Lucene search
K

422 matches found

NVD
NVD
added 2024/01/11 5:15 p.m.6 views

CVE-2023-50671

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

7.8CVSS7.8AI score0.00056EPSS
Exploits1References2
OSV
OSV
added 2024/01/11 5:15 p.m.1 views

DEBIAN-CVE-2023-50671

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

7.8CVSS7.8AI score0.00056EPSS
Exploits1References1
OSV
OSV
added 2024/01/11 5:15 p.m.2 views

CVE-2023-50671

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

7.8CVSS7.2AI score
Exploits0References2
Prion
Prion
added 2024/01/11 5:15 p.m.9 views

Heap overflow

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

4.4CVSS7.6AI score0.00056EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2024/01/11 5:15 p.m.1 views

UBUNTU-CVE-2023-50671

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

7.8CVSS6.1AI score0.00056EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2024/01/11 5:15 p.m.14 views

CVE-2023-50671

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

7.8CVSS7.2AI score0.00056EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/01/11 12:0 a.m.2 views

exiftags Security Vulnerabilities

exiftags is a utility for parsing attribute data for a given JPEG image. A security vulnerability exists in exiftags version 1.01, which stems from a heap-based buffer overflow in nikonprop1 in nikon.c, where snprintf can write to an exception address...

7.8CVSS7.3AI score0.00056EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/01/11 12:0 a.m.2 views

PT-2024-13950 · Exiftags +1 · Exiftags +1

Name of the Vulnerable Software and Affected Versions: exiftags version 1.01 Description: The issue is a heap-based buffer overflow caused by the snprintf function writing to an unexpected address in the nikon prop1 function within nikon.c. This occurs because snprintf can write a size of 28,...

7.8CVSS7.6AI score0.00056EPSS
Exploits1References15
CVE
CVE
added 2024/01/11 12:0 a.m.35 views

CVE-2023-50671

CVE-2023-50671 affects exiftags 1.01, where the function nikon_prop1 in nikon.c triggers a heap-based buffer overflow (write of size 28) due to snprintf writing to an unexpected address. Multiple sources (NVD, Red Hat, OSV, UBUNTU OSV, Debian OSV, PRION, and Nessus-derived entries) consistently d...

7.8CVSS7.8AI score0.00056EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/11 12:0 a.m.17 views

CVE-2023-50671

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

7.3AI score0.00056EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/01/11 12:0 a.m.12 views

CVE-2023-50671

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

8AI score0.00056EPSS
Exploits1References2
NVD
NVD
added 2023/12/04 1:15 p.m.14 views

CVE-2023-48800

In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub417338 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...

9.8CVSS0.00711EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/12/04 1:15 p.m.2 views

CVE-2023-48800

In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub417338 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...

9.8CVSS7.4AI score0.00711EPSS
Exploits1References3
OSV
OSV
added 2023/12/04 1:15 p.m.2 views

CVE-2023-48800

In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub417338 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...

9.8CVSS5.9AI score0.00711EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/12/04 12:0 a.m.17 views

CVE-2023-48800

In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub417338 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...

9.8AI score0.00711EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/12/01 11:15 p.m.1 views

CVE-2023-48801

In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub415534 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...

9.8CVSS7.4AI score0.0027EPSS
Exploits1References3
CVE
CVE
added 2023/12/01 12:0 a.m.33 views

CVE-2023-48801

The CVE-2023-48801 entry describes a command-execution vulnerability in TOTOLINK X6000R_Firmware (V9.4.0cu.852_B20230719). The affected component is the shttpd process; specifically sub_415534, which takes fields from the front-end, concatenates them via snprintf, and passes the result to CsteSys...

9.8CVSS9.4AI score0.0027EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/12/01 12:0 a.m.20 views

CVE-2023-48801

In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub415534 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...

9.8AI score0.0027EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/06/14 12:0 a.m.2 views

PT-2025-54008

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx driver within the Linux kernel where an array index may go out of bounds. Specifically, the array vha-host str of size 16 may be accessed with index values...

5.7CVSS6.2AI score0.00029EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2023/05/16 8:56 a.m.0 views

kernel: ASoC: Intel: avs: Fix potential buffer overflow by snprintf()

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential buffer overflow by snprintf snprintf returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in a buffer overflow although it's...

7.8CVSS6.5AI score0.00078EPSS
Exploits0References5
Rows per page
Query Builder