Lucene search
+L

18049 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:00 a.m.•29 views

OpenText Brava! Desktop DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:00 a.m.•22 views

OpenText Brava! Desktop DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/12/02 12:00 a.m.•51 views

RHEL 6 : dhcp (RHSA-2021:2419)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2419 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...

7.4CVSS8AI score0.06118EPSS
SaveExploits1References4
Zero Day Initiative
Zero Day Initiative
•added 2021/12/02 12:00 a.m.•44 views

Delta Industrial Automation CNCSoft DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.1AI score0.09594EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/12/01 12:00 a.m.•7 views

PT-2021-5320

Name of the Vulnerable Software and Affected Versions Delta Electronics CNCSoft versions 1.01.30 and prior Description The issue is caused by a stack-based buffer overflow in the CNCSoft software, which may allow an attacker to execute arbitrary code. This can be exploited by a remote attacker...

10CVSS0.09594EPSS
SaveExploits0References8
Trellix
Trellix
•added 2021/11/30 12:00 a.m.•9 views

The Bug Report November 2021 Edition

The Bug Report — November 2021 Edition By Mark Bereza · November 30, 2021 Your Cybersecurity Comic Relief CVE-2021-20322: Of all the words of mice and men, the saddest are, “it was DNS again.” Why am I here? For all our newcomers, welcome to the Advanced Threat Research team’s monthly bug report ...

10CVSS0.20111EPSS
SaveExploits2
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:00 a.m.•34 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03632EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:00 a.m.•39 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03632EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:00 a.m.•42 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03632EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2021/11/29 12:00 a.m.•57 views

Debian DLA-2832-1 : opensc - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2832 advisory. - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c. CVE-2019-15945 - OpenSC before 0.20.0-rc1 has ...

6.4CVSS6.9AI score0.00411EPSS
SaveExploits0References16
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•30 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01897EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•30 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01897EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/26 12:00 a.m.•8 views

CVE-2020-7881: Integer Overflow or Wraparound

The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy operate by "FanTicket" field. It is because of stored data without...

8.8CVSS6.7AI score0.0144EPSS
SaveExploits0References3
Veracode
Veracode
•added 2021/11/24 2:30 a.m.•24 views

Stack-based Buffer Overflow

suricata:sid is vulnerable to stack-based buffer overflow attacks. An attacker is able to send a certain sequence of segments allowing TCP evasion via a crafted TCP/IP stack resulting in buffer overflows...

9.8CVSS5.1AI score0.01603EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2021/11/22 8:15 p.m.•49 views

CVE-2021-42705

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS0.01036EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/11/22 7:06 p.m.•61 views

CVE-2021-42705 WECON PLC Editor

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.01036EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/22 12:00 a.m.•5 views

CVE-2021-42705: Stack-based Buffer Overflow

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS6.8AI score0.01036EPSS
SaveExploits0References2
Veracode
Veracode
•added 2021/11/21 4:47 a.m.•39 views

Remote Code Execution (RCE)

htmldoc is vulnerable to remote code execution. The vulnerability exists due to a stack-based buffer overflow in imageloadbmp in HTMLDOC...

7.8CVSS2.7AI score0.07349EPSS
SaveExploits4References6Affected Software1
NVD
NVD
•added 2021/11/18 3:15 p.m.•33 views

CVE-2021-0657

In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672103; Issue ID: ALPS05672103...

6.7CVSS0.00129EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/18 2:57 p.m.•72 views

CVE-2021-0657

CVE-2021-0657 affects apusys and is caused by a stack-based buffer overflow leading to an out-of-bounds write. This can enable local escalation to System privileges without user interaction. The vulnerability context is supported by multiple sources (e.g., Red Hat, NVD) and lists a patch referenc...

6.7CVSS6.8AI score0.00129EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder