Lucene search
K

1417 matches found

RedhatCVE
RedhatCVE
added 2026/02/12 8:26 a.m.3 views

CVE-2020-37182

A flaw was found in redir. A remote attacker can exploit a stack overflow vulnerability in the doproxyconnect function by sending oversized input. This vulnerability, caused by improper length checking in the sprintf function, allows attackers to overwrite memory, leading to a segmentation fault...

8.7CVSS5.6AI score0.00477EPSS
Exploits0References2
OSV
OSV
added 2026/02/11 9:16 p.m.2 views

CVE-2020-37182

Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect function that allows attackers to crash the application by sending oversized input. Attackers can exploit the sprintf buffer without proper length checking to overwrite memory and cause a segmentation fault, resulting in...

7.5CVSS6AI score
Exploits0References3
NVD
NVD
added 2026/02/11 9:16 p.m.3 views

CVE-2020-37182

Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect function that allows attackers to crash the application by sending oversized input. Attackers can exploit the sprintf buffer without proper length checking to overwrite memory and cause a segmentation fault, resulting in...

8.7CVSS0.00477EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.4 views

PT-2026-7680

Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect function that allows attackers to crash the application by sending oversized input. Attackers can exploit the sprintf buffer without proper length checking to overwrite memory and cause a segmentation fault, resulting in...

8.7CVSS5.8AI score0.00477EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/11 12:0 a.m.2 views

CVE-2025-70083

An issue was discovered in OpenSatKit 2.2.1. The DirName field in the telecommand is provided by the ground segment and must be treated as untrusted input. The program copies DirName into the local buffer DirWithSep using strcpy. The size of this buffer is OSMAXPATHLEN. If the length of DirName i...

5.9AI score0.00199EPSS
Exploits0References5
NVD
NVD
added 2026/02/10 8:16 p.m.8 views

CVE-2025-48515

Insufficient parameter sanitization in AMD Secure Processor ASP Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution...

5.4CVSS0.00126EPSS
Exploits0References1
CVE
CVE
added 2026/02/10 7:50 p.m.10 views

CVE-2025-29951

CVE-2025-29951 affects the AMD Secure Processor (ASP) bootloader. A buffer overflow could allow an attacker to overwrite memory, enabling privilege escalation and arbitrary code execution. Documents consistently describe the vulnerability across multiple feeds (NVD/Red Hat/CVE List/Amd bulletin) ...

7.3CVSS6.3AI score0.00137EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/10 7:50 p.m.4 views

CVE-2025-29951

A buffer overflow in the AMD Secure Processor ASP bootloader could allow an attacker to overwrite memory, potentially resulting in privilege escalation and arbitrary code execution...

7.3CVSS6.3AI score0.00137EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/10 7:50 p.m.6 views

CVE-2025-29951

A buffer overflow in the AMD Secure Processor ASP bootloader could allow an attacker to overwrite memory, potentially resulting in privilege escalation and arbitrary code execution...

7.3CVSS6.3AI score0.00137EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/10 7:49 p.m.3 views

CVE-2025-48515

Insufficient parameter sanitization in AMD Secure Processor ASP Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution...

5.4CVSS6AI score0.00126EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/10 7:49 p.m.5 views

CVE-2025-48515

Insufficient parameter sanitization in AMD Secure Processor ASP Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution...

5.4CVSS6AI score0.00126EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/10 7:49 p.m.23 views

CVE-2025-48515

Insufficient parameter sanitization in AMD Secure Processor ASP Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution...

5.4CVSS0.00126EPSS
Exploits0References1
CVE
CVE
added 2026/02/10 7:49 p.m.19 views

CVE-2025-48515

CVE-2025-48515 concerns the AMD Secure Processor (ASP) Boot Loader. The provided documents describe insufficient parameter sanitization that could allow an attacker with access to a SPI ROM upgrade to overwrite memory, potentially enabling arbitrary code execution. The PT-2026-7464 entry reiterat...

5.4CVSS6AI score0.00126EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.4 views

PT-2026-7449

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A flaw exists due to improper input validation within system management mode SMM. This could enable a privileged attacker to overwrite stack memory, potentially leading to arbitrary code execution...

7.1CVSS5.8AI score0.00145EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.7 views

PT-2026-7464

Name of the Vulnerable Software and Affected Versions AMD Secure Processor ASP Boot Loader affected versions not specified Description A flaw exists in the AMD Secure Processor ASP Boot Loader where insufficient parameter sanitization could allow an attacker with access to SPIROM upgrade to...

5.4CVSS5.8AI score0.00126EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.4 views

AMD Ryzen 安全漏洞

The AMD Ryzen is a central processing unit CPU developed by American semiconductor company AMD. The AMD Ryzen has a security vulnerability caused by insufficient parameter cleaning, which may lead to memory overwriting and the execution of arbitrary code. The following products are affected: AMD...

5.4CVSS6AI score0.00126EPSS
Exploits0References1
CVE
CVE
added 2026/02/06 11:14 p.m.16 views

CVE-2020-37159

CVE-2020-37159 affects Parallaxis Cuckoo Clock 5.0. A buffer overflow in the alarm scheduling feature allows an attacker to execute arbitrary code by overwriting memory registers; a payload exceeding 260 bytes can overwrite EIP/EBP and enable shellcode execution, with potential remote code execut...

9.8CVSS6.9AI score0.00615EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/05 4:13 p.m.4 views

CVE-2020-37119

Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute shellcode through a...

9.8CVSS6.3AI score0.00607EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2026/02/03 10:16 p.m.3 views

CVE-2020-37065

StreamRipper32 version 2.6 contains a buffer overflow vulnerability in the Station/Song Section that allows attackers to overwrite memory by manipulating the SongPattern input. Attackers can craft a malicious payload exceeding 256 bytes to potentially execute arbitrary code and compromise the...

9.8CVSS0.00329EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/02/03 10:1 p.m.25 views

CVE-2020-37065 StreamRipper32 2.6 - Buffer Overflow

StreamRipper32 version 2.6 contains a buffer overflow vulnerability in the Station/Song Section that allows attackers to overwrite memory by manipulating the SongPattern input. Attackers can craft a malicious payload exceeding 256 bytes to potentially execute arbitrary code and compromise the...

9.8CVSS0.00329EPSS
Exploits0References3
Rows per page
Query Builder