Lucene search
K

8439 matches found

Cvelist
Cvelist
added 2025/04/15 8:55 p.m.10 views

CVE-2025-2497 DWG File Parsing Stack-Based Buffer Vulnerability

A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS0.00127EPSS
Exploits0References2
CVE
CVE
added 2025/04/15 8:55 p.m.55 views

CVE-2025-2497

CVE-2025-2497 relates to Autodesk Revit parsing a malicious DWG file, causing a Stack-Based Buffer Overflow and enabling arbitrary code execution in the context of the current process. Affected product: Autodesk Revit (DWG parsing functionality). Root cause: stack-based overflow triggered during ...

7.8CVSS7.9AI score0.00127EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/15 7:15 p.m.5 views

CVE-2025-3538

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function authasp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The attack needs to be approached within th...

8.8CVSS7AI score0.08519EPSS
Exploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:45 a.m.10 views

Security Bulletin: Vulnerabilities in GStreamer affects IBM watsonx Assistant for IBM Cloud Pak for Data

Summary Potential vulnerabilities in GStreamer has been identified that affects IBM watsonx Assistant for IBM Cloud Pak for Data. The vulnerabilities have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-47538 DESCRIPTION: GStreamer is a library fo...

9.8CVSS9.8AI score0.0014EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:3 a.m.85 views

Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak for AIOps version 4.7.0 Vulnerability Details CVEID:CVE-2024-43380 DESCRIPTION: floraison fugit is vulnerable to a denial of service, caused by improper input validation by the natural parser. By sending a specially crafted request,...

8.8CVSS10AI score0.88359EPSS
Exploits2Affected Software1
Github Security Blog
Github Security Blog
added 2025/04/14 9:32 p.m.8 views

jsonschema2pojo has Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file org/jsonschema2pojo/rules/SchemaRule.java of the component JSON File Handler. The manipulation leads to stack-based buffer overflow...

5.3CVSS6.8AI score0.00149EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2025/04/14 9:15 p.m.11 views

CVE-2025-3588

A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file org/jsonschema2pojo/rules/SchemaRule.java of the component JSON File Handler. The manipulation leads to stack-based buffer overflow...

5.3CVSS0.00149EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/04/14 8:31 p.m.5 views

CVE-2025-3588 joelittlejohn jsonschema2pojo JSON File SchemaRule.java apply stack-based overflow

A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file org/jsonschema2pojo/rules/SchemaRule.java of the component JSON File Handler. The manipulation leads to stack-based buffer overflow...

5.3CVSS7.1AI score0.00149EPSS
Exploits0References5
NVD
NVD
added 2025/04/13 7:15 p.m.18 views

CVE-2025-3538

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function authasp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The attack needs to be approached within th...

8.8CVSS0.08519EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/04/13 11:39 a.m.12 views

CVE-2025-23388

A Stack-based Buffer Overflow vulnerability in SUSE rancher allows for denial of service.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3...

8.2CVSS6.9AI score0.00714EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/04/11 3:13 a.m.5 views

CVE-2025-29988

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

6.9CVSS7AI score0.00096EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/10 5:50 p.m.8 views

CVE-2025-26688

Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally...

7.8CVSS7.1AI score0.00685EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/10 4:18 p.m.10 views

CVE-2025-3287

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS7.5AI score0.00202EPSS
Exploits0References3
NVD
NVD
added 2025/04/09 3:15 a.m.6 views

CVE-2025-29988

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

6.9CVSS0.00096EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/09 2:25 a.m.5 views

CVE-2025-29988

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

6.9CVSS0.00096EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/09 12:0 a.m.2 views

PT-2025-15883 · Unknown · Meddream Pacs Server

Name of the Vulnerable Software and Affected Versions: MedDream PACS Server affected versions not specified Description: The issue is related to a stack-based buffer overflow in the DICOM file parsing functionality, which can lead to remote code execution. Recommendations: At the moment, there is...

9.8CVSS9.8AI score0.03073EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2025/04/09 12:0 a.m.3 views

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of...

9.8CVSS7.4AI score0.03073EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2025/04/08 6:15 p.m.8 views

CVE-2025-30298 Adobe Framemaker | Stack-based Buffer Overflow (CWE-121)

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.5AI score0.00201EPSS
Exploits0References1
CVE
CVE
added 2025/04/08 6:15 p.m.52 views

CVE-2025-30298

Adobe FrameMaker is affected by a Stack-based Buffer Overflow (CVE-2025-30298) in versions 2020.8, 2022.6 and earlier. The issue can allow arbitrary code execution in the context of the current user and requires user interaction, as a victim must open a malicious file. Connected sources corrobora...

7.8CVSS7.5AI score0.00201EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2025/04/08 5:23 p.m.84 views

CVE-2025-26688

CVE-2025-26688 is a stack-based buffer overflow in Microsoft Virtual Hard Disk that enables a locally authenticated attacker to elevate privileges. The vulnerability is labeled as “Obtaining Increased Entitlements” (CVSS v3.1 base score 7.8). Connected sources corroborate the affected product (Mi...

7.8CVSS7.6AI score0.00685EPSS
Exploits0References1Affected Software14
Rows per page
Query Builder