9609 matches found
PT-2021-19492
Name of the Vulnerable Software and Affected Versions Tenda AC11 versions through 02.03.01.104 CN Description A stack buffer overflow issue allows attackers to execute arbitrary code on the system via a crafted post request to the "goform/setportList" API endpoint. Recommendations For versions...
CVE-2021-31756: Out-of-bounds Write
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the system via a crafted post request. This occurs when input vector controlled by malicious attack get...
CVE-2021-31755: Out-of-bounds Write
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request...
PT-2021-19490
Name of the Vulnerable Software and Affected Versions Tenda AC11 devices with firmware through 02.03.01.104 CN Description A stack buffer overflow issue allows attackers to execute arbitrary code on the system via a crafted post request to the "gofrom/setwanType" API endpoint. This occurs when an...
CVE-2021-31758: Out-of-bounds Write
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted post request...
CVE-2021-31757: Out-of-bounds Write
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104CN. A stack buffer overflow vulnerability in /goform/setVLAN allows attackers to execute arbitrary code on the system via a crafted post request...
CVE-2020-28198
The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 Command Line Administrative Interface, dsmadmc.exe is vulnerable to an exploitable stack buffer overflow. Note: the vulnerability can be exploited when it is used in "interactive" mode while, cause of a max number characters...
Stack overflow
The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 Command Line Administrative Interface, dsmadmc.exe is vulnerable to an exploitable stack buffer overflow. Note: the vulnerability can be exploited when it is used in "interactive" mode while, cause of a max number characters...
CVE-2020-28198
The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 Command Line Administrative Interface, dsmadmc.exe is vulnerable to an exploitable stack buffer overflow. Note: the vulnerability can be exploited when it is used in "interactive" mode while, cause of a max number characters...
CVE-2020-28198
The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 Command Line Administrative Interface, dsmadmc.exe is vulnerable to an exploitable stack buffer overflow. Note: the vulnerability can be exploited when it is used in "interactive" mode while, cause of a max number characters...
CVE-2020-28198
Summary: Multiple sources describe a stack buffer overflow in the IBM Tivoli Storage Manager components that expose the vulnerable behavior via the interactive use of the id parameter in dsmadmc.exe (Version 5 Release 2, and related IBM TSM/Operations Center variants). The flaw is triggered by an...
fluent-bit:flb-it-fuzz-record_ac_fuzzer_OSSFUZZ: Stack-buffer-overflow in flb_sds_cat
Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6311769406570496 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-recordacfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Stack-buffer-overflow...
CVE-2021-31616
Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in ethereumextractThorchainSwapData in ethereum.c can circumvent stack protections and lead to code execution. The vulnerable interface is...
CVE-2021-31616
Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in ethereumextractThorchainSwapData in ethereum.c can circumvent stack protections and lead to code execution. The vulnerable interface is...
CVE-2021-31616
CVE-2021-31616 affects ShapeShift KeepKey hardware wallet firmware prior to 7.1.0. The issue is a stack buffer overflow caused by insufficient length checks in the ethereum_extractThorchainSwapData() function within ethereum.c, which can be triggered by crafted messages and is reachable remotely ...
CVE-2021-31616
Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in ethereumextractThorchainSwapData in ethereum.c can circumvent stack protections and lead to code execution. The vulnerable interface is...
CVE-2021-31616: Out-of-bounds Write
Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in ethereumextractThorchainSwapData in ethereum.c can circumvent stack protections and lead to code execution. The vulnerable interface is...
PT-2021-19448
Name of the Vulnerable Software and Affected Versions ShapeShift KeepKey hardware wallet firmware versions prior to 7.1.0 Description The issue is related to insufficient length checks in the firmware, allowing a stack buffer overflow via crafted messages. This overflow occurs in the ethereum...
CVE-2020-28198: Out-of-bounds Write
The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 Command Line Administrative Interface, dsmadmc.exe is vulnerable to an exploitable stack buffer overflow. Note: the vulnerability can be exploited when it is used in "interactive" mode while, cause of a max number characters...