Lucene search
K

493 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 6:43 p.m.7 views

CVE-2017-16311

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00437EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 3:1 p.m.7 views

CVE-2020-27247

A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0002, an attacker can entice the...

8.8CVSS6.8AI score0.00258EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/05 5:12 a.m.4 views

CVE-2024-10194

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been classified as critical. Affected is the function Gotochidx of the file login.cgi of the component Front-End Authentication Page. The manipulation of the argument wlanUrl leads to stack-based buffer...

8.8CVSS6.9AI score0.00131EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 1:54 a.m.6 views

CVE-2024-2806

A vulnerability classified as critical has been found in Tenda AC15 15.03.05.18/15.03.20multi. This affects the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceId/deviceMac leads to stack-based buffer overflow. It is possible to initiate the...

9.8CVSS9.6AI score0.00354EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:2 p.m.6 views

CVE-2024-0532

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects the function setrepeat5 of the file /goform/WifiExtraSet of the component Web-based Management Interface. The manipulation of the argument wpapskcrypto24g/wpapskcrypto5g leads to...

8.6CVSS6.8AI score0.00353EPSS
Exploits1References1
Rosalinux
Rosalinux
added 2025/01/27 8:19 a.m.8 views

Advisory ROSA-SA-2025-2571

software: ghostscript 9.56.1 OS: ROSA-CHROME packageevrstring: ghostscript-9.56.1-1 CVE-ID: CVE-2024-46956 BDU-ID: 2024-09737 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the psi/zfile.c component of the Ghostscript document processing, conversion, and generation software suite involves reading...

7.8CVSS7.5AI score0.00301EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/01/08 12:0 a.m.2 views

PT-2025-1027

Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions prior to 22.7R2.5 Ivanti Policy Secure versions prior to 22.7R1.2 Ivanti Neurons for ZTA gateways versions prior to 22.7R2.3 Description A stack-based buffer overflow exists in Ivanti Connect Secure, Ivanti Polic...

9CVSS7.5AI score0.94129EPSS
Exploits13References126
CNVD
CNVD
added 2024/05/20 12:0 a.m.6 views

Adobe Framemaker Buffer Overflow Vulnerability (CNVD-2024-27546)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A security vulnerability exists in Adobe Framemaker, which is caused by improper boundary checking. An attacker...

7.8CVSS8.1AI score0.00336EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/04 12:0 a.m.11 views

OpenEX Buffer Overflow Vulnerability

OpenEXR is an open standard for high dynamic range image HDR file formats. A buffer overflow vulnerability exists in OpenEXR 3.2.1 and prior versions that stems from an inability to validate the number of scanline samples that contain deep scanline data. An attacker could exploit this vulnerabili...

9.1CVSS6.8AI score0.00804EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/10/12 12:0 a.m.1 views

PT-2023-6345 · Rockwell Automation · Factorytalk Linx

Name of the Vulnerable Software and Affected Versions: FactoryTalk Linx versions affected versions not specified Description: The issue allows an unauthenticated threat actor to read data from memory via crafted malicious packets, resulting in an information disclosure. If the size of the packet ...

9.1CVSS9.2AI score0.02543EPSS
Exploits0References11
Gitee
Gitee
added 2023/09/08 9:54 a.m.4 views

Exploit for Classic Buffer Overflow in Cisco Pix_Firewall_Software

This is a PoC exploit for CVE-2016-6366, a remote code execution vulnerability in Cisco ASA. The repository contains improvements to the EXTRABACON exploit, which was written by the Equation Group NSA and leaked by the Shadow Brokers. The exploit targets various versions of Cisco ASA, including 8...

8.8CVSS8.1AI score0.90783EPSS
Exploits7
Vulnrichment
Vulnrichment
added 2023/06/16 12:0 a.m.32 views

CVE-2023-34832

TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...

7.8AI score0.00189EPSS
Exploits2References4
Vulnrichment
Vulnrichment
added 2023/05/23 12:0 a.m.6 views

CVE-2023-23302

The Toybox.GenericChannel.setDeviceConfig API method in CIQ API version 1.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overflows when copying various attributes. A malicious application could call the API method with specially crafted object and hijack the executi...

7.2AI score0.02023EPSS
Exploits1References2
0day.today
0day.today
added 2023/04/03 12:0 a.m.253 views

Grand Theft Auto III/Vice City Skin File v1.1 - Buffer Overflow Exploit

Exploit Title: Grand Theft Auto III/Vice City Skin File v1.1 - Buffer Overflow Discovered and Written by: Knursoft Vendor Homepage: https://www.rockstargames.com/ Version: v1.1 Tested on: Windows XP SP2/SP3, 7, 10 21H2 CVE : N/A 1 - Run this python script to generate "evil.bmp" file. 2 - Copy it ...

7.4AI score
Exploits0
Vulnrichment
Vulnrichment
added 2023/03/28 12:0 a.m.6 views

CVE-2023-26337 ZDI-CAN-20285: Adobe Dimension USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.5AI score0.00103EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/12/23 12:0 a.m.5 views

CVE-2022-45721

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function...

8.1AI score0.00436EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/10/25 12:0 a.m.5 views

CVE-2022-33185

Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to process user input. Authenticated local attackers could abuse these vulnerabilities to exploit stack-based buffer overflows, allowing arbitrary code execution as the root user accoun...

8.2AI score0.0006EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/09/22 4:54 p.m.14 views

CVE-2022-35035

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b559f...

6.9AI score0.00395EPSS
Exploits1References2
NVD
NVD
added 2022/09/19 10:15 p.m.12 views

CVE-2022-35069

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b544e...

6.5CVSS0.00395EPSS
Exploits1References2
OSV
OSV
added 2022/08/03 2:15 p.m.2 views

CVE-2022-32292

In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in receiveddata to execute code...

9.8CVSS9.8AI score
Exploits0References4
Rows per page
Query Builder