Lucene search
+L

22939 matches found

NVD
NVD
•added 2025/01/08 11:15 p.m.•34 views

CVE-2025-0283

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges...

7CVSS0.17456EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/08 12:15 a.m.•33 views

CVE-2018-4301

This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp...

9.8CVSS0.00561EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/01/08 12:00 a.m.•58 views

Ivanti Connect Secure 22.7R2.x < 22.7R2.5 Remote Code Execution (CVE-2025-0282)

The Ivanti Connect Secure install on the remote host is 22.7R2.x prior to 22.7R2.5. It is, therefore, affected by a remote code execution vulnerability: - A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neuro...

9CVSS8.4AI score0.99981EPSS
SaveExploits15References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/08 12:00 a.m.•8 views

CVE-2025-0282: Stack-based Buffer Overflow

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution...

9CVSS8.3AI score0.99981EPSS
SaveExploits15References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/08 12:00 a.m.•6 views

CVE-2018-4301: Buffer Copy without Checking Size of Input

This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp...

9.8CVSS6.1AI score0.00561EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/01/08 12:00 a.m.•67 views

Ivanti Connect Secure 9.x / 22.x < 22.7R2.5 Local Privilege Escalation (CVE-2025-0283)

The Ivanti Connect Secure install on the remote host is 9.x, or 22.x prior to 22.7R2.5. It is, therefore, affected by a local privilege escalation vulnerability: - A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and...

9CVSS7.8AI score0.99981EPSS
SaveExploits15References2
CNNVD
CNNVD
•added 2025/01/08 12:00 a.m.•20 views

Smart Card Services Security Vulnerabilities

Smart Card Services is a smart card service open-sourced by Smart Card Services. A security vulnerability exists in Smart Card Services that stems from the presence of a stack-based buffer overflow vulnerability...

9.8CVSS6.2AI score0.00561EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/08 12:00 a.m.•10 views

CVE-2025-0283: Stack-based Buffer Overflow

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges...

7CVSS7.2AI score0.17456EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/01/08 12:00 a.m.•23 views

Ivanti Policy Secure 22.x <= 22.7R1.2 Local Privilege Escalation (CVE-2025-0283)

The version of Ivanti Policy Secure installed on the remote host is 22.x prior or equal to 22.7R1.2 Build 1485. It is, therefore, affected by a local privilege escalation vulnerability: - A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before...

7CVSS7.3AI score0.17456EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•10 views

PT-2025-1951

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution. Recommendations At...

7.2CVSS6.6AI score0.00829EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/01/06 10:33 a.m.•24 views

CVE-2024-45542 Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

7.8CVSS6AI score0.00131EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•3 views

CVE-2024-20154: Stack-based Buffer Overflow

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Pat...

8.8CVSS7.7AI score0.03919EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•10 views

CVE-2024-45542: Stack-based Buffer Overflow

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

7.8CVSS6AI score0.00131EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•9 views

PT-2025-39346

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description The GIMP software contains a stack-based buffer overflow in the ILBM file parsing functionality. This issue could allow for remote code execution. Recommendations At the moment, there is no...

7.8CVSS7.8AI score0.03027EPSS
SaveExploits0References65
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•22 views

PT-2025-22999

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw was found in GIMP. The GIMP ani load image function is vulnerable to a stack-based overflow. If a user opens .ANI files, GIMP may be used to store more information than the capacity allow...

7.3CVSS7.3AI score0.00206EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•24 views

PT-2025-34647 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 through Master Branch 35a819fa Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The vulnerability...

9.8CVSS6.9AI score0.00682EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/30 12:00 a.m.•10 views

CVE-2024-13045: Stack-based Buffer Overflow

Ashlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targ...

7.8CVSS8AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/30 12:00 a.m.•19 views

PT-2024-17902 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this issue, where the...

7.8CVSS7.8AI score0.00339EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/12/30 12:00 a.m.•24 views

Ashlar Vellum Cobalt security vulnerability

Ashlar Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar, Inc. A security vulnerability exists in Ashlar Vellum Cobalt that stems from the failure to properly validate the length of user-supplied data before copying it to a stack-based buffer. An attacke...

7.8CVSS7.5AI score0.00339EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/30 12:00 a.m.•27 views

(0Day) Ashlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS7.9AI score0.00339EPSS
SaveExploits0
Rows per page
Query Builder