Lucene search
+L

13439 matches found

CVE
CVE
added 2023/05/15 9:49 a.m.77 views

CVE-2022-47386

CVE-2022-47386 involves a stack-based out-of-bounds write in the CmpTraceMgr component of CODESYS V3. The vulnerability affects multiple CODESYS products/versions and, after authentication, specifically crafted requests can write attacker-controlled data to the stack, potentially causing a denial...

8.8CVSS9AI score0.01361EPSS
SaveExploits0References1Affected Software17
CVE
CVE
added 2023/05/15 9:47 a.m.62 views

CVE-2022-47385

CVE-2022-47385 affects CODESYS V3 runtime components (notably CmpAppForce) across multiple products/versions. After authentication, a crafted request can trigger a stack-based out-of-bounds write in CmpAppForce, risking denial-of-service, memory overwrite, or remote code execution. The related EN...

8.8CVSS9AI score0.01361EPSS
SaveExploits0References1Affected Software17
Cvelist
Cvelist
added 2023/05/15 9:47 a.m.26 views

CVE-2022-47385 CODESYS: Multiple products prone to stack based out-of-bounds write

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

8.8CVSS9.2AI score0.01361EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/15 9:46 a.m.74 views

CVE-2022-47384

CVE-2022-47384 affects CODESYS V3 CMPtraceMgr (and related stack-based overflow variants) across multiple products. After authentication, crafted requests can cause a stack-based out-of-bounds write, enabling denial of service, memory corruption, or remote code execution. Public discussions and a...

8.8CVSS8.9AI score0.01334EPSS
SaveExploits0References1Affected Software17
Cvelist
Cvelist
added 2023/05/15 9:46 a.m.29 views

CVE-2022-47384 CODESYS: Multiple products prone to stack based out-of-bounds write

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

8.8CVSS9.2AI score0.01334EPSS
SaveExploits0References1
Snyk
Snyk
added 2023/05/15 9:45 a.m.2 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow due to a segmentation violation in the findKeyParent function in PdfDictionary.cpp. Remediation Upgrade podofo to version 0.10.4 or higher. References - GitHub Commit - GitHub Issue...

8.8CVSS7AI score0.00704EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/05/15 9:44 a.m.28 views

CVE-2022-47383 CODESYS: Multiple products prone to stack based out-of-bounds write

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

8.8CVSS9.2AI score0.01334EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/15 9:42 a.m.6 views

CVE-2022-47382 CODESYS: Multiple products prone to stack based out-of-bounds write

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

8.8CVSS7.9AI score0.01334EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/05/15 9:42 a.m.27 views

CVE-2022-47382 CODESYS: Multiple products prone to stack based out-of-bounds write

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

8.8CVSS9.2AI score0.01334EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/15 9:42 a.m.71 views

CVE-2022-47382

CVE-2022-47382 involves an authenticated remote stack-based out-of-bounds write in the CMP TraceMgr component of CODESYS V3, enabling denial-of-service, memory overwrite, or remote code execution across multiple versions. The ICSA/CISA advisories and related analyses confirm exploitation requires...

8.8CVSS8.9AI score0.01334EPSS
SaveExploits0References1Affected Software17
Vulnrichment
Vulnrichment
added 2023/05/15 9:41 a.m.7 views

CVE-2022-47381 CODESYS: Multiple products prone to stack based out-of-bounds write

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

8.8CVSS7.9AI score0.01334EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/15 9:41 a.m.75 views

CVE-2022-47381

CVE-2022-47381 affects the CMPapp component in CODESYS V3 (stack-based buffer overflow). After authentication, crafted requests can cause the CMPapp to write to memory/stack, enabling DoS, memory overwriting, or remote code execution. Rockwell/CODESYS mitigations: upgrade to CODESYS 3.5.19.2 or n...

8.8CVSS8.9AI score0.01334EPSS
SaveExploits0References1Affected Software17
CVE
CVE
added 2023/05/15 9:40 a.m.65 views

CVE-2022-47380

CVE-2022-47380 describes a stack-based out-of-bounds write in CMPapp (and related CMP components) within CODESYS V3 across multiple versions. After authentication, crafted requests can write to stack memory, enabling denial-of-service, memory overwriting, or remote code execution. Connected sourc...

8.8CVSS8.9AI score0.01334EPSS
SaveExploits0References1Affected Software17
Tenable Nessus
Tenable Nessus
added 2023/05/13 12:0 a.m.36 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-ujson (SUSE-SU-2023:2134-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2134-1 advisory. - CVE-2021-45958: Fixed a stack-based buffer overflow in BufferAppendIndentUnchecked bsc1194261. Tenable...

5.5CVSS6.8AI score0.0155EPSS
SaveExploits1References4
NVD
NVD
added 2023/05/12 9:15 a.m.52 views

CVE-2023-2676

A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goForm/aspForm. The manipulation of the argument go leads to stack-based buffer overflow. The exploit has been disclosed to the public and may ...

9.8CVSS6.7AI score0.00982EPSS
SaveExploits1References3
Prion
Prion
added 2023/05/12 9:15 a.m.23 views

Stack overflow

A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goForm/aspForm. The manipulation of the argument go leads to stack-based buffer overflow. The exploit has been disclosed to the public and may ...

5.2CVSS9.4AI score0.00982EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/05/12 9:0 a.m.57 views

CVE-2023-2676 H3C R160 aspForm stack-based overflow

A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goForm/aspForm. The manipulation of the argument go leads to stack-based buffer overflow. The exploit has been disclosed to the public and may ...

5.5CVSS9.8AI score0.00982EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/05/12 9:0 a.m.12 views

CVE-2023-2676 H3C R160 aspForm stack-based overflow

A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goForm/aspForm. The manipulation of the argument go leads to stack-based buffer overflow. The exploit has been disclosed to the public and may ...

5.5CVSS7.3AI score0.00982EPSS
SaveExploits1References3
CVE
CVE
added 2023/05/12 9:0 a.m.56 views

CVE-2023-2676

CVE-2023-2676 affects H3C R160 V1004004. The issue is a stack-based buffer overflow in the /goForm/aspForm handler caused by manipulation of the go argument. The vulnerability is classified as CRITICAL (CVSS 3.1: 9.8) with network attack vector, high impact to confidentiality, integrity, and avai...

9.8CVSS7.7AI score0.00982EPSS
SaveExploits1References3Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.15 views

Adobe Dimension SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.8AI score
SaveExploits0References1
Rows per page
Query Builder