Lucene search
+L

1444 matches found

BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•16 views

The vulnerability of the set_color function in the genge.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.

The vulnerability of the setcolor function in the genge.c utility for converting .fig files in Fig2dev involves copying buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause a service failure by converting the xfig file into the ge format...

7.8CVSS6.6AI score0.00721EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•15 views

The vulnerability of the setfigfont function in the genepic.c component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the setfigfont function in the genepic.c component of the .fig conversion tool for files with the .fig extension in Fig2dev relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions...

7.8CVSS6.4AI score0.01078EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•9 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7AI score0.02998EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•15 views

The vulnerability in the do_checksum function of the checksum.c component of the Pcap Tcpreplay editing and reproduction utility allows a hacker to cause a service failure.

The vulnerability of the dochecksum function in the checksum.c component of the Pcap Tcpreplay editing and reproduction utility involves copying buffers without checking the input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created...

7.1CVSS6.6AI score0.00665EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•16 views

The vulnerability of the conv_pattern_index function in the gencgm.c component of the Fig2dev file conversion tool allows a attacker to cause a service failure.

The vulnerability of the convpatternindex function in the gencgm.c component of the .fig Fig2dev file conversion tool is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

7.1CVSS6.2AI score0.01053EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/01 12:00 a.m.•15 views

The vulnerability of the genmp_writefontmacro_latex function in the genmp.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.

The vulnerability of the genmpwritefontmacrolatex function in the genmp.c component of the xfig conversion utility for .fig files in Fig2dev relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure by converting...

7.1CVSS5.8AI score0.00661EPSS
SaveExploits1References5Affected Software2
CNVD
CNVD
•added 2022/03/25 12:00 a.m.•23 views

NETGEAR R6700v3 Authorization Issues Vulnerability

NETGEAR R6700v3 is the Nighthawk AC1750 Smart Dual Band Gigabit Router from Netgear USA. The NETGEAR R6700v3 suffers from an authorization issue vulnerability that stems from not properly validating the length of user-supplied data before copying it into a buffer. An attacker could exploit the...

8.8CVSS7AI score0.25439EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/03/23 12:00 a.m.•20 views

NETGEAR R6700v3 授权问题漏洞

NETGEAR R6700v3 is the Nighthawk AC1750 Smart Dual Band Gigabit Router from Netgear USA. The NETGEAR R6700v3 suffers from an authorization issue vulnerability that stems from not properly validating the length of user-supplied data before copying it into a buffer. An attacker could exploit the...

8.8CVSS5.8AI score0.25439EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2022/03/23 12:00 a.m.•15 views

The vulnerability of Adobe Medium’s 3D modeling software lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code.

The vulnerability of Adobe Medium’s 3D modeling software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.6AI score0.08486EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/07 12:00 a.m.•4 views

CVE-2021-40056: Buffer Copy without Checking Size of Input

There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability...

7.8CVSS7.5AI score0.00736EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/07 12:00 a.m.•5 views

CVE-2021-40062: Buffer Copy without Checking Size of Input

There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability...

7.8CVSS7.5AI score0.00736EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•19 views

The vulnerability of the GOOSE (Generic Object-Oriented Substation Event) protocol implementation in Schneider Electric Easergy P5 micro-programmed devices for relay protection and control allows a perpetrator to execute arbitrary code or cause malfunctions during maintenance.

The vulnerability of the GOOSE Generic Object-Oriented Substation Event protocol implementation in Schneider Electric Easergy P5 relay protection and control devices relates to the copying of buffers without checking the size of input data. Exploiting this vulnerability can allow attackers to...

8.8CVSS8.3AI score0.02822EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/16 12:00 a.m.•5 views

CVE-2021-43303: Buffer Copy without Checking Size of Input

Buffer overflow in PJSUA API when calling pjsuacalldump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer smaller than 128 characters may overflow the output buffer, regardless of the 'maxlen' argument supplied...

9.8CVSS8.4AI score0.02356EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/02/11 6:15 p.m.•13 views

CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

7.5CVSS7.1AI score0.14241EPSS
SaveExploits0References2
OSV
OSV
•added 2022/02/11 6:15 p.m.•13 views

CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

7.5CVSS5.8AI score0.14241EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/02/11 6:15 p.m.•12 views

CVE-2021-22802

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.ex...

9.8CVSS7.8AI score0.20165EPSS
SaveExploits0References2
OSV
OSV
•added 2022/02/11 6:15 p.m.•21 views

CVE-2021-22802

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.ex...

9.8CVSS6.4AI score0.20165EPSS
SaveExploits0References1
Prion
Prion
•added 2022/02/11 6:15 p.m.•28 views

Remote code execution

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.ex...

7.5CVSS9.6AI score0.20165EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/02/11 6:15 p.m.•29 views

Design/Logic Flaw

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

5CVSS7.4AI score0.14241EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/02/11 5:40 p.m.•46 views

CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

7.7AI score0.14241EPSS
SaveExploits0References1
Rows per page
Query Builder