Lucene search
K

6880 matches found

CNNVD
CNNVD
added 2024/11/27 12:0 a.m.1 views

Fuji Electric Monitouch V-SFT 安全漏洞

Fuji Electric Monitouch V-SFT is a configuration software for Human Machine Interfaces HMI from Fuji Electric. It supports a variety of features including customizable home screen, PDF document viewer, video player, alarm messages, 10 pop-up windows, and more. A stack buffer overflow vulnerabilit...

7.8CVSS7.6AI score0.00698EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/27 12:0 a.m.0 views

Fuji Electric Monitouch V-SFT 安全漏洞

Fuji Electric Monitouch V-SFT is a configuration software for Human Machine Interfaces HMI provided by Fuji Electric. A stack buffer overflow vulnerability exists in Fuji Electric Monitouch V-SFT V10 file parsing, which originates from not properly validating the length of user-supplied data befo...

7.8CVSS7.6AI score0.00698EPSS
Exploits0References1
CVE
CVE
added 2024/11/26 11:34 p.m.2730 views

CVE-2024-53849

The CVE-2024-53849 issue affects editorconfig-core-c (EditorConfig core library in C) where multiple escaped characters in input patterns can trigger stack/pointer overflows in the '[' handling during parsing. The root cause is that added backslashes reduce available space in nested-bracket outpu...

4.8CVSS6.5AI score0.00171EPSS
Exploits0References6
NVD
NVD
added 2024/11/26 8:15 a.m.9 views

CVE-2024-28038

The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. More precisely, giving too long character string to MFPSESSIONID parameter results in a stack buffer overflow. As for the details of affected product names, model numbers, and...

9CVSS0.00279EPSS
Exploits1References7
Cvelist
Cvelist
added 2024/11/26 7:37 a.m.24 views

CVE-2024-28038

The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. More precisely, giving too long character string to MFPSESSIONID parameter results in a stack buffer overflow. As for the details of affected product names, model numbers, and...

9CVSS0.00279EPSS
Exploits1References6
OSV
OSV
added 2024/11/25 2:15 p.m.9 views

CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS7AI score
Exploits0References1
CVE
CVE
added 2024/11/25 1:8 p.m.80 views

CVE-2024-11498

CVE-2024-11498 affects the libjxl (JPEG XL) library. A crafted file can trigger a stack-based overflow, causing the decoder to allocate large stack space (up to 256–512 MB) and potentially exhaust stack memory, leading to denial of service. Multiple advisories and deployable updates reference thi...

7.5CVSS6.9AI score0.00051EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/25 1:8 p.m.18 views

CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

6.9CVSS7.3AI score0.00051EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2024/11/25 1:8 p.m.12 views

CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS6.6AI score0.00051EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.2 views

The vulnerability in the l2tp.cgi script of NETGEAR R7000P router software allows a hacker to induce a service failure.

The vulnerability of the l2tp.cgi script in the NETGEAR R7000P router’s microprogramming system is related to buffer overflows in the stack when processing the l2tpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted...

5.7CVSS5.8AI score0.00216EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.1 views

Trimble SketchUp 安全漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a security vulnerability that stems from a stack-based buffer overflow issue contained in SKP file parsing. An...

7.8CVSS8.1AI score0.01057EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.1 views

Luxion KeyShot 安全漏洞

Luxion KeyShot is a software for designing photos of 3D scenes from Luxion, USA. The software allows real-time 3D rendering workflows to display results immediately and reduce the time required to create photorealistic product photos. A security vulnerability exists in Luxion KeyShot that stems...

7.8CVSS7.8AI score0.02302EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.1 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.2AI score0.00322EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.1 views

IrfanView 安全漏洞

IrfanView is an image viewer. It supports image browsing, image editing, image format conversion and so on. A buffer overflow remote code execution vulnerability exists in the IrfanView WBZ plugin WB1 Stack File Parsing, which is caused by failing to properly validate the length of user-supplied...

7.8CVSS8.4AI score0.01419EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/21 12:0 a.m.2 views

PT-2024-17040 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this issue, where the target must visit a...

7.8CVSS7.2AI score0.01419EPSS
Exploits0References4
CNVD
CNVD
added 2024/11/21 12:0 a.m.8 views

Siemens Tecnomatix Plant Simulation Stack Buffer Overflow Vulnerability (CNVD-2024-45987)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. A stack buffer overflow vulnerability exists in Siemen...

7.8CVSS7.6AI score0.00134EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.1 views

The vulnerability of the opennurbs.dll and ODXSW_DLL.dll libraries, which are software components for modeling, design, and drafting in AutoCAD, allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the opennurbs.dll and ODXSWDLL.dll libraries, which are software for modeling, design, and drafting in AutoCAD, is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...

10CVSS7.8AI score0.00118EPSS
Exploits0References6Affected Software9
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:0 a.m.1 views

The vulnerability of the Windows Kernel component of the Microsoft operating system allows attackers to increase their privileges.

The vulnerability of the Windows Kernel component of the Microsoft operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS5.7AI score0.03556EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/11/15 12:0 a.m.2 views

SourceCodester Student Record Management System 安全漏洞

SourceCodester Student Record Management System is an open source student record management system from SourceCodester. A security vulnerability exists in SourceCodester Student Record Management System version 1.0. An attacker exploiting this vulnerability could cause a stack-based buffer overfl...

7.8CVSS5.8AI score0.0006EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.3 views

PT-2025-23037

Name of the Vulnerable Software and Affected Versions icu affected versions not specified Debian Linux affected versions not specified Description A stack buffer overflow issue was discovered in the International Components for Unicode ICU. The issue occurs when running the genrb binary, causing...

7CVSS7.3AI score0.00033EPSS
Exploits0References59
Rows per page
Query Builder