CVE-2021-21901: Buffer Copy without Checking Size of Input

A stack-based buffer overflow vulnerability exists in the CMA checkudpcrc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to memcpy. An attacker can send a malicious packet to trigger this...

CVE-2021-21887: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

PT-2021-7516

Name of the Vulnerable Software and Affected Versions Lantronix PremierWave 2050 version 8.9.0.0R4 Hirschmann BAT-C2 affected versions not specified Description A stack-based buffer overflow issue exists in the Web Manager SslGenerateCSR functionality, allowing remote code execution through a...

Security Bulletin: i2 Analysts' Notebook memory corruption vulnerability

Summary i2 Analysts' Notebook is potentially vulnerable to a memory corruption vulnerability Vulnerability Details CVEID: CVE-2021-39050 DESCRIPTION: IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local...

Security Bulletin: i2 Analysts' Notebook memory corruption vulnerability

Summary i2 Analysts' Notebook is vulnerable to potential memory corruption vulnerabilities Vulnerability Details CVEID: CVE-2021-39049 DESCRIPTION: IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacke...

PT-2021-6175

Name of the Vulnerable Software and Affected Versions NETGEAR D6220 versions prior to 1.0.0.68 NETGEAR D6400 versions prior to 1.0.0.102 NETGEAR D7000v2 versions prior to 1.0.0.74 NETGEAR D8500 versions prior to 1.0.3.60 NETGEAR DC112A versions prior to 1.0.0.56 NETGEAR R6300v2 versions prior to...

PT-2021-5959

Name of the Vulnerable Software and Affected Versions NETGEAR R6400 versions prior to 1.0.1.70 NETGEAR R7000 versions prior to 1.0.11.126 NETGEAR R7900 versions prior to 1.0.4.46 NETGEAR R7900P versions prior to 1.4.2.84 NETGEAR R7960P versions prior to 1.4.2.84 NETGEAR R8000 versions prior to...

CVE-2021-38413

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution...

Stack overflow

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution...

CVE-2021-38413 Fuji Electric Tellus Lite V-Simulator stack based buffer overflow

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution...

PT-2021-6270

Name of the Vulnerable Software and Affected Versions NETGEAR D7000 versions prior to 1.0.1.82 Description The issue is caused by a stack-based buffer overflow. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information. An...

CVE-2021-38413: Stack-based Buffer Overflow

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution...

USN-5194-1: Olm vulnerability

Denis Kasak discovered that Olm was not verifying the length of input being processed by the olmpkdecrypt module, which introduced a stack-based buffer overflow vulnerability to the library. An attacker could use this to cause a denial of service application crash or possibly execute arbitrary co...

CVE-2021-44435

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the...

CVE-2021-44432: Stack-based Buffer Overflow

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the...

CVE-2021-44165: Stack-based Buffer Overflow

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41. The affected firmware contains a buffer overflow vulnerability in the web application...

PT-2021-5458

Name of the Vulnerable Software and Affected Versions JT Utilities versions prior to 13.1.1.0 JTTK versions prior to 11.1.1.0 Description A stack-based buffer overflow issue has been identified in the JTTK library of affected products when parsing specially crafted JT files. This could allow an...

CVE-2021-44435: Stack-based Buffer Overflow

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the...

PT-2021-24095

Name of the Vulnerable Software and Affected Versions: JT Utilities versions prior to 13.1.1.0 JTTK versions prior to 11.1.1.0 Description: A stack-based buffer overflow vulnerability has been identified in the JTTK library of affected products. This issue occurs while parsing specially crafted J...

Siemens POWER METER SICAM Q100

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: POWER METER SICAM Q100 Vulnerability: Stack-based Buffer Overflow\ 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to remotely execute code...