18049 matches found
PT-2021-13291
Name of the Vulnerable Software and Affected Versions apusys affected versions not specified Description The issue is related to a stack-based buffer overflow, which could lead to a local escalation of privilege. System execution privileges are needed for exploitation, and user interaction is not...
WECON PLC Editor WCP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...
CVE-2021-0657: Out-of-bounds Write
In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672103; Issue ID: ALPS05672103...
CVE-2021-33479
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measurepitch in pgm2asc.c...
CVE-2021-33479: Improper Restriction of Operations within the Bounds of a Memory Buffer
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measurepitch in pgm2asc.c...
CVE-2021-33479
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measurepitch in pgm2asc.c...
CVE-2021-33479
CVE-2021-33479 affects GOCR (gocr) up to version 0.53-20200802, with a stack-based buffer overflow in measure_pitch() within pgm2asc.c. The connected Nessus/Gentoo/GSLAs references corroborate a vulnerable GOCR stack overflow vector; no public fix is detailed in the provided documents. Gentoo GLS...
CVE-2021-33481
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in trytodivideboxes in pgm2asc.c...
CVE-2021-33481: Improper Restriction of Operations within the Bounds of a Memory Buffer
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in trytodivideboxes in pgm2asc.c...
FATEK Automation WinProladder
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: FATEK Automation Equipment: WinProladder Vulnerabilities: Out-of-bounds Write, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow for arbitrary code execution. 3...
PT-2021-5075
Name of the Vulnerable Software and Affected Versions FATEK WinProladder versions 3.30 24518 and prior Description The issue is related to a stack-based buffer overflow that occurs while processing project files, which may allow an attacker to execute arbitrary code. This can be exploited by an...
Stack overflow
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.10610.0.80 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000 by...
Lantronix PremierWave 2050 Web Manager Ping stack-based buffer overflow vulnerability
Summary A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2021-34991: Stack-based Buffer Overflow
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.10610.0.80 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000 by...
CVE-2021-43280
A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer. An attacker can leverage thi...
CVE-2021-43280: Out-of-bounds Write
A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer. An attacker can leverage thi...
PT-2021-23800
Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.8 Description A stack-based buffer overflow vulnerability exists in the DWF file reading procedure due to the lack of proper validation of the length of user-supplied data before copying...
NETGEAR R6400v2 Buffer Overflow Vulnerability
The NETGEAR R6400v2 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks, the NETGEAR R6400v2 is vulnerable to a buffer overflow vulnerability that stems from a process failing to properly validate the length of user-supplied...
CVE-2021-43579
HTMLDOC contains a stack-based buffer overflow in image_load_bmp() that can cause remote code execution when a crafted BMP file is linked from an HTML document, affecting HTMLDOC