18175 matches found
CVE-2021-21748
ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code...
CVE-2021-21749
ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code...
CVE-2021-21748
CVE-2021-21748 affects ZTE MF971R with stack-based buffer overflow in the web API path ADB_MODE_SWITCH (password handling) leading to remote code execution. Talos details show exploit via specially crafted HTTP requests that bypass referer checks (no authentication required) and trigger a stack-b...
CVE-2021-21748: Out-of-bounds Write
ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code...
CVE-2021-21749: Out-of-bounds Write
ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code...
PT-2021-14760
Name of the Vulnerable Software and Affected Versions ZTE MF971R affected versions not specified Description The issue concerns two stack-based buffer overflow vulnerabilities. An attacker could exploit these vulnerabilities to execute arbitrary code. Recommendations At the moment, there is no...
CVE-2021-31383
In Point to MultiPoint P2MP scenarios within established sessions between network or adjacent neighbors the improper use of a source to destination copy write operation combined with a Stack-based Buffer Overflow on certain specific packets processed by the routing protocol daemon RPD of Juniper...
CVE-2021-31383
CVE-2021-31383 affects Juniper Networks Junos OS and Junos OS Evolved, where in P2MP scenarios the routing protocol daemon (RPD) may crash due to a source-to-destination copy-write operation paired with a stack-based buffer overflow on certain crafted packets. This leads to a DoS that can become ...
PT-2021-23470
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions 10.0 SP1 Trend Micro Apex One as a Service versions 10.0 SP1 Trend Micro Worry-Free Business Security versions 10.0 SP1 Description A stack-based buffer overflow issue could allow a local attacker to escalate...
CVE-2021-31383: Stack-based Buffer Overflow
In Point to MultiPoint P2MP scenarios within established sessions between network or adjacent neighbors the improper use of a source to destination copy write operation combined with a Stack-based Buffer Overflow on certain specific packets processed by the routing protocol daemon RPD of Juniper...
Zoom Client < 2.0.115900.1201 Multiple Vulnerabilities (Oct 2017) - Linux
The Zoom Client is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-38389
Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code...
Stack overflow
FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code...
CVE-2021-38389
This CVE affects Advantech WebAccess (versions 9.02 and earlier). A stack-based buffer overflow vulnerability exists in the handling of IOCTL 0x1138B, allowing remote code execution with no authentication required. ZDI reports that the flaw can be exploited by remote attackers to execute code in ...
CVE-2021-38389 Advantech WebAccess
Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code...
CVE-2021-38430 FATEK Automation WinProladder
FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code...
CVE-2021-38389: Stack-based Buffer Overflow
Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code...
CVE-2021-38430: Stack-based Buffer Overflow
FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code...
Stack overflow
FATEK Automation Communication Server Versions 1.13 and prior lacks proper validation of user-supplied data, which could result in a stack-based buffer overflow condition and allow an attacker to remotely execute code...
CVE-2021-38432
CVE-2021-38432 affects FATEK Automation Communication Server (Versions 1.13 and prior). The vulnerability is a stack-based buffer overflow caused by lack of proper validation of user-supplied data, enabling remote code execution via network access (no authentication required per ZDI/CISA). Exploi...