Lucene search
+L

35 matches found

BDU FSTEC
BDU FSTEC
added 2024/09/23 12:00 a.m.11 views

The vulnerability of the lsx_read_w_buf() function in the formats_i.c component of the SoX sound processing program allows a hacker to cause a service failure.

The vulnerability of the lsxreadwbuf function in the formsi.c component of the SoX sound processing program is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure using a specially created file...

5.5CVSS6.8AI score0.00481EPSS
SaveExploits1References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/08/27 12:00 a.m.10 views

The vulnerability of the NET-SNMP-VACM-MIB() function in the Net-SNMP software suite for the Linux operating system allows a attacker to compromise the integrity of the system.

The vulnerability of the NET-SNMP-VACM-MIB function in the Net-SNMP software suite for the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the system...

6.8CVSS7AI score0.01299EPSS
SaveExploits0References9Affected Software9
BDU FSTEC
BDU FSTEC
added 2024/07/05 12:00 a.m.10 views

The vulnerability of the interpolate component (libavfilter/vf_minterpolate.c) in the FFmpeg multimedia library allows a hacker to execute arbitrary code.

The vulnerability of the interpolate component libavfilter/vfminterpolate.c in the FFmpeg multimedia library involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.7AI score0.00316EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:00 a.m.11 views

The vulnerability of the Adobe Framemaker desktop publishing system lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...

7.8CVSS5.9AI score0.0034EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/02/12 12:00 a.m.10 views

The vulnerability of the formTmultiAP function in the /bin/boa file of the Totolink X2000R router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the formTmultiAP function in the /bin/boa file of the Totolink X2000R router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.0132EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.8 views

The vulnerability of the devn_pcx_write_rle() function in the base/gdevdevn.c component of the Ghostscript document processing software allows a hacker to cause a service failure.

The vulnerability of the devnpcxwriterle function in the base/gdevdevn.c file of the Ghostscript document processing software is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially...

5.5CVSS6.2AI score0.00435EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/10/05 12:00 a.m.10 views

The vulnerability of the nfs_lookup_reply function (net/nfs.c) in the U-Boot loader for embedded Linux operating systems allows a hacker to execute arbitrary code.

The vulnerability of the nfslookupreply function in the U-Boot loader for embedded Linux operating systems is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

10CVSS8AI score0.02689EPSS
SaveExploits1References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/10/04 12:00 a.m.11 views

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to execute arbitrary code.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 relates to the copying of buffers without checking the size of the input data during the processing of the libcommonprod.so file. Exploiting this vulnerability allows a remote attacker to...

9.6CVSS8.2AI score0.0124EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:00 a.m.17 views

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to execute arbitrary code.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the rp-pppoe.so file. Exploiting this vulnerability allows a remote attacker to execute...

9.6CVSS8.1AI score0.0124EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:00 a.m.16 views

The vulnerability in the implementation of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to induce a service failure.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the apsteer file. Exploiting this vulnerability could allow a remote attacker to cause...

9.6CVSS7.8AI score0.0124EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:00 a.m.14 views

The vulnerability of the GOOSE (Generic Object-Oriented Substation Event) protocol implementation in Schneider Electric Easergy P5 micro-programmed devices for relay protection and control allows a perpetrator to execute arbitrary code or cause malfunctions during maintenance.

The vulnerability of the GOOSE Generic Object-Oriented Substation Event protocol implementation in Schneider Electric Easergy P5 relay protection and control devices relates to the copying of buffers without checking the size of input data. Exploiting this vulnerability can allow attackers to...

8.8CVSS8.3AI score0.02822EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:58 p.m.14 views

GHSA-G7R5-X7CR-VM3V Buffer overflow and format vulnerabilities in ncurses

ncurses exposes functions from the ncurses library which: Pass buffers without length to C functions that may write an arbitrary amount of data, leading to a buffer overflow. instr, mvwinstr, etc Passes rust &str to strings expecting C format arguments, allowing hostile input to execute a format...

9.8CVSS6.4AI score0.01615EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/04/14 12:00 a.m.9 views

The vulnerability of the JunOS operating system’s SRX series routers’ implementation of the Internet Content Adaptation Protocol (ICAP) allows attackers to enhance their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the Internet Content Adaptation Protocol ICAP implementation in the JunOS operating system’s SRX series routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to enhance their privileges,...

9.8CVSS8AI score0.02232EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/01/13 12:00 a.m.21 views

The vulnerability of the cfg80211_mgd_wext_giwessid function (net/wireless/wext-sme.c) in the Linux kernel allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the cfg80211mgdwextgiwessid function in the Linux kernel’s net/wireless/wext-sme.c file is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service...

10CVSS7.5AI score0.06652EPSS
SaveExploits0References47Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/02 12:00 a.m.59 views

The vulnerability of the `my_parse_cookie_if_key_exists` function in the web server of the MOXA EDR-810 industrial router allows a hacker to execute arbitrary code.

The vulnerability of the myparsecookieifkeyexists function offset 0x1B698 on the web server jffs2-root\fs1\magicP\WebServer\webs of the MOXA EDR-810 industrial router arises due to the lack of checking the size of the data being copied into a buffer of 0x40 bytes. Exploiting this vulnerability...

9.6CVSS6.3AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder