17314 matches found
CVE-2024-26304: Stack-based Buffer Overflow
There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of this...
CVE-2024-4192
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process...
CVE-2024-4192 Stack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2 DOPSoft
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process...
CVE-2024-4192
The CVE-2024-4192 entry concerns Delta Electronics CNCSoft-G2, specifically the DOPSoft DPAX file parsing component. The vulnerability arises from failing to validate the length of user-supplied data before copying it into a fixed-size stack-based buffer, enabling remote code execution in the con...
Low: Red Hat Security Advisory: file security update
An update for file is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Low: file security update
The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format ELF binary files, system libraries, RPM packages, and different graphics formats. Security Fixes: file:...
PT-2024-29634
Name of the Vulnerable Software and Affected Versions Delta Electronics CNCSoft-G2 affected versions not specified Description The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This allows an attacker ...
CVE-2024-4192: Stack-based Buffer Overflow
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process...
RHEL 9 : tigervnc (RHSA-2024:2616)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2616 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...
RHEL 9 : file (RHSA-2024:2512)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2512 advisory. The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types,...
CVE-2024-34020
A stack-based buffer overflow was found in the putSDN function of mail.c in hcode through 2.1...
Unspecified Vulnerability in Tenda AX1806
The Tenda AX1806 is a WiFi6 wireless router from Tenda, China. A security vulnerability exists in the Tenda AX1806 version 1.0.0.1, which stems from an incorrect manipulation of the parameter password can lead to a stack-based buffer overflow. No details of the vulnerability are provided at this...
CVE-2023-50434
emdnsresolveraw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system...
CVE-2024-34020
A stack-based buffer overflow exists in the putSDN() function of mail.c within the hcode online assessment platform (versions 2.1 and earlier ). The root cause is that the static variable cp is used as an index for a fixed-sized buffer ibuf. Although a range check exists, under certain circumstan...
CVE-2023-50434: Stack-based Buffer Overflow
emdnsresolveraw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system...
CVE-2024-34020: Stack-based Buffer Overflow
A stack-based buffer overflow was found in the putSDN function of mail.c in hcode through 2.1...
Unspecified vulnerability in Tenda A301 (CNVD-2024-23302)
Tenda A301 is a wireless signal extender from Tenda, China. A security vulnerability exists in Tenda A301 version 15.13.08.12multiTDE01, which stems from a parameter deviceList in file /goform/setBlackRule that can cause a stack-based buffer overflow. No details of the vulnerability are available...
Unspecified vulnerability in Tenda i21 (CNVD-2024-23294)
Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version 1.0.0.144656, which stems from an incorrect operation of the parameter ssidIndex that can cause a stack-based buffer overflow. No details of the vulnerability are provided at this time...
Unspecified vulnerability in Tenda i22 (CNVD-2024-23301)
The Tenda i22 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i22 version 1.0.0.34687, which stems from an incorrect operation of the parameter groupIndex that can lead to a stack-based buffer overflow. No details of the vulnerability are provided at this tim...
Unspecified vulnerability in Tenda i21 (CNVD-2024-23296)
Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version 1.0.0.144656, which stems from an incorrect operation of the parameter ssidIndex that can cause a stack-based buffer overflow. No details of the vulnerability are provided at this time...