PT-2021-24344

Name of the Vulnerable Software and Affected Versions: Fuji Electric Alpha5 Servo Operator affected versions not specified Description: The issue is related to a stack-based buffer overflow, potentially allowing an attacker to execute arbitrary code. This is a result of a vulnerability in the C5P...

CVE-2021-38432: Stack-based Buffer Overflow

FATEK Automation Communication Server Versions 1.13 and prior lacks proper validation of user-supplied data, which could result in a stack-based buffer overflow condition and allow an attacker to remotely execute code...

Fatek Automation Communication Server Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation Communication Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of data sent to the Facon Server, which listens on...

PT-2021-4447

Name of the Vulnerable Software and Affected Versions FATEK Automation WinProladder versions 3.30 and prior Description The issue is related to a stack-based buffer overflow in the FATEK Automation WinProladder software. This occurs due to improper validation of user-supplied data when parsing...

Fatek Automation WinProladder PDW File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fatek Automation WinProladder PDW File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-3057

CVE-2021-3057 is a stack-based buffer overflow in Palo Alto Networks GlobalProtect app affecting specific release branches: Windows 5.1.x before 5.1.9, Windows 5.2.x before 5.2.8, UWP 5.2.x before 5.2.8, and Linux 5.3.x before 5.3.1. The root cause is a stack-based memory overflow that can be tri...

PT-2021-18773

Name of the Vulnerable Software and Affected Versions Palo Alto Networks GlobalProtect app versions earlier than 5.1.9 on Windows Palo Alto Networks GlobalProtect app versions earlier than 5.2.8 on Windows Palo Alto Networks GlobalProtect app versions earlier than 5.2.8 on the Universal Windows...

PT-2021-4629

Name of the Vulnerable Software and Affected Versions NETGEAR R6260 version 1.1.0.78 1.0.1 NETGEAR AC2100, AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6350, R6330, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, R7450, WAC124 affected versions not specified Description This...

PT-2021-4628

Name of the Vulnerable Software and Affected Versions NETGEAR R6260 version 1.1.0.78 1.0.1 Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR routers. Authentication is not required to exploit this issue. The specific flaw exist...

PT-2021-5388

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 19.2R3-S2, 19.3R2-S6, 19.3R3-S2, 19.4R1-S4, 19.4R2-S4, 19.4R3-S3, 20.1R2-S2, 20.1R3, 20.2R2-S3, 20.2R3, 20.3R2 Juniper Networks Junos OS Evolved versions prior to 20.1R3-EVO, 20.2R3-EVO, 20.3R2-EVO...

CVE-2021-3057: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This issue impacts: GlobalProtect app 5.1 versions earlier than...

Ubuntu 18.04 LTS / 20.04 LTS : libntlm vulnerability (USN-5108-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5108-1 advisory. It was discovered that Libntlm incorrectly handled specially crafted NTML requests. An attacker could possibly use this issue to cause a denial of...

SUSE: Security Advisory (SUSE-SU-2021:14823-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FATEK Automation WinProladder

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: FATEK Automation Equipment: WinProladder Vulnerabilities : Out-of-bounds Write, Out-of-bounds Read, Unexpected Sign Extension, Stack-based Buffer Overflow, Improper Restriction of Operations within the...

CVE-2021-25469

The vulnerability CVE-2021-25469 affects Widevine trustlet prior to Samsung SMR Oct-2021 Release 1. It is a stack-based buffer overflow in the trustlet that can lead to arbitrary code execution with local access and low attack complexity. Impact is partial to high confidentiality/integrity/availa...

PT-2021-16668

Name of the Vulnerable Software and Affected Versions: Exynos CP Chipset versions prior to SMR Oct-2021 Release 1 Description: A possible stack-based buffer overflow vulnerability in the Exynos CP Chipset allows arbitrary memory write and code execution. Recommendations: For Exynos CP Chipset...

PT-2021-16659

Name of the Vulnerable Software and Affected Versions: Widevine trustlet versions prior to SMR Oct-2021 Release 1 Description: A possible stack-based buffer overflow issue allows arbitrary code execution. Recommendations: For versions prior to SMR Oct-2021 Release 1, update to SMR Oct-2021 Releas...

CVE-2021-25469: Buffer Copy without Checking Size of Input

A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution...

CVE-2021-25478: Stack-based Buffer Overflow

A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...