Omron CX-One Stack Buffer Overflow (CVE-2020-27261)

A stack-based overflow exists in the CX-Position module of OMRON CX-One. The vulnerability is due to input validation error when processing NCI configuration files...

Delta Electronics DOPSoft (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DOPSoft Vulnerability: Stack-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-238-04 Delta Electronics DOPSoft that was...

CVE-2020-18971

CVE-2020-18971 concerns PoDoFo v0.9.6, where a stack-based buffer overflow in the PdfDictionary.cpp:65 path can be exploited to cause a denial of service. The vulnerability affects the PoDoFo core library component used for PDF parsing/manipulation. The provided connected documents confirm the ex...

CVE-2021-28606

Adobe After Effects version 18.2 and earlier is affected by a Stack-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28606

CVE-2021-28606 concerns Adobe After Effects 18.2 and earlier. The vulnerability is a stack-based buffer overflow that occurs while parsing a specially crafted file, enabling arbitrary code execution in the context of the current user. An unauthenticated attacker would need the victim to open a ma...

Security update for libsndfile (critical)

openSUSE Security Update: Security update for libsndfile Announcement ID: openSUSE-SU-2021:1166-1 Rating: critical References: 1100167 1116993 1117954 1188540 Cross-References: CVE-2018-13139 CVE-2018-19432 CVE-2018-19758 CVE-2021-3246 CVSS scores: CVE-2018-13139 NVD : 8.8...

D-Link DAP-2020 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the webproc endpoint, which listens on TCP port 80 by default. The iss...

The vulnerability in the web interface for managing Realtek SDK devices allows a hacker to execute arbitrary code.

The vulnerability in the Realtek SDK’s web interface for controlling development tools is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Denial Of Service (DoS)

fig2dev is vulnerable to denial of service. A stack-based buffer overflow in the genpstrxtext component in genpstricks.c allows attackers to cause a denial of service DOS by converting a xfig file into pstricks format...

CVE-2021-21815

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

CVE-2021-21815

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

Stack overflow

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

CVE-2021-21815

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

CVE-2021-21812

CVE-2021-21812 describes a stack-based buffer overflow in AT&T Labs’ Xmill 0.7, specifically in the command-line parsing HandleFileArg function. The vulnerability stems from copying user-controlled filepattern data into a fixed-size buffer with strcpy, allowing a path provided on the command line...

Debian: Security Advisory (DLA-2739-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-27790

The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0CBN4, and v7.4.2h uses unsafe string function to process user input. Authenticated attackers can abuse this vulnerability to exploit stack-based buffer overflows, allowing execution of arbitrary code as...

CVE-2021-27790

The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0CBN4, and v7.4.2h uses unsafe string function to process user input. Authenticated attackers can abuse this vulnerability to exploit stack-based buffer overflows, allowing execution of arbitrary code as...

CVE-2020-21680

A stack-based buffer overflow in the putarrow component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into pict2e format...

[SECURITY] [DLA 2739-1] libspf2 security update

Debian LTS Advisory DLA-2739-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 11, 2021 https://wiki.debian.org/LTS Package : libspf2 Version : 1.2.10-7+deb9u1 CVE ID : CVE-2021-20314 Philipp Jeitner and Haya Shulman discovered a stack-based buffer overflow...

[SECURITY] [DSA 4955-1] libspf2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4955-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 11, 2021 https://www.debian.org/security/faq -...