PT-2020-14416

Name of the Vulnerable Software and Affected Versions NETGEAR R6700 version 1.0.4.84 10.0.58 Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists within the handling of...

CVE-2020-15416: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by...

CVE-2020-10924: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

CVE-2020-15417: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. A crafted...

Debian DLA-2292-1 : milkytracker security update

Several vulnerabilities were fixed in MilkyTracker, a music tracker for composing music in the MOD and XM module file formats. CVE-2019-14464 Heap-based buffer overflow in XMFile::read CVE-2019-14496 Stack-based buffer overflow in LoaderXM::load CVE-2019-14497 Heap-based buffer overflow in...

CVE-2020-15892: Incorrect Resource Transfer Between Spheres

An issue was discovered in apply.cgi on D-Link DAP-1520 devices before 1.10b04Beta02. Whenever a user performs a login action from the web interface, the request values are being forwarded to the ssi binary. On the login page, the web interface restricts the password input field to a fixed length...

CVE-2020-14511: Stack-based Buffer Overflow

Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers versions prior to 5.4...

PT-2020-3660

Name of the Vulnerable Software and Affected Versions Moxa EDR-G902 versions prior to 5.4 Moxa EDR-G903 versions prior to 5.4 Description The issue is related to a stack-based buffer overflow in the system web server on the affected routers. This can be caused by a maliciously crafted web browser...

OPENSUSE-SU-2020:0947-1 Security update for chocolate-doom

This update for chocolate-doom to version 3.0.1 fixes the following issues: - CVE-2020-14983: Fixed a stack-based buffer overflow in the networking code boo1173595. This update was imported from the openSUSE:Leap:15.1:Update update project...

openSUSE: Security Advisory for chocolate-doom (openSUSE-SU-2020:0939-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2020-20632

Name of the Vulnerable Software and Affected Versions Realtek RTL8195AM versions prior to 2.0.6 Realtek RTL8711AM versions prior to 2.0.6 Realtek RTL8711AF versions prior to 2.0.6 Realtek RTL8710AF versions prior to 2.0.6 Description A stack-based buffer overflow issue exists in the client code...

CVE-2020-9395: Out-of-bounds Write

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer...

openSUSE: Security Advisory for chocolate-doom (openSUSE-SU-2020:0928-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-12497: Stack-based Buffer Overflow

PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

CVE-2020-12498: Stack-based Buffer Overflow

mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

CVE-2020-4044: Stack-based Buffer Overflow

The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious payload. Once the xrdp-sesman process is dead, an unprivileged attacker on the server could then proceed to start their own imposter sesman service listening on port 3350. This wi...

Debian: Security Advisory (DLA-2256-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2256-1 : libtirpc security update

It was discovered that libtiprc, a transport-independent RPC library, could be used for a denial of service or possibly unspecified other impact by a stack-based buffer overflow due to a flood of crafted ICMP and UDP packets. For Debian 8 'Jessie', this problem has been fixed in version...

CVE-2020-9555

Adobe Bridge 10.x up to and including 10.0.1 is affected by a stack-based buffer overflow (CVE-2020-9555). Exploitation could lead to arbitrary code execution. Affected component is the Bridge application (Adobe Bridge CC). The available connected sources consistently describe the issue but do no...

CVE-2020-9555: Out-of-bounds Write

Adobe Bridge versions 10.0.1 and earlier version have a stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution...