Lucene search
K

905 matches found

Vulnrichment
Vulnrichment
added 2024/05/21 4:8 p.m.21 views

CVE-2024-27130 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build...

7.2CVSS7.2AI score0.38054EPSS
Exploits3References1
CVE
CVE
added 2024/05/21 4:8 p.m.195 views

CVE-2024-27130

CVE-2024-27130 affects QNAP QTS and QuTS hero (NAS devices) with a stack-based buffer overflow in a network-facing path. The root cause, as reported in connected exploit handling, is unsafe use of strcpy in the share.cgi No_Support_ACL function, allowing remote code execution via crafted network ...

8.8CVSS7.2AI score0.38054EPSS
Exploits3References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/21 4:8 p.m.17 views

CVE-2024-27129 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS...

6.4CVSS7.2AI score0.00695EPSS
Exploits0References1
CVE
CVE
added 2024/05/21 4:8 p.m.80 views

CVE-2024-27129

CVE-2024-27129 is a buffer copy vulnerability affecting QNAP QTS (5.1.x) and QuTS hero (h5.1.x). The issue allows authenticated remote code execution via the network due to unchecked input size; exploitation requires valid credentials. Fixed in QTS 5.1.7.2770 build 20240520 and later and QuTS her...

8.8CVSS6.9AI score0.00695EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/05/21 4:8 p.m.82 views

CVE-2024-27128

CVE-2024-27128 affects QNAP QTS and QuTS hero. A buffer copy without input size checking could allow authenticated network-based code execution. Affected versions are QTS 5.1.x and QuTS hero h5.1.x, with fixes in QTS 5.1.7.2770 build 20240520 and later and QuTS hero h5.1.7.2770 build 20240520 and...

8.8CVSS6.9AI score0.00689EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/21 4:8 p.m.27 views

CVE-2024-27128 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS...

6.4CVSS7.2AI score0.00689EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/21 4:8 p.m.20 views

CVE-2024-27128 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS...

6.4CVSS6.7AI score0.00689EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/21 12:0 a.m.4 views

PT-2024-4538 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.1.7.2770 build 20240520 QNAP QuTS hero versions prior to h5.1.7.2770 build 20240520 Description: A buffer copy without checking the size of input issue has been reported, potentially allowing authenticated users t...

8.8CVSS7.4AI score0.00689EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.6 views

The vulnerability of the Adobe Framemaker desktop publishing system lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...

7.8CVSS5.9AI score0.0034EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/06 2:32 p.m.20 views

CVE-2024-21480 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while playing audio file having large-sized input buffer...

7.3CVSS7.6AI score0.00291EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/06 2:32 p.m.20 views

CVE-2023-43526 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while querying module parameters from Listen Sound model client in kernel from user space...

6.7CVSS7AI score0.00109EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/06 2:32 p.m.18 views

CVE-2023-43526 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while querying module parameters from Listen Sound model client in kernel from user space...

6.7CVSS6.8AI score0.00109EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/06 2:32 p.m.11 views

CVE-2023-43525 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while copying the sound model data from user to kernel buffer during sound model register...

6.7CVSS7.2AI score0.00109EPSS
Exploits0References1
NVD
NVD
added 2024/04/29 2:15 p.m.40 views

CVE-2024-1969

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Secomea GateManager webserver modules allows crash of GateManager.This issue affects GateManager: from 9.7 before 11.2.624095033...

8.2CVSS8.3AI score0.00456EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/29 1:29 p.m.37 views

CVE-2024-1969 Heap buffer overflow

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Secomea GateManager webserver modules allows crash of GateManager.This issue affects GateManager: from 9.7 before 11.2.624095033...

8.2CVSS8.4AI score0.00456EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/04/29 12:0 a.m.22 views

QNAP QuTS hero Multiple Vulnerabilities (QSA-24-20)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

8.8CVSS6.5AI score0.00851EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/04/29 12:0 a.m.18 views

QNAP QTS Multiple Vulnerabilities (QSA-24-20)

QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

8.8CVSS6.5AI score0.00851EPSS
Exploits0References1
NVD
NVD
added 2024/04/26 3:15 p.m.11 views

CVE-2023-50362

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS...

8.8CVSS5.3AI score0.00759EPSS
Exploits0References1
OSV
OSV
added 2024/04/26 3:15 p.m.1 views

CVE-2023-50362

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS...

8.8CVSS6.1AI score0.00759EPSS
Exploits0References1
OSV
OSV
added 2024/04/26 3:15 p.m.3 views

CVE-2023-50361

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS...

8.8CVSS6.1AI score0.00759EPSS
Exploits0References1
Rows per page
Query Builder