Lucene search
K

7301 matches found

CVE
CVE
added 2021/12/07 4:2 p.m.43 views

CVE-2021-37021

CVE-2021-37021 — Huawei HarmonyOS kernel stack-based buffer overflow is documented to potentially cause an out-of-bounds read. The vulnerability is described across multiple sources as affecting Huawei HarmonyOS (kernel module) with a stack-based overflow that can be exploited over network access...

9.1CVSS9.1AI score0.00774EPSS
Exploits0References1Affected Software3
CVE
CVE
added 2021/12/07 4:1 p.m.44 views

CVE-2021-37020

CVE-2021-37020 describes a stack-based buffer overflow in Huawei HarmonyOS device software (Huawei Smartphone), affecting the Kernel module. The vulnerability can lead to an out-of-bounds read. Documented impact is based on public CVSS data (CVSS‑3.1: Network, Low attack complexity, Privileges Re...

9.1CVSS9.1AI score0.00752EPSS
Exploits0References1Affected Software3
CVE
CVE
added 2021/12/07 4:1 p.m.47 views

CVE-2021-37014

CVE-2021-37014 is a stack-based buffer overflow in Huawei HarmonyOS Kernel module affecting Huawei devices. Exploitation can render the device unavailable, with CVSS indicating high availability impact. The linked sources describe the vulnerability across HarmonyOS smartphone deployments, but rem...

7.5CVSS7.5AI score0.00665EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/12/07 4:1 p.m.46 views

CVE-2021-37011

CVE-2021-37011 concerns Huawei HarmonyOS, with a stack-based buffer overflow in the Kernel module that can lead to an out-of-bounds read. The available documents describe the affected platform as HarmonyOS and the vulnerability class as a kernel stack overflow, but do not provide precise technica...

9.4CVSS9.1AI score0.00901EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/07 4:1 p.m.18 views

CVE-2021-37011

There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read...

9.4AI score0.00901EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.14 views

Tencent WeChat WXAM Decoder Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...

8.8CVSS3.9AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.13 views

OpenText Brava! Desktop DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.8AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/12/02 12:0 a.m.41 views

RHEL 6 : dhcp (RHSA-2021:2419)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2419 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...

7.4CVSS8AI score0.06118EPSS
Exploits1References4
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.26 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03517EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.20 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03517EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.19 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/11/29 12:0 a.m.38 views

Debian DLA-2832-1 : opensc - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2832 advisory. - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c. CVE-2019-15945 - OpenSC before 0.20.0-rc1 has ...

6.4CVSS6.8AI score0.00438EPSS
Exploits0References16
Veracode
Veracode
added 2021/11/24 2:30 a.m.15 views

Stack-based Buffer Overflow

suricata:sid is vulnerable to stack-based buffer overflow attacks. An attacker is able to send a certain sequence of segments allowing TCP evasion via a crafted TCP/IP stack resulting in buffer overflows...

9.8CVSS5.1AI score0.01552EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2021/11/22 8:15 p.m.8 views

CVE-2021-42705

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS0.00973EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/11/22 7:6 p.m.11 views

CVE-2021-42705 WECON PLC Editor

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00973EPSS
Exploits0References1
Veracode
Veracode
added 2021/11/21 4:47 a.m.27 views

Remote Code Execution (RCE)

htmldoc is vulnerable to remote code execution. The vulnerability exists due to a stack-based buffer overflow in imageloadbmp in HTMLDOC...

7.8CVSS2.7AI score0.07349EPSS
Exploits4References6Affected Software1
NVD
NVD
added 2021/11/18 3:15 p.m.18 views

CVE-2021-0657

In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672103; Issue ID: ALPS05672103...

6.7CVSS0.00125EPSS
Exploits0References1
CVE
CVE
added 2021/11/18 2:57 p.m.47 views

CVE-2021-0657

CVE-2021-0657 affects apusys and is caused by a stack-based buffer overflow leading to an out-of-bounds write. This can enable local escalation to System privileges without user interaction. The vulnerability context is supported by multiple sources (e.g., Red Hat, NVD) and lists a patch referenc...

6.7CVSS6.8AI score0.00125EPSS
Exploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2021/11/17 6:15 p.m.22 views

CVE-2021-33479

A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measurepitch in pgm2asc.c...

7.8CVSS7.4AI score0.01141EPSS
Exploits1References2
CVE
CVE
added 2021/11/17 12:0 a.m.51 views

CVE-2021-33479

CVE-2021-33479 affects GOCR (gocr) up to version 0.53-20200802, with a stack-based buffer overflow in measure_pitch() within pgm2asc.c. The connected Nessus/Gentoo/GSLAs references corroborate a vulnerable GOCR stack overflow vector; no public fix is detailed in the provided documents. Gentoo GLS...

7.8CVSS7.7AI score0.01141EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder