CVE-2021-45926

MDB Tools aka mdbtools 0.9.2 has a stack-based buffer overflow at 0x7ffd0c689be0 in mdbnumerictostring called from mdbxferbounddata and mdbattemptbind...

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

PYSEC-2022-25

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

mdbtools 缓冲区错误漏洞

mdbtools is MDB Tools is a group of programs that help you extract data from Microsoft Access files under various settings. A security vulnerability exists in mdbtools 0.9.2 that stems from a stack-based buffer overflow in mdbnumerictostring called from mdbxferbounddata and mdbattemptbind...

CVE-2021-45926

Removed by vendor...

CVE-2021-45926

MDB Tools aka mdbtools 0.9.2 has a stack-based buffer overflow at 0x7ffd0c689be0 in mdbnumerictostring called from mdbxferbounddata and mdbattemptbind...

CVE-2021-45926

MDB Tools (mdbtools) 0.9.2 has a stack-based buffer overflow in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind). The issue is triggered during processing of MDB files, with the offset 0x7ffd0c689be0. This CVE-2021-45926 can impact confidentiality, integrity, and avai...

CVE-2021-45927

Removed by vendor...

CVE-2021-45927

MDB Tools (mdbtools) 0.9.2 has a stack-based buffer overflow in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind). This CVE-2021-45927 is confirmed across multiple sources. The exposed component and function are stated; no exploit details are provided in the documents ...

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

CVE-2021-45958

CVE-2021-45958 affects UltraJSON (ujson) up to version 5.1.0, with a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation could crash the application by using excessive indentation. Publicly documented references include Debian LTS (DLA-2929-1) and Mageia...

CVE-2021-45959

Removed by vendor...

openSUSE 15 Security Update : c-toxcore (openSUSE-SU-2021:1640-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1640-1 advisory. - A stack-based buffer overflow in handlerequest function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 caused by an improper...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2021-2865)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2021-0596 Updated toxcore packages fix security vulnerability

stack-based buffer overflow in handlerequest in DHT.c CVE-2021-44847...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2021-2834)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QNAP NAS Buffer Overflow Vulnerability

QNAP NAS is an accessible and fast storage solution from China Weilian Technology QNAP. The QNAP NAS Surveillance Station suffers from a buffer overflow vulnerability that originates from a boundary error in the software's handling of requests, which can be exploited by an unauthenticated, remote...

EulerOS Virtualization 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2021-2834)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libjpeg-turbo all version have a stack-based buffer overflow in the 'transform' component. A remote attacker can send a...

Stack overflow

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-43556

CVE-2021-43556 affects FATEK WinProladder: versions 3.30_24518 and earlier are vulnerable to a stack-based buffer overflow while processing project files (SPF/TAB/PDW variants, per ZDI advisories). The root cause is improper validation of the length of user-supplied data copied into a stack buffe...