Lucene search
+L

582 matches found

CNVD
CNVD
added 2022/03/30 12:0 a.m.21 views

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26240)

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 v15.03.2.21cn suffers from a buffer overflow vulnerability, which stems from a time parameter in the PowerSaveSet function that does not properly validate data boundaries when performing operations on memory, and can be exploited by an...

10CVSS5.9AI score0.01665EPSS
Exploits1References1
CNVD
CNVD
added 2022/03/25 12:0 a.m.15 views

ASUS AC68U Buffer Overflow Vulnerability

The ASUS AC68U is a router from the Chinese company ASUS. A buffer overflow vulnerability exists in ASUS AC68U 3.0.0.4.385.20852 and prior versions, which stems from a failure to properly validate data boundaries when performing an operation in memory in blocking.cgi, which can be exploited by an...

7.8CVSS7.1AI score0.01057EPSS
Exploits1References1
CNVD
CNVD
added 2022/03/25 12:0 a.m.48 views

Tenda AC10-1200 Buffer Overflow Vulnerability

Tenda AC10-1200 is a wireless router from Tenda, China. tenda AC10-1200 suffers from a buffer error vulnerability that stems from the list parameter in the fromSetIpMacBind function that does not properly validate data boundaries when performing operations on memory. An attacker could exploit thi...

7.8CVSS4.6AI score0.01195EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.8 views

The vulnerability of BIOS microprogramming software in Dell laptops arises from an operation that goes beyond buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops arises from operations that occur outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.2CVSS8AI score0.00281EPSS
Exploits0References4Affected Software45
CNVD
CNVD
added 2022/03/22 12:0 a.m.17 views

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26242)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the list parameter in the SetVirtualServerCfg function that does not properly validate data boundaries when executing operations on memory, and can be...

10CVSS7.4AI score0.01665EPSS
Exploits1References1
CNVD
CNVD
added 2022/03/16 12:0 a.m.200 views

Apache HTTP Server Buffer Overflow Vulnerability (CNVD-2022-41640)

Apache HTTP Server is an open source web server from the Apache Foundation. The server is fast, reliable, and extensible via a simple API.A buffer overflow vulnerability exists in Apache HTTP Server, which stems from a networked system or product that does not properly validate data boundaries wh...

9.8CVSS2.6AI score0.50401EPSS
Exploits0References1
CNVD
CNVD
added 2022/03/14 12:0 a.m.56 views

TP-Link TL-WR886N Buffer Overflow Vulnerability (CNVD-2022-20072)

TP-Link TL-WR886N is a wireless router from China Pulink.A buffer overflow vulnerability exists in TP-Link TL-WR886N 20190826 version 2.3.8, which stems from the /cloudconfig/routerpost/upgradeinfo function when executing operations on memory that do not properly validate data boundaries, an...

10CVSS7.5AI score0.02413EPSS
Exploits1References1
CNVD
CNVD
added 2022/03/14 12:0 a.m.87 views

Mattermost Server Buffer Overflow Vulnerability (CNVD-2022-65355)

Mattermost Server is an open source messaging platform from Mattermost, Inc. A buffer overflow vulnerability exists in Mattermost Server versions 6.3.2 and below, which stems from the fact that Mattermost Server's document extractor does not properly validate data boundaries when performing...

6.5CVSS2.6AI score0.00909EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/23 12:0 a.m.44 views

radare2 buffer overflow vulnerability (CNVD-2022-25196)

radare2 is a set of libraries and tools for working with binary files. radare2 suffers from a buffer overflow vulnerability that originates when a networked system or product performs an operation in memory without properly validating the data boundaries, resulting in incorrect read and write...

7.8CVSS7.1AI score0.01178EPSS
Exploits1References1
Ubuntu
Ubuntu
added 2022/02/01 11:56 a.m.184 views

USN-5260-2: Samba vulnerability

Orange Tsai discovered that the Samba vfsfruit module incorrectly handled certain memory operations. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service, or possibly execute arbitrary code as root. CVE-2021-44142...

9CVSS8AI score0.7372EPSS
Exploits1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2015-0102)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.6CVSS5.1AI score0.04297EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2019-0146)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.02521EPSS
Exploits5References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.27 views

Mageia: Security Advisory (MGASA-2013-0316)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.02531EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/01/25 12:0 a.m.3 views

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...

7.8CVSS6.2AI score0.0084EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.7 views

The vulnerability of the read_objects() function in the .fig Fig2dev file conversion utility involves a buffer overflow issue in memory operations. This vulnerability allows an attacker to compromise data integrity and cause service failures.

The vulnerability of the readobjects function in the .fig Fig2dev file conversion utility is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise data integrity and cause service failures...

7.1CVSS6.6AI score0.01178EPSS
Exploits1References7Affected Software4
CNNVD
CNNVD
added 2022/01/11 12:0 a.m.6 views

radare2 缓冲区错误漏洞

radare2 is a set of libraries and tools for working with binary files. radare2 suffers from a buffer error vulnerability, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulting in an incorrect read or write...

9.6CVSS6.1AI score0.01105EPSS
Exploits1References7
CNVD
CNVD
added 2022/01/08 12:0 a.m.36 views

vim out-of-bounds read vulnerability

Vim is an editor based on the UNIX platform. An out-of-bounds read vulnerability exists in Vim, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorrect read and write operations being performed to...

7.8CVSS2.9AI score0.01739EPSS
Exploits1References1
CNVD
CNVD
added 2022/01/08 12:0 a.m.39 views

Expat has an unspecified vulnerability

Expat is a fast streaming XML parser written in C. Expat is vulnerable in versions prior to 2.4.3. The vulnerability stems from mgroupSize in Expat's xmlparse.c that does not properly validate data boundaries when performing operations on memory, resulting in incorrect read and write operations...

8.1CVSS3.6AI score0.0379EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/24 12:0 a.m.29 views

Adobe Audition Buffer Overflow Vulnerability (CNVD-2021-102794)

Adobe Audition is a set of multi-track editing tools from Adobe. Adobe Audition suffers from a buffer overflow vulnerability that originates when a networked system or product does not properly validate data boundaries when performing operations in memory, resulting in incorrect read and write...

4.3CVSS2.9AI score0.01802EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.8 views

The vulnerability of HP LaserJet, PageWide, Scanjet Enterprise, and LaserJet Managed printer microprogramming software lies in the execution of operations beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of HP LaserJet, PageWide, Scanjet Enterprise, and LaserJet Managed printer microprogramming software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.8CVSS8.8AI score0.12135EPSS
Exploits0References4Affected Software30
Rows per page
Query Builder