability exists in measurepitch in pgm2asc.c in GOCR 0.53-20200802 and earlier versions. No detailed vulnerability details are provided at this time...

7.8CVSS7.8AI score0.00239EPSS
Exploits1References1
CNVD
CNVD
added 2021/11/18 12:0 a.m.15 views

GOCR Stack Buffer Overflow Vulnerability (CNVD-2021-101526)

GOCR is an open source OCR Optical Character Recognition program. trytodivideboxes in pgm2asc.c in GOCR 0.53-20200802 and earlier versions is vulnerable to a stack buffer overflow. No detailed vulnerability details are currently available...

7.8CVSS4.5AI score0.00268EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/11/17 12:0 a.m.11 views

CVE-2021-33479

A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measurepitch in pgm2asc.c...

8AI score0.00239EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2021/11/17 12:0 a.m.53 views

Oracle Linux 8 : GNOME (ELSA-2021-4381)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4381 advisory. - CVE-2020-36241, CVE-2021-28650: Do not allow symlink in parents rhbz1928701 gnome-calculator - Backport fix for CVE-2020-24870 from upstream Resolves...

9.8CVSS7.3AI score0.014EPSS
Exploits8References30
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:0 a.m.1 views

The vulnerability of the Adobe XMP-Toolkit-SDK software, related to buffer overflows in the stack, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe XMP-Toolkit-SDK software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00507EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder