Lucene search
K

6556 matches found

Vulnrichment
Vulnrichment
added 2021/12/09 8:46 a.m.12 views

CVE-2021-36194

Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted requests...

8.8CVSS7.6AI score0.01397EPSS
Exploits0References1
ThreatPost
ThreatPost
added 2021/12/08 7:16 p.m.170 views

Critical SonicWall VPN Bugs Allow Complete Appliance Takeover

Critical security vulnerabilities in SonicWall’s Secure Mobile Access SMA 100-series VPN appliances could allow an unauthenticated, remote user to execute code as root. The SMA 100 line was created to provide end-to-end secure remote access to corporate resources, be they hosted on-prem, cloud or...

9.8CVSS10AI score0.99912EPSS
Exploits7References9
Fortinet
Fortinet
added 2021/12/07 12:0 a.m.29 views

FortiWeb - Stack-based buffer overflows in API controllers

Multiple stack-based buffer overflows CWE-121 in the API controllers of FortiWeb may allow an authenticated attacker to achieve arbitrary code execution via specially crafted requests...

6.5CVSS8.9AI score0.01397EPSS
Exploits0Affected Software1
OSV
OSV
added 2021/12/03 6:45 p.m.13 views

MGASA-2021-0535 Updated vim packages fix security vulnerability

Multiple Heap-based Buffer Overflows Stack-based Buffer overflows and a use after free...

9.3CVSS6.7AI score0.02075EPSS
Exploits8References6
Mageia
Mageia
added 2021/12/03 6:45 p.m.49 views

Updated vim packages fix security vulnerability

Multiple Heap-based Buffer Overflows Stack-based Buffer overflows and a use after free...

9.3CVSS7.2AI score0.02075EPSS
Exploits8References5
OpenVAS
OpenVAS
added 2021/12/02 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2021:3854-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.7AI score0.03518EPSS
Exploits17References24
OSV
OSV
added 2021/12/01 6:15 p.m.30 views

CVE-2021-38575

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows...

8.1CVSS6.9AI score
Exploits0References3
NVD
NVD
added 2021/12/01 6:15 p.m.21 views

CVE-2021-38575

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows...

8.1CVSS0.0187EPSS
Exploits1References3
Cvelist
Cvelist
added 2021/12/01 12:0 a.m.28 views

CVE-2021-38575

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows...

8.3AI score0.0187EPSS
Exploits1References2
CVE
CVE
added 2021/12/01 12:0 a.m.118 views

CVE-2021-38575

CVE-2021-38575 affects NetworkPkg/IScsiDxe in EDK II. Remotely exploitable buffer overflows are indicated, with potential denial of service or arbitrary code execution. Public disclosures in Debian and Ubuntu advisories show fixes in edk2 (e.g., Debian 11 security update 2020.11-2+deb11u3) and in...

8.1CVSS7.9AI score0.0187EPSS
Exploits1References3Affected Software1
AlpineLinux
AlpineLinux
added 2021/12/01 12:0 a.m.26 views

CVE-2021-38575

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows...

8.1CVSS3.4AI score0.0187EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.1 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code on the target system...

7.8CVSS8.1AI score0.01955EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/19 12:0 a.m.1 views

The vulnerability of the vDaemon software from Cisco IOS XE SD-WAN allows a attacker to trigger buffer overflows.

The vulnerability of the vDaemon software in Cisco IOS XE SD-WAN lies in insufficient boundary checking during traffic processing. Exploiting this vulnerability can allow a remote attacker to trigger buffer overflows...

10CVSS8.2AI score0.02546EPSS
Exploits0References3
OSV
OSV
added 2021/11/18 9:50 p.m.3 views

MGASA-2021-0513 Updated transfig packages fix security vulnerability

Correct buffer overflows and segfaults, mainly due to maliciously crafted input files...

7.3AI score
Exploits0References3
Mageia
Mageia
added 2021/11/18 9:50 p.m.39 views

Updated opensc packages fix security vulnerability

CVE-2021-42780: Fixed use after return in insertpin bsc1192005. CVE-2021-42779: Fixed use after free in scfilevalid bsc1191992. CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c bsc1192000. CVE-2021-42782: Stack buffer overflow issues in various places bsc1191957...

5.3CVSS1.3AI score0.02725EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/11/16 12:0 a.m.3 views

The vulnerability of the software for creating metadata, processing, and exchanging sets of Adobe XMP-Toolkit-SDK standards is related to buffer overflows in dynamic memory. This vulnerability allows attackers to cause system failures.

The vulnerability of the software for creating, processing, and exchanging metadata using the Adobe XMP-Toolkit-SDK is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.1CVSS6.8AI score0.04074EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2021/11/14 3:18 p.m.21 views

UVI-2021-1002076 comedi: vmk80xx: fix transfer-buffer overflows

comedi: vmk80xx: fix transfer-buffer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.79 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2021/11/14 3:16 p.m.10 views

GSD-2021-1002026 comedi: vmk80xx: fix transfer-buffer overflows

comedi: vmk80xx: fix transfer-buffer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.159 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2021/11/14 3:15 p.m.8 views

GSD-2021-1001995 comedi: vmk80xx: fix transfer-buffer overflows

comedi: vmk80xx: fix transfer-buffer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.217 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2021/11/14 3:13 p.m.6 views

UVI-2021-1001972 comedi: vmk80xx: fix transfer-buffer overflows

comedi: vmk80xx: fix transfer-buffer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.255 by commit...

7.2AI score
Exploits0
Rows per page
Query Builder