Lucene search
+L

13425 matches found

Cvelist
Cvelist
added 2023/09/04 8:24 a.m.28 views

CVE-2023-4756 Stack-based Buffer Overflow in gpac/gpac

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...

5.9CVSS5.8AI score0.00297EPSS
SaveExploits1References2
NVD
NVD
added 2023/09/04 12:15 a.m.36 views

CVE-2023-4744

A vulnerability was found in Tenda AC8 16.03.34.06cnTDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public a...

10CVSS9.8AI score0.01667EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2023/09/04 12:0 a.m.41 views

Ivanti Avalanche Unauthenticated Stack-based Buffer Overflow (CVE-2023-32560)

Binary data ivantiavalanchecve-2023-32560.nbin...

9.8CVSS9.4AI score0.99428EPSS
SaveExploits7References2
Cvelist
Cvelist
added 2023/09/03 11:31 p.m.41 views

CVE-2023-4744 Tenda AC8 formSetDeviceName stack-based overflow

A vulnerability was found in Tenda AC8 16.03.34.06cnTDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public a...

10CVSS9.9AI score0.01667EPSS
SaveExploits1References3
CVE
CVE
added 2023/09/03 11:31 p.m.171 views

CVE-2023-4744

The CVE-2023-4744 entry concerns Tenda AC8 (firmware 16.03.34.06_cn_TDC01). The issue is a stack-based buffer overflow in the formSetDeviceName function, triggered by untrusted input, allowing remote exploitation. Multiple connected sources confirm remote exploitability and critical impact (CVE r...

10CVSS9.8AI score0.01667EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/03 11:31 p.m.12 views

CVE-2023-4744 Tenda AC8 formSetDeviceName stack-based overflow

A vulnerability was found in Tenda AC8 16.03.34.06cnTDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public a...

10CVSS7.3AI score0.01667EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
added 2023/08/31 12:0 a.m.26 views

Delta Electronics DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00245EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/31 12:0 a.m.18 views

Delta Electronics DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00245EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/31 12:0 a.m.26 views

Delta Electronics DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00245EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/31 12:0 a.m.24 views

Delta Electronics DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00245EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2023/08/29 2:16 p.m.98 views

CVE-2022-48554

A flaw was found in file, a program used to identify a particular file according to the type of data contained by the file. This issue occurs when processing a specially crafted file, causing a stack-based buffer over-read, resulting in an application crash. Mitigation Do not process untrusted...

5.5CVSS5.5AI score0.00656EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/08/29 12:0 a.m.4 views

PT-2023-8677 · Zbar +5 · Zbar +5

Name of the Vulnerable Software and Affected Versions: ZBar version 0.23.90 Description: A stack-based buffer overflow vulnerability exists in the lookup sequence function. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability...

10CVSS9.6AI score0.01787EPSS
SaveExploits0References48
AlpineLinux
AlpineLinux
added 2023/08/29 12:0 a.m.90 views

CVE-2023-40890

A stack-based buffer overflow vulnerability exists in the lookupsequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to ...

9.8CVSS9.7AI score0.01787EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2023/08/25 6:46 p.m.44 views

CVE-2020-19188

A flaw was found in the ncurses library. This issue occurs when processing a crafted terminfo database, causing a stack-based buffer overflow, resulting in an application crash. Mitigation Do not compile or decompile untrusted terminfo descriptions...

6.5CVSS6.2AI score0.01403EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:0 a.m.28 views

D-Link DAP-2622 DDP Change ID Password New Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:0 a.m.23 views

D-Link DAP-2622 DDP Reset Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:0 a.m.34 views

D-Link DAP-2622 DDP Change ID Password New Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:0 a.m.19 views

D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS6.9AI score0.00593EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:0 a.m.26 views

D-Link DAP-2622 DDP User Verification Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:0 a.m.25 views

D-Link DAP-2622 DDP Set IPv4 Address Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Rows per page
Query Builder