761 matches found
CVE-2024-33078
Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to remote code execution...
CVE-2024-4171 Tenda W30E WizardHandle fromWizardHandle stack-based overflow
A vulnerability classified as critical has been found in Tenda W30E 1.0/1.0.1.25. Affected is the function fromWizardHandle of the file /goform/WizardHandle. The manipulation of the argument PPW leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...
CVE-2024-4166 Tenda 4G300 sub_41E858 stack-based overflow
A vulnerability has been found in Tenda 4G300 1.01.42 and classified as critical. Affected by this vulnerability is the function sub41E858. The manipulation of the argument GO/page leads to stack-based buffer overflow. The attack can be launched remotely. The identifier VDB-261985 was assigned to...
CVE-2024-3874 Tenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflow
A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated...
PT-2024-23843
Name of the Vulnerable Software and Affected Versions sngrep versions 1.4.1 and later Description A stack-buffer overflow issue exists due to inadequate bounds checking when copying Content-Length and Warning headers into fixed-size buffers in the sip validate packet and sip parse extra headers...
ROS-20240405-10
A vulnerability in the Perl programming language is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service or execute arbitrary code...
PT-2024-23716 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 Bento version 1.6.0-641 Description: The issue allows a remote attacker to execute arbitrary code via the AP4 MemoryByteStream::WritePartial function at Ap4ByteStream.cpp. This is a Buffer Overflow vulnerability. Recommendations: For...
Tenda AC15 addWifiMacFilter Method Buffer Overflow Vulnerability
The Tenda AC15 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC15 version 15.03.05.18, which originates from the deviceId/deviceMac parameter in the addWifiMacFilter method of the /goform/addWifiMacFilter page that fails to correctly validate...
CVE-2024-1004
A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139B20201216. This affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument httphost leads to stack-based buffer overflow. It is possible to initiate the attack remotel...
CVE-2024-23621 IBM Merge Healthcare eFilm Workstation License Server Buffer Overflow
A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution...
CVE-2023-43817 Delta Electronics Delta Industrial Automation DOPSoft DPS File wMailContentLen Buffer Overflow Remote Code Execution
A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wMailContentLen field of a DPS file. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve code execution...
Fedora 39 : gtkwave (2024-2647382c5f)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2647382c5f advisory. Cumulative bug-fix update. This update includes fixes for multiple security issues found by Talos in which specially crafted input files could lead ...
CVE-2011-10005 EasyFTP MKD Command buffer overflow
A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be...
EUVD-2023-59279
A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313B20191024. Affected by this issue is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag leads to buffer...
Linux kernel buffer overflow vulnerability (CNVD-2023-10110752)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a buffer overflow vulnerability that originates from a boundary error in readsize in perfevent in the Performance Events system component when handlin...
PT-2023-9218 · FFmpeg +4 · Ffmpeg +4
Name of the Vulnerable Software and Affected Versions: FFmpeg versions v.n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow vulnerability in the set encoder id function, located in the /fftools/ffmpeg enc.c component. This vulnerability can be exploited by an attacker to...
Tenda AC10 sub_47D878 function buffer overflow vulnerability
The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10 suffers from a buffer overflow vulnerability, which originates from the sub47D878 function's src parameter failing to correctly validate the length of the input data, which can be exploited by a remote attacker to...
Tenda AC10 sub_49E098 function buffer overflow vulnerability
The Tenda AC10 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda AC10 USAC10V4.0siV16.03.10.13cn version, which stems from the list parameter of the sub49E098 function failing to correctly validate the length of the input data, and can be...
ROS-20231016-07
A vulnerability in the tiff.c file of the ImageMagick console graphics editor is related to a buffer overflow in the heap. Exploitation of the vulnerability could allow an attacker acting remotely to force a user to open a specially crafted file, resulting in application crash and denial of servi...
