Lucene search
K

8440 matches found

Mageia
Mageia
added 2021/12/03 6:45 p.m.49 views

Updated vim packages fix security vulnerability

Multiple Heap-based Buffer Overflows Stack-based Buffer overflows and a use after free...

9.3CVSS7.2AI score0.02075EPSS
Exploits8References5
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.13 views

OpenText Brava! Desktop DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.8AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.12 views

OpenText Brava! Desktop DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.8AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/02 12:0 a.m.24 views

Delta Industrial Automation CNCSoft DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.1AI score0.09594EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/12/02 12:0 a.m.41 views

RHEL 6 : dhcp (RHSA-2021:2419)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2419 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...

7.4CVSS8AI score0.06118EPSS
Exploits1References4
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.20 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03517EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.26 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03517EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.27 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03517EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.19 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.20 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/11/29 12:0 a.m.38 views

Debian DLA-2832-1 : opensc - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2832 advisory. - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c. CVE-2019-15945 - OpenSC before 0.20.0-rc1 has ...

6.4CVSS6.8AI score0.00438EPSS
Exploits0References16
Veracode
Veracode
added 2021/11/24 2:30 a.m.15 views

Stack-based Buffer Overflow

suricata:sid is vulnerable to stack-based buffer overflow attacks. An attacker is able to send a certain sequence of segments allowing TCP evasion via a crafted TCP/IP stack resulting in buffer overflows...

9.8CVSS5.1AI score0.01552EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2021/11/22 8:15 p.m.8 views

CVE-2021-42705

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS0.00973EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/11/22 7:6 p.m.11 views

CVE-2021-42705 WECON PLC Editor

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00973EPSS
Exploits0References1
Veracode
Veracode
added 2021/11/21 4:47 a.m.28 views

Remote Code Execution (RCE)

htmldoc is vulnerable to remote code execution. The vulnerability exists due to a stack-based buffer overflow in imageloadbmp in HTMLDOC...

7.8CVSS2.7AI score0.07349EPSS
Exploits4References6Affected Software1
NVD
NVD
added 2021/11/18 3:15 p.m.18 views

CVE-2021-0657

In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672103; Issue ID: ALPS05672103...

6.7CVSS0.00125EPSS
Exploits0References1
CVE
CVE
added 2021/11/18 2:57 p.m.48 views

CVE-2021-0657

CVE-2021-0657 affects apusys and is caused by a stack-based buffer overflow leading to an out-of-bounds write. This can enable local escalation to System privileges without user interaction. The vulnerability context is supported by multiple sources (e.g., Red Hat, NVD) and lists a patch referenc...

6.7CVSS6.8AI score0.00125EPSS
Exploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/11/18 12:0 a.m.29 views

WECON PLC Editor WCP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS7.7AI score0.00973EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2021/11/17 6:15 p.m.22 views

CVE-2021-33479

A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measurepitch in pgm2asc.c...

7.8CVSS7.4AI score0.01141EPSS
Exploits1References2
CVE
CVE
added 2021/11/17 12:0 a.m.52 views

CVE-2021-33479

CVE-2021-33479 affects GOCR (gocr) up to version 0.53-20200802, with a stack-based buffer overflow in measure_pitch() within pgm2asc.c. The connected Nessus/Gentoo/GSLAs references corroborate a vulnerable GOCR stack overflow vector; no public fix is detailed in the provided documents. Gentoo GLS...

7.8CVSS7.7AI score0.01141EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder