Lucene search
+L

17488 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•31 views

D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•328 views

D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/12/19 12:24 a.m.•16 views

CVE-2023-6314

Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file...

7.8CVSS8.2AI score0.00272EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/19 12:00 a.m.•5 views

CVE-2023-6314: Out-of-bounds Write

Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file...

7.8CVSS8AI score0.00272EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2023/12/19 12:00 a.m.•56 views

TP-Link TL-WR902AC dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR902AC routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the libcmm.so module. The issue results from the lack of proper...

6.8CVSS7.5AI score0.00537EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/17 2:15 a.m.•46 views

CVE-2023-50965

In MicroHttpServer aka Micro HTTP Server through 4398570, ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI...

9.8CVSS0.01534EPSS
SaveExploits3References2
NVD
NVD
•added 2023/12/17 1:15 a.m.•89 views

CVE-2023-6888

A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publ...

9.8CVSS0.0096EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2023/12/17 1:00 a.m.•27 views

CVE-2023-6888 PHZ76 RtspServer RtspMesaage.cpp ParseRequestLine stack-based overflow

A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publ...

6.3CVSS7AI score
SaveExploits0References6
Mend
Mend
•added 2023/12/17 1:00 a.m.•8 views

CVE-2023-6888

A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publ...

9.8CVSS0.0096EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/17 12:00 a.m.•5 views

CVE-2023-50965: Out-of-bounds Write

In MicroHttpServer aka Micro HTTP Server through 4398570, ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI...

9.8CVSS8.9AI score0.01534EPSS
SaveExploits3References2
Mend
Mend
•added 2023/12/17 12:00 a.m.•11 views

CVE-2023-50965

In MicroHttpServer aka Micro HTTP Server through 4398570, ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI...

9.8CVSS0.01534EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/17 12:00 a.m.•5 views

CVE-2023-6888: Stack-based Buffer Overflow

A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publ...

9.8CVSS7.2AI score0.0096EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•9 views

CVE-2023-33222: Stack-based Buffer Overflow

When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device...

9.8CVSS8.5AI score0.01288EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•10 views

CVE-2023-33220: Stack-based Buffer Overflow

During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device...

9.8CVSS8.5AI score0.01137EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•8 views

CVE-2023-33219: Stack-based Buffer Overflow

The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device...

9.8CVSS8.6AI score0.01137EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/12/14 6:03 p.m.•51 views

CVE-2023-40476

A stack-based buffer overflow was found in the GStreamer Plugins Bad when handling malformed files with H.265 video streams. This issue requires user interaction with the library and may allow a malicious user to cause an integer overflow before allocating the buffer, triggering a crash or code...

5.5CVSS9.6AI score0.02256EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/12/14 6:59 a.m.•31 views

CVE-2023-50268

A stack-based buffer overflow vulnerability was found in the Jq project. This issue occurs when submitting malicious input to the application, leading to an application crash and causing a denial of service...

6.2CVSS6.4AI score0.00439EPSS
SaveExploits1References7
OpenVAS
OpenVAS
•added 2023/12/14 12:00 a.m.•20 views

Huawei EulerOS: Security Advisory for file (EulerOS-SA-2023-3375)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.00677EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
•added 2023/12/14 12:00 a.m.•24 views

Microsoft Excel SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS7.1AI score0.00841EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2023/12/13 8:49 p.m.•82 views

CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.1AI score0.00439EPSS
SaveExploits1
Rows per page
Query Builder