Oracle Linux 8 : curl (ELSA-2019-3701)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3701 advisory. - fix SMTP end-of-response out-of-bounds read CVE-2019-3823 - fix NTLMv2 type-3 header stack buffer overflow CVE-2019-3822 - fix NTLM type-2...

Security Bulletin: Jettison component is vulnerable to CVE-2022-45685 and CVE-2022-45693 is used by IBM Maximo Application Suite

Summary IBM Maximo Application Suite uses Jettison package which is vulnerable to CVE-2022-45685 and CVE-2022-45693. Vulnerability Details CVEID:CVE-2022-45685 DESCRIPTION: Jettison is vulnerable to a denial of service, caused by a stack-based buffer overflow. By sending an overly long string usi...

PT-2023-4967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack-based out-of-bounds write flaw was found in the netfilter subsystem of the Linux kernel. The nft exthdr eval family of functions writes 4 NULL bytes past the end of the regs...

CVE-2023-20250: Stack-based Buffer Overflow

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...

PT-2024-14667

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 4.1 cycle and all versions after 4.1 cycle before the fix Description The issue is related to a stack-based buffer overflow in the netfilter component of the Linux kernel. If priv-len is a multiple of 4, then...

Debian DSA-5489-1 : file - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5489 advisory. - File before 5.43 has an stack-based buffer over-read in filecopystr in funcs.c. NOTE: File is the name of an Open Source project. CVE-2022-48554 Note that Nessus has not...

Hitachi Energy RTU500 series Stack-Based Buffer Overflow (CVE-2022-2502)

A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-5 and the CMU contains the license feature Advanced security' which must b...

CVE-2023-28538 Stack-based Buffer Overflow in WIN Product

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region...

CVE-2023-28538 Stack-based Buffer Overflow in WIN Product

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region...

CVE-2023-28538: Stack-based Buffer Overflow

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region...

CVE-2023-4756

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...

CVE-2023-4756

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...

UBUNTU-CVE-2023-4756

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...

CVE-2023-4756 Stack-based Buffer Overflow in gpac/gpac

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...

CVE-2023-4756

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...

CVE-2023-4744

A vulnerability was found in Tenda AC8 16.03.34.06cnTDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public a...

CVE-2023-4756: Stack-based Buffer Overflow

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...

Ivanti Avalanche Unauthenticated Stack-based Buffer Overflow (CVE-2023-32560)

Binary data ivantiavalanchecve-2023-32560.nbin...

CVE-2023-4744 Tenda AC8 formSetDeviceName stack-based overflow

A vulnerability was found in Tenda AC8 16.03.34.06cnTDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public a...

CVE-2023-4744

The CVE-2023-4744 entry concerns Tenda AC8 (firmware 16.03.34.06_cn_TDC01). The issue is a stack-based buffer overflow in the formSetDeviceName function, triggered by untrusted input, allowing remote exploitation. Multiple connected sources confirm remote exploitability and critical impact (CVE r...