PT-2021-3877

Name of the Vulnerable Software and Affected Versions DOPSoft versions 4.00.11 and prior Description A stack-based buffer overflow issue may be exploited by processing a specially crafted project file, allowing an attacker to execute arbitrary code. This issue is related to the processing of...

Delta Electronics DOPSoft (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DOPSoft Vulnerability: Stack-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-238-04 Delta Electronics DOPSoft that was...

CVE-2020-18971

CVE-2020-18971 concerns PoDoFo v0.9.6, where a stack-based buffer overflow in the PdfDictionary.cpp:65 path can be exploited to cause a denial of service. The vulnerability affects the PoDoFo core library component used for PDF parsing/manipulation. The provided connected documents confirm the ex...

CVE-2020-18971

Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'...

CVE-2020-18971: Out-of-bounds Write

Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'...

CVE-2021-28606

CVE-2021-28606 concerns Adobe After Effects 18.2 and earlier. The vulnerability is a stack-based buffer overflow that occurs while parsing a specially crafted file, enabling arbitrary code execution in the context of the current user. An unauthenticated attacker would need the victim to open a ma...

CVE-2021-28606: Stack-based Buffer Overflow

Adobe After Effects version 18.2 and earlier is affected by a Stack-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-36005: Stack-based Buffer Overflow

Adobe Photoshop versions 21.2.9 and earlier and 22.4.2 and earlier is affected by a stack overflow vulnerability due to insecure handling of a crafted PSD file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a...

Security update for libsndfile (critical)

openSUSE Security Update: Security update for libsndfile Announcement ID: openSUSE-SU-2021:1166-1 Rating: critical References: 1100167 1116993 1117954 1188540 Cross-References: CVE-2018-13139 CVE-2018-19432 CVE-2018-19758 CVE-2021-3246 CVSS scores: CVE-2018-13139 NVD : 8.8...

D-Link DAP-2020 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the webproc endpoint, which listens on TCP port 80 by default. The iss...

CVE-2021-34730: Stack-based Buffer Overflow

A vulnerability in the Universal Plug-and-Play UPnP service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service DoS...

PT-2021-7367

Name of the Vulnerable Software and Affected Versions WECON LeviStudioU versions 2019-09-21 and prior Description The issue is caused by a stack-based buffer overflow. Exploitation of this issue may allow a remote attacker to execute arbitrary code. Recommendations For WECON LeviStudioU versions...

Denial Of Service (DoS)

fig2dev is vulnerable to denial of service. A stack-based buffer overflow in the genpstrxtext component in genpstricks.c allows attackers to cause a denial of service DOS by converting a xfig file into pstricks format...

CVE-2021-21815

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

CVE-2021-21815

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

CVE-2021-21812

CVE-2021-21812 describes a stack-based buffer overflow in AT&T Labs’ Xmill 0.7, specifically in the command-line parsing HandleFileArg function. The vulnerability stems from copying user-controlled filepattern data into a fixed-size buffer with strcpy, allowing a path provided on the command line...

CVE-2021-21812: Out-of-bounds Write

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’ Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

Debian: Security Advisory (DLA-2739-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-17621

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 7.4.2h Brocade Fabric OS versions prior to 8.2.0 CBN4 Brocade Fabric OS versions prior to 8.2.3 Brocade Fabric OS versions prior to 9.0.1a Description: The command ipfilter in Brocade Fabric OS uses an unsa...

CVE-2021-27790: Out-of-bounds Write

The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0CBN4, and v7.4.2h uses unsafe string function to process user input. Authenticated attackers can abuse this vulnerability to exploit stack-based buffer overflows, allowing execution of arbitrary code as...