Lucene search
+L

8451 matches found

Prion
Prion
added 2022/01/13 10:15 p.m.22 views

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

6.8CVSS7.8AI score0.02041EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2022/01/13 10:15 p.m.18 views

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

6.8CVSS7.8AI score0.01937EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2022/01/13 10:15 p.m.24 views

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

6.8CVSS7.8AI score0.02041EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2022/01/13 10:15 p.m.23 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigg...

8.3CVSS8.9AI score0.0152EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/13 9:44 p.m.38 views

CVE-2021-34980

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAPLOGINTOKEN...

8.8CVSS9AI score0.01372EPSS
SaveExploits0References2
CVE
CVE
added 2022/01/13 9:44 p.m.78 views

CVE-2021-34978

CVE-2021-34978 affects NETGEAR R6260 routers with firmware 1.1.0.78_1.0.1. The flaw resides in setupwizard.cgi and allows a crafted SOAP request to overflow a fixed-length stack-based buffer, enabling remote code execution with root privileges. The attack is network-adjacent, requires no authenti...

8.8CVSS8.9AI score0.0152EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/01/13 9:44 p.m.64 views

CVE-2021-34941

Bentley View vulnerable to a stack-based buffer overflow in JT file parsing (CVE-2021-34941). Affected product: Bentley View 10.15.0.75. Root cause: improper validation of the length of untrusted JT-file data prior to copying to a stack-based buffer, enabling remote code execution in the context ...

7.8CVSS7.8AI score0.02041EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2022/01/13 9:44 p.m.31 views

CVE-2021-34925

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS8AI score0.01937EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/01/13 9:43 p.m.37 views

CVE-2021-34892

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS8AI score0.02041EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:0 a.m.27 views

WECON LeviStudioU UMP File Parsing Alarm Tag bitaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.6AI score0.02743EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:0 a.m.42 views

Fatek Automation WinProladder SPF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.02091EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:0 a.m.25 views

WECON LeviStudioU UMP File Parsing Trend Tag WordAddr12 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.6AI score0.02743EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/01/12 12:0 a.m.66 views

Juniper Junos OS Multiple Vulnerabilities (JSA11289)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11289 advisory. - curl 7.1.1 to and including 7.75.0 is vulnerable to an Exposure of Private Personal Information to an Unauthorized Actor by leaking credentials in the HTTP Refere...

8.1CVSS7.6AI score0.60122EPSS
SaveExploits5References6
Tenable Nessus
Tenable Nessus
added 2022/01/12 12:0 a.m.30 views

Juniper Junos OS Vulnerability (JSA11284)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11284 advisory. - A Stack-based Buffer Overflow vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networke...

7.5CVSS7.4AI score0.00945EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/10 2:10 p.m.38 views

CVE-2021-20046

A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service DoS and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions...

8.8CVSS0.01939EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/01/07 3:0 a.m.36 views

CVE-2021-20048

A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service DoS and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions...

8.9AI score0.01939EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/01/06 6:15 a.m.42 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS6.6AI score0.08969EPSS
SaveExploits1References3
Prion
Prion
added 2022/01/06 6:15 a.m.154 views

Stack overflow

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

4.3CVSS6AI score0.08969EPSS
SaveExploits1References2Affected Software2
AlpineLinux
AlpineLinux
added 2022/01/06 5:55 a.m.75 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS6.1AI score0.08969EPSS
SaveExploits1
ICS
ICS
added 2022/01/06 12:0 a.m.38 views

Omron CX-One

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-One Vulnerabilities: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow arbitrary code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The...

7.8CVSS8.3AI score0.09271EPSS
SaveExploits0References5
Rows per page
Query Builder