16024 matches found
CVE-2025-1163: Stack-based Buffer Overflow
A vulnerability classified as critical was found in code-projects Vehicle Parking Management System 1.0. This vulnerability affects the function login of the component Authentication. The manipulation of the argument username leads to stack-based buffer overflow. An attack has to be approached...
Adobe Illustrator < 28.7.4 / 29.0.0 < 29.2.1 Multiple Arbitrary code execution (APSB25-11)
The version of Adobe Illustrator installed on the remote Windows host is prior to 28.7.4, 29.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-11 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code execution CVE-2025-21163 -...
CVE-2025-1163
CVE-2025-1163 affects code-projects Vehicle Parking Management System 1.0, specifically the Authentication.login function. The root cause is manipulation of the username argument which leads to a stack-based buffer overflow . Exploitation is described as local, with public disclosure of the explo...
CVE-2024-46435: Stack-based Buffer Overflow
A stack overflow vulnerability in the Tenda W18E V16.01.0.81625 web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. This vulnerability occurs due to improper input validation when handling user-supplied data in the...
Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1158)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CBL Mariner 2.0 Security Update: vim (CVE-2024-22667)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-22667 advisory. - Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to...
Security Bulletin: Vulnerabilities in SnakeYAML affects wtsonx.data
Summary SnakeYAML is vulnerable to a denial of service attacks and to execute arbitrary code on the system attacks. These could affect watsonx.data. Vulnerability Details CVEID:CVE-2022-38749 DESCRIPTION: SnakeYAML is vulnerable to a denial of service, caused by a stack-overflow in parsing YAML...
PT-2025-7100
Name of the Vulnerable Software and Affected Versions D-Link DIR-853 version 1.20B07 Description A stack-based buffer overflow issue was discovered in the D-Link DIR-853 via the AccountPassword parameter in the SetSysEmailSettings module. This issue can lead to remote code execution...
PT-2025-7098
Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version 1.20B07 Description: A stack-based buffer overflow issue was discovered via the PSK parameter in the SetQuickVPNSettings module. This issue can be exploited, potentially leading to unauthorized access or control...
PT-2025-7103
Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version FW1.20B07 Description: A stack-based buffer overflow issue was discovered via the Password parameter in the SetQuickVPNSettings module. This allows for potential exploitation. No information is provided about the...
CVE-2025-0282
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution...
CVE-2025-0349
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...
CVE-2022-3085
Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based buffer overflow which may allow an attacker to execute arbitrary code...
CVE-2022-41664
A vulnerability has been identified in JT2Go All versions V14.1.0.4, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.7, Teamcenter Visualization V14.0 All versions V14.0.0.3, Teamcenter Visualization V14.1 All versions V14.1.0.4. The...
CVE-2022-41030
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
CVE-2022-41027
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
CVE-2022-41001
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
CVE-2022-36279
A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...