Lucene search
K

8440 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.21 views

Omron CX-One CX-Position NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS5.7AI score0.01985EPSS
Exploits0References1
NVD
NVD
added 2022/04/01 11:15 p.m.29 views

CVE-2022-26419

Omron CX-Position versions 2.5.3 and prior is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code...

7.8CVSS0.01985EPSS
Exploits0References5
Prion
Prion
added 2022/04/01 11:15 p.m.19 views

Stack overflow

Omron CX-Position versions 2.5.3 and prior is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code...

6.8CVSS7.9AI score0.01985EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2022/04/01 10:17 p.m.16 views

CVE-2021-32976 Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow

Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code...

9.8CVSS9.9AI score0.02618EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/04/01 12:0 a.m.32 views

openSUSE 15 Security Update : abcm2ps (openSUSE-SU-2022:0100-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0100-1 advisory. - abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculatebeam at draw.c. CVE-2021-32434 - Stack-based...

6.5CVSS6.5AI score0.01642EPSS
Exploits3References8
ICS
ICS
added 2022/03/31 12:0 a.m.42 views

Fuji Electric Alpha5

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Fuji Electric Equipment: Alpha5 Vulnerabilities: Access of Uninitialized Pointer, Out-of-bound Read, Stack-based Buffer Overflow, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these...

7.8CVSS6.9AI score0.01105EPSS
Exploits0References5
Cvelist
Cvelist
added 2022/03/30 7:55 p.m.19 views

CVE-2019-12266 Stack buffer overflow in Wyze Cam Pan v2, Cam v2 and Cam v3

Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32...

7.6CVSS9.6AI score0.012EPSS
Exploits0References1
Redos
Redos
added 2022/03/29 12:0 a.m.43 views

ROS-20220329-04

Vulnerability in nbd network block device implementation, related to stack-based buffer overflow during NBDOPTINFO or NBDOPTGO messages. Exploitation of the vulnerability could allow an attacker, acting remotely and not authenticated, to pass specially crafted data to an application, causing a...

9.8CVSS9.7AI score0.0347EPSS
Exploits3
ICS
ICS
added 2022/03/29 12:0 a.m.84 views

Omron CX-Position

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-Position Vulnerabilities: Stack-based Buffer Overflow, Improper Restriction of Operations Within the Bounds of a Memory Buffer, Use After Free, Out-of-bounds Write 2. RISK EVALUATION Successful...

7.8CVSS8.6AI score0.01985EPSS
Exploits0References4
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/28 12:0 a.m.22 views

Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control UAC feature...

7.8CVSS5.6AI score0.08661EPSS
In wildExploits2
Cvelist
Cvelist
added 2022/03/25 11:5 p.m.34 views

CVE-2022-22274

A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service DoS or potentially results in code execution in the firewall...

10AI score0.57324EPSS
Exploits3References1
SonicWall
SonicWall
added 2022/03/24 11:31 p.m.18 views

Unauthenticated Stack-Based Buffer Overflow Vulnerability In SonicOS

A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service DoS or potentially results in code execution in the firewall.SonicWall PSIRT is not aware of active exploitation in the wild. No reports of a PoC have be...

9.4CVSS10AI score0.57324EPSS
Exploits3
Mageia
Mageia
added 2022/03/24 9:3 a.m.37 views

Updated abcm2ps packages fix security vulnerability

abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculatebeam at draw.c. CVE-2021-32434 Stack-based buffer overflow in the function getkey in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service DoS via unspecified vectors. CVE-2021-324...

6.5CVSS6AI score0.01642EPSS
Exploits3References2
Zero Day Initiative
Zero Day Initiative
added 2022/03/23 12:0 a.m.33 views

(Pwn2Own) Netatalk setfilparams Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setfilparams function. The issue results from the lack of proper validation of the length o...

9.8CVSS4AI score0.04446EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2022/03/21 8:36 a.m.24 views

CVE-2022-0194

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

9.8CVSS7.8AI score0.04409EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2022/03/21 8:36 a.m.53 views

CVE-2022-23125

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the copyapplfile function. When parsing the len element, the process does not properly validate...

9.8CVSS7.8AI score0.04354EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2022/03/21 12:0 a.m.29 views

EulerOS 2.0 SP5 : fuseiso (EulerOS-SA-2022-1319)

According to the versions of the fuseiso package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the isofsrealreadzf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service...

7.3CVSS8.4AI score0.02809EPSS
Exploits2References3
CNNVD
CNNVD
added 2022/03/18 12:0 a.m.5 views

Canon imageCLASS MF644Cdw 10.02 printers 缓冲区错误漏洞

Canon imageCLASS MF644Cdw is an intelligent and efficient 3-in-1 color multifunction printer from Canon Japan. A security vulnerability exists in Canon imageCLASS MF644Cdw 10.02 printers, which originates from a failure to properly validate the length of user-supplied data before copying it to a...

9.8CVSS8.3AI score0.02649EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2022/03/18 12:0 a.m.67 views

(Pwn2Own) Canon imageCLASS MF644Cdw privet Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of proper...

8.8CVSS5AI score0.0112EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/16 12:0 a.m.47 views

Siemens Simcenter Femap BDF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.7AI score0.01362EPSS
Exploits0References1
Rows per page
Query Builder