824 matches found
Stack overflow
Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions...
CVE-2024-22667
Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions...
CVE-2024-22667
Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions...
CVE-2024-22667
Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions...
CVE-2024-22916
In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub40E700 function within the cgibin is susceptible to stack overflow...
CVE-2024-22916
In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub40E700 function within the cgibin is susceptible to stack overflow...
Stack overflow
In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub40E700 function within the cgibin is susceptible to stack overflow...
CVE-2024-22916: Out-of-bounds Write
In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub40E700 function within the cgibin is susceptible to stack overflow...
CVE-2024-22916
In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub40E700 function within the cgibin is susceptible to stack overflow...
D-LINK Go-RT-AC750 Security Vulnerability
The D-Link GO-RT-AC750 is a wireless dual-band simple router from China-based AUO D-Link. A security vulnerability exists in D-LINK Go-RT-AC750 v101b03, which originates from the sprintf function in the sub40E700 function in cgibin that is prone to a stack overflow...
CVE-2024-22916
CVE-2024-22916 affects D-LINK Go-RT-AC750 v101b03. The root cause is a stack overflow in the sprintf usage inside the sub_40E700 function in cgibin. Impact described as high/confidentiality, integrity, and availability disruptions (base score 9.8). Connected sources indicate possible remote comma...
CVE-2024-22087
route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution...
CVE-2024-22087: Out-of-bounds Write
route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution...
CVE-2018-17878
Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf function...
Buffer overflow
Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf function...
CVE-2018-17878
Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf function...
CVE-2018-17878: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf function...
CVE-2018-17878
CVE-2018-17878 is a buffer overflow vulnerability in ABUS TVIP cameras. The issue arises from using the C sprintf() function on crafted input, enabling an attacker to potentially gain control of the program. The initial CVE description confirms the vulnerability vector and impact as stated, with ...
Buffer Overflow
libzephyr.so is vulnerable to Buffer Overflow. The vulnerability is caused by the insecure use of the sprintf function. If the path parameter is PATHMAX characters long, the sprintf function will write one NULL byte off the stack variable mountpath. When the path parameter is attacker-controlled...
Cross-site Scripting
pimcore/admin-ui-classic-bundle is vulnerable to Cross-site Scripting. The vulnerability is due to sprintf function in functions.js which does not perform any escaping or sanitization of the subst and str value itself. This can lead to Cross-Site Scripting vulnerabilities if the str is later...