PT-2020-13879

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions through 2.06B04 Description The issue is a stack-based buffer overflow in the ssi binary, allowing an authenticated user to execute arbitrary code. This can be achieved by sending a POST request to the "apply.cgi"...

PT-2020-13884

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions through 2.06B04 Description The issue is a stack-based buffer overflow in the ssi binary, allowing an authenticated user to execute arbitrary code. This can be achieved by sending a POST request to the "apply.cgi"...

PT-2020-13882

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions through 2.06B04 Description The issue is a stack-based buffer overflow in the ssi binary, allowing an authenticated user to execute arbitrary code. This can be achieved by sending a POST request to the "apply.cgi"...

PT-2020-13885

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions through 2.06B04 Description The issue concerns a stack-based buffer overflow in the ssi binary, allowing an unauthenticated user to execute arbitrary code. This can be achieved by sending a POST request to the "app...

CVE-2020-12019: Stack-based Buffer Overflow

WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code...

CVE-2020-14076: Out-of-bounds Write

TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action stdevconnect, stdevdisconnect, or stdevrconnect with a sufficiently long wantype key...

Stack overflow

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janussdpmerge in sdp.c has a stack-based buffer overflow...

CVE-2020-13901

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janussdpmerge in sdp.c has a stack-based buffer overflow...

CVE-2020-13901

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janussdpmerge in sdp.c has a stack-based buffer overflow...

CVE-2020-13901

The CVE-2020-13901 entry concerns janus-gateway (Janus WebRTC Server) up to version 0.10.0, where the function janus_sdp_merge in sdp.c contains a stack-based buffer overflow. The connected documents provide concrete technical details on the affected component and root cause. They do not supply a...

CVE-2020-4433

CVE-2020-4433 concerns IBM Aspera applications vulnerable to a stack-based buffer overflow caused by improper bounds checking. The vulnerability could allow a remote attacker with knowledge of the system to execute arbitrary code with root privileges or cause the server to crash. The IBM security...

PT-2020-18065

Name of the Vulnerable Software and Affected Versions IBM Aspera affected versions not specified Description The issue is caused by improper bounds checking, leading to a stack-based buffer overflow. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary cod...

PT-2020-13765

Name of the Vulnerable Software and Affected Versions janus-gateway versions through 0.10.0 Description A stack-based buffer overflow issue was discovered in the janus sdp merge function in sdp.c. This issue can be exploited due to the lack of proper validation of input data. Recommendations For...

CVE-2020-2027: Stack-based Buffer Overflow

A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions...

CVE-2020-4433: Improper Input Validation

Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to crash. IBM X-Force I...

CVE-2020-13901: Out-of-bounds Write

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janussdpmerge in sdp.c has a stack-based buffer overflow...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5715)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5715 advisory. - x86/speculation: Add SRBDS vulnerability and mitigation documentation Mark Gross Orabug: 31422209 CVE-2020-0543 - x86/speculation: Add Special Regist...

Siemens SIMATIC, SINAMICS (Update C)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SIMATIC, SINAMICS Vulnerabilities: Uncontrolled Search Path Element, Heap-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-20-161-05...

CVE-2020-13768

MiniShare before 1.4.2 is affected by a stack-based buffer overflow triggered by HTTP PUT requests, caused by improper boundary checks and enabling arbitrary code execution. Multiple sources in connected documents corroborate the vulnerability and indicate the product is discontinued. Affected so...

PT-2020-13667

🚨 CVE-2020-13768 In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to achieve arbitrary code execution, a similar issue to CVE-2018-19861, CVE-2018-19862, and CVE-2019-17601. NOTE: this product is discontinued. 🎖@cveNotify...