Lucene search
+L

22868 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•31 views

oFono SMS Decoder Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of oFono. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of SMS PDUs. The issue results from the lack of proper validation of the length of...

8.1CVSS7.6AI score0.01015EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/12/19 12:24 a.m.•16 views

CVE-2023-6314

Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file...

7.8CVSS8.2AI score0.00272EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/19 12:00 a.m.•5 views

CVE-2023-6314: Out-of-bounds Write

Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file...

7.8CVSS8AI score0.00272EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2023/12/19 12:00 a.m.•56 views

TP-Link TL-WR902AC dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR902AC routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the libcmm.so module. The issue results from the lack of proper...

6.8CVSS7.5AI score0.00537EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/18 12:00 a.m.•18 views

PT-2023-8330 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions affected versions not specified Description: The issue is related to a stack-based buffer overflow in the WLAvalancheService of the Ivanti Avalanche mobile device management system. This can be exploited by an attack...

9.8CVSS9.8AI score0.06782EPSS
SaveExploits0References9
NVD
NVD
•added 2023/12/17 2:15 a.m.•46 views

CVE-2023-50965

In MicroHttpServer aka Micro HTTP Server through 4398570, ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI...

9.8CVSS0.01534EPSS
SaveExploits3References2
NVD
NVD
•added 2023/12/17 1:15 a.m.•89 views

CVE-2023-6888

A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publ...

9.8CVSS0.0096EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2023/12/17 1:00 a.m.•27 views

CVE-2023-6888 PHZ76 RtspServer RtspMesaage.cpp ParseRequestLine stack-based overflow

A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publ...

6.3CVSS7AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2023/12/17 1:00 a.m.•17 views

CVE-2023-6888 PHZ76 RtspServer RtspMesaage.cpp ParseRequestLine stack-based overflow

A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publ...

7.5CVSS7AI score0.0096EPSS
SaveExploits1References4
Mend
Mend
•added 2023/12/17 1:00 a.m.•8 views

CVE-2023-6888

A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publ...

9.8CVSS0.0096EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/12/17 12:00 a.m.•23 views

Micro HTTP Server Security Vulnerability

Micro HTTP Server is a very simple HTTP server for prototyping by the individual developer Jian-Hong Pan in China. A security vulnerability exists in Micro HTTP Server that stems from allowing stack-based buffer overflows and potential remote code execution...

9.8CVSS8.1AI score0.01534EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/17 12:00 a.m.•5 views

CVE-2023-50965: Out-of-bounds Write

In MicroHttpServer aka Micro HTTP Server through 4398570, ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI...

9.8CVSS8.9AI score0.01534EPSS
SaveExploits3References2
Mend
Mend
•added 2023/12/17 12:00 a.m.•11 views

CVE-2023-50965

In MicroHttpServer aka Micro HTTP Server through 4398570, ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI...

9.8CVSS0.01534EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/17 12:00 a.m.•5 views

CVE-2023-6888: Stack-based Buffer Overflow

A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publ...

9.8CVSS7.2AI score0.0096EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•9 views

CVE-2023-33222: Stack-based Buffer Overflow

When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device...

9.8CVSS8.5AI score0.01288EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•10 views

CVE-2023-33220: Stack-based Buffer Overflow

During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device...

9.8CVSS8.5AI score0.01137EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•8 views

CVE-2023-33219: Stack-based Buffer Overflow

The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device...

9.8CVSS8.6AI score0.01137EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/12/14 6:03 p.m.•51 views

CVE-2023-40476

A stack-based buffer overflow was found in the GStreamer Plugins Bad when handling malformed files with H.265 video streams. This issue requires user interaction with the library and may allow a malicious user to cause an integer overflow before allocating the buffer, triggering a crash or code...

5.5CVSS9.6AI score0.02256EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/12/14 6:59 a.m.•31 views

CVE-2023-50268

A stack-based buffer overflow vulnerability was found in the Jq project. This issue occurs when submitting malicious input to the application, leading to an application crash and causing a denial of service...

6.2CVSS6.4AI score0.00439EPSS
SaveExploits1References7
OpenVAS
OpenVAS
•added 2023/12/14 12:00 a.m.•30 views

Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2023-3365)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.03463EPSS
SaveExploits1References2
Rows per page
Query Builder