Lucene search
+L

16905 matches found

Positive Technologies
Positive Technologies
•added 2022/03/09 12:00 a.m.•8 views

PT-2022-2223

Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 20190826 2.3.8 Description A Buffer Overflow issue exists in the /cloud config/router post/check reg verify code function, which could allow a remote malicious user to execute arbitrary code via a crafted post request...

10CVSS0.02576EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/03/09 12:00 a.m.•5 views

PT-2022-2270

Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 2.3.8 Description A Buffer Overflow issue exists in the /cloud config/router post/login feature, allowing malicious users to execute arbitrary code on the system via a crafted post request. This is caused by a stack-bas...

10CVSS0.02576EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/03/08 12:00 a.m.•5 views

PT-2022-2326

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 22.2 and earlier Adobe After Effects versions 18.4.4 and earlier Description The issue is related to a Stack-based Buffer Overflow that could result in arbitrary code execution in the context of the current user...

9.3CVSS0.03949EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/03/07 12:00 a.m.•8 views

PT-2022-17515

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD version 2022 Description The issue arises from a maliciously crafted JT file that can cause an out-of-bounds write while being parsed, potentially leading to arbitrary code execution. This can be exploited through a stack-base...

7.8CVSS0.01603EPSS
SaveExploits0References5
Mend
Mend
•added 2022/03/06 12:00 a.m.•9 views

CVE-2022-26496

In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBDOPTINFO or NBDOPTGO message with an large value as the length of the name...

9.8CVSS0.03592EPSS
SaveExploits2References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/06 12:00 a.m.•8 views

CVE-2022-26496: Out-of-bounds Write

In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBDOPTINFO or NBDOPTGO message with an large value as the length of the name...

9.8CVSS8.5AI score0.03592EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2022/03/05 12:00 a.m.•45 views

SUSE SLES12 Security Update : zsh (SUSE-SU-2022:0733-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0733-1 advisory. - zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function. A local attacker...

7.8CVSS9.4AI score0.0198EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2022/03/05 12:00 a.m.•69 views

openSUSE 15 Security Update : mariadb (openSUSE-SU-2022:0731-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0731-1 advisory. - getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 -...

7.8CVSS7.5AI score0.00694EPSS
SaveExploits8References29
NVD
NVD
•added 2022/03/04 8:15 p.m.•37 views

CVE-2022-25106

D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgimain. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

7.1CVSS0.08588EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/04 12:00 a.m.•8 views

CVE-2022-25106: Out-of-bounds Write

D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgimain. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

7.1CVSS6.5AI score0.08588EPSS
SaveExploits1References2
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•146 views

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or...

10CVSS8.8AI score0.72458EPSS
SaveIn wildExploits8
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•64 views

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or...

10CVSS7.3AI score0.09747EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•75 views

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or...

10CVSS7.3AI score0.14863EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•77 views

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or...

10CVSS7.3AI score0.05655EPSS
SaveIn wildExploits0
Positive Technologies
Positive Technologies
•added 2022/03/01 12:00 a.m.•8 views

PT-2022-38138

Уязвимость функции genpd remove модуля drivers/base/power/domain.c драйвера поддержки шинных устройства ядра операционной системы Linux связана с переполнением буфера на основе стека. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

5.5CVSS0.00268EPSS
SaveExploits0References11
OpenVAS
OpenVAS
•added 2022/02/27 12:00 a.m.•53 views

Debian: Security Advisory (DLA-2929-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.6AI score0.01667EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2022/02/26 12:00 a.m.•32 views

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1260)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.01708EPSS
SaveExploits3References2
NVD
NVD
•added 2022/02/25 7:15 p.m.•37 views

CVE-2022-25170

The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS0.00973EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/02/25 6:10 p.m.•41 views

CVE-2022-25170 ICSA-22-055-01 FATEK Automation FvDesigner

The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00973EPSS
SaveExploits0References1
CVE
CVE
•added 2022/02/25 6:10 p.m.•135 views

CVE-2022-25170

CVE-2022-25170 affects FATEK Automation FvDesigner. The vulnerability is a stack-based buffer overflow while processing project files, enabling arbitrary code execution. Affected product/version: FvDesigner versions 1.5.100 and prior. Impact: potential for high-severity code execution; CVSS v3.1 ...

7.8CVSS8AI score0.00973EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder