CWE:

	Tytuł	Data	Autor
High	Siemens Unlocked JTAG Interface / Buffer Overflow	05.12.2024	Stefan Viehboeck
High	Xlibre Xnest 24.1.0 / 24.2.0 Buffer Overflow	02.11.2024	Enrico Weigelt
High	MPlayer Lite r33064 Buffer Overflow	16.09.2024	h1ch4m
High	Eclipse ThreadX Buffer Overflows	29.05.2024	Marco Ivaldi
High	RIOT 2024.01 Buffer Overflows / Lack Of Size Checks / Out-Of-Bound Access	09.05.2024	Marco Ivaldi
High	Circontrol Raption Buffer Overflow / Command Injection	30.03.2024	Dariusz Gonda
High	KiTTY 0.76.1.13 Start Duplicated Session Hostname Buffer Overflow	28.03.2024	DEFCESCO
High	TP-Link TL-WR740N Buffer Overflow / Denial Of Service	11.03.2024	Anish Feroz
High	PCMan FTP Server 2.0 Buffer Overflow	06.02.2024	Waqas Ahmed Faroouqi
High	glibc syslog() Heap-Based Buffer Overflow	01.02.2024	Qualys Security Adviso...
Med.	Intrasrv Simple Web Server 1.0 - Denial of Service (DoS)	10.01.2024	Fernando Mengali
Med.	PSOProxy 0.5 - Denial of Service (DoS)	10.01.2024	Fernando Mengali
Med.	Easy Chat Server 3.1 - Denial of Service (DoS)	07.01.2024	Fernando Mengali
Med.	Easy Chat Server 3.1 - Denial of Service (DoS)	06.01.2024	Fernando Mengali
High	XAMPP 3.3.0 Buffer Overflow	27.10.2023	Talson
High	Elasticsearch 8.5.3 Stack Overflow	24.09.2023	Touhami Kasbaoui
High	Ivanti Avalanche MDM Buffer Overflow	18.09.2023	Ege Balci
High	OpenPLC Webserver 3 Denial Of Service / Buffer Overflow	13.09.2023	Kai Feng
High	GOM Player 2.3.90.5360 Buffer Overflow	10.09.2023	Ahmet Umit Bayram
High	NVClient 5.0 Stack Buffer Overflow	04.09.2023	Ahmet Umit Bayram
High	Xlight FTP Server 3.9.3.6 Stack Buffer Overflow (DOS)	06.08.2023	Yehia Elghaly
High	Xlight FTP Server 3.9.3.6 Stack Buffer Overflow	05.08.2023	Yehia Elghaly
High	Savant Web Server 3.1 Remote Buffer Overflow	03.08.2023	0xBOF90
High	General Device Manager 2.5.2.2 Buffer Overflow	02.08.2023	Ahmet Umit Bayram
High	RaidenFTPD 2.4.4005 Buffer Overflow	21.07.2023	Andre Nogueira
High	TP-Link TL-WR940N 4 Buffer Overflow	05.07.2023	Amirhossein Bahramizad...
High	Polycom BToE Connector 4.4.0.0 Buffer Overflow / Man-In-The-Middle	19.06.2023	secbugs3
High	TP-Link Archer AX10(EU)_V1.2_230220 Buffer Overflow	18.06.2023	Giuseppe Compare
High	Widevine Trustlet 5.x / 6.x / 7.x PRDiagVerifyProvisioning Buffer Overflow	30.05.2023	CyberIntel Team
High	Widevine Trustlet 5.x drm_save_keys Buffer Overflow	30.05.2023	CyberIntel Team
High	Advantech EKI-15XX Series Command Injection / Buffer Overflow	13.05.2023	T. Weber
Med.	Fortigate 7.0.1 Stack Overflow	03.05.2023	Cody Sixteen
High	Rocket Software Unidata 8.2.4 Build 3003 Buffer Overflow	14.04.2023	Ron Bowes
High	Grand Theft Auto III Vice City Skin File 1.1 Buffer Overflow	03.04.2023	Knursoft
High	Explorer32++ 1.3.5.531 Buffer Overflow	27.03.2023	Rafael Pedrero
Med.	Scdbg 1.0 Buffer overflow DoS	27.03.2023	Rafael Pedrero
High	SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow	12.02.2023	LiquidWorm
High	NetChess 2.1 Buffer Overflow	21.01.2023	Ugur Eminli
High	ZTE ZXHN-H108NS Stack Buffer Overflow / Denial Of Service	21.11.2022	George Tsimpidas
High	wolfSSL Buffer Overflow	31.10.2022	Maximilian Ammann
High	AVS Audio Converter 10.3 Stack Overflow	19.10.2022	Yehia Elghaly
High	Netfilter nft_set_elem_init Heap Overflow Privilege Escalation	28.09.2022	Redouane Niboucha
High	COVESA 2.18.8 NULL Pointer Dereference / Heap Buffer Over-Read	27.09.2022	T. Weber
High	123elf Project Buffer Overflow	06.09.2022	Tavis Ormandy
High	10-Strike Network Inventory Explorer 9.3 Buffer Overflow	23.08.2022	Ricardo Jose Ruiz Fern...
High	Windows sxs!CNodeFactory::XMLParser_Element_doc_assembly_assemblyIdentity Heap Buffer Overflow	15.08.2022	Google Security Resear...
High	Windows sxssrv!BaseSrvActivationContextCacheDuplicateUnicodeString Heap Buffer Overflow	14.08.2022	Google Security Resear...
High	Easy Chat Server 3.1 Buffer Overflow	02.08.2022	r00tpgp
High	Patlite 1.46 Buffer Overflow	25.07.2022	Samy Younsi
High	Ransom Lockbit 3.0 MVID-2022-0620 Buffer Overflow	04.07.2022	malvuln
High	Zyxel Buffer Overflow / Format String / Command Injection	20.06.2022	Marco Ivaldi
High	Kitty 0.76.0.8 Stack Buffer Overflow	20.06.2022	Yehia Elghaly
High	GtkRadiant 1.6.6 Buffer Overflow	05.06.2022	Jeremy Brown
High	libMeshb Buffer Overflow	04.06.2022	Jeremy Brown
High	Small HTTP Server 3.06 Remote Buffer Overflow	07.04.2022	Yehia Elghaly
High	ALLMediaServer 1.6 Buffer Overflow	04.04.2022	Hejap Zairy
High	Xlight FTP 3.9.3.2 Buffer Overflow	22.03.2022	Hejap Zairy
High	Amazing CD Ripper 1.2 Buffer Overflow	22.03.2022	Hejap Zairy
High	Audio Conversion Wizard 2.01 Buffer Overflow	10.03.2022	Hejap Zairy
High	VUPlayer 2.49 Buffer Overflow	10.01.2022	Bryan Leong
High	Accu-Time Systems MAXIMUS 1.0 Buffer Overflow / Denial Of Service	23.12.2021	Yehia Elghaly
High	Pinkie 2.15 TFTP Remote Buffer Overflow (PoC)	30.11.2021	Yehia
High	Serva 4.4.0 TFTP Remote Buffer Overflow	24.11.2021	Yehia Elghaly
High	Pinkie 2.15 Remote Buffer Overflow	22.11.2021	Yehia Elghaly
High	Modbus Slave 7.3.1 Buffer Overflow	22.11.2021	Yehia Elghaly
High	Xlight FTP 3.9.3.1 Buffer Overflow (PoC)	17.11.2021	Yehia Elghaly
High	Xlight FTP 3.9.3.1 Buffer Overflow	14.11.2021	Yehia Elghaly
High	zlog 1.2.15 Buffer Overflow	09.11.2021	LIWEI
High	YouTube Video Grabber 1.9.9.1 Buffer Overflow	02.11.2021	Achilles
High	Mini-XML 3.2 Heap Overflow	29.10.2021	LIWEI
High	Ether MP3 CD Burner 1.3.8 Buffer Overflow	27.09.2021	Achilles
High	Microsoft Windows cmd.exe Stack Buffer Overflow	19.09.2021	hyp3rlinx
High	COMMAX WebViewer ActiveX Control 2.1.4.5 Commax_WebViewer.ocx Buffer Overflow	01.09.2021	LiquidWorm
High	COMMAX UMS Client ActiveX Control 1.7.0.2 CNC_Ctrl.dll Heap Buffer Overflow	29.08.2021	LiquidWorm
High	crossfire-server 1.9.0 SetUp() Remote Buffer Overflow	18.08.2021	Khaled Salem
High	Crossfire Server 1.0 Buffer Overflow	18.08.2021	Khaled Salem
High	IcoFX 2.6 Buffer Overflow	08.06.2021	Austin Babcock
High	Exim base64d Buffer Overflow	06.06.2021	Johnny Yu
Med.	VMware ESXi OpenSLP Heap Overflow	06.06.2021	Johnny Yu
High	Epic Games Rocket League 1.95 Stack Buffer Overrun	15.05.2021	LiquidWorm
High	Shenzhen Skyworth RN510 Buffer Overflow	05.05.2021	Kaustubh G. Padwad
High	D-Link DSL-320B-D1 Pre-Authentication Buffer Overflow	08.04.2021	Gabriele Gristina
High	DD-WRT 45723 Buffer Overflow	01.04.2021	Selim Enes Karaduman
High	SyncBreeze 10.1.16 Buffer Overflow	29.03.2021	Rafael Machado
High	FastStone Image Viewer 7.5 Buffer Overflow	18.03.2021	Paolo Stagno
High	Golden FTP Server 4.70 Buffer Overflow	10.03.2021	Craig Freyman
High	dataSIMS Avionics ARINC 664-1 Local Buffer Overflow (PoC)	19.02.2021	Kağan Çapar
High	Sudo Heap-Based Buffer Overflow	29.01.2021	Qualys Security Adviso...
High	10-Strike Network Inventory Explorer Pro 9.05 Buffer Overflow	24.12.2020	Florian Gassner
High	Oracle Solaris SunSSH PAM parse_user_name() Buffer Overflow	18.12.2020	wvu
High	MiniWeb HTTP Server 0.8.19 Buffer Overflow (PoC)	14.12.2020	securityforeveryone
High	Dup Scout Enterprise 10.0.18 Buffer Overflow	09.12.2020	sickness
High	libupnp 1.6.18 Stack-based buffer overflow (DoS)	27.11.2020	Patrik Lantz
High	SyncBreeze 10.0.28 password Remote Buffer Overflow	25.11.2020	Abdessalam king(A.sala...
High	Boxoft Audio Converter 2.3.0 Buffer Overflow	23.11.2020	Luis Martinez
High	Internet Download Manager 6.38.12 Scheduler Downloads Scheduler Buffer Overflow (PoC)	22.11.2020	Vincent Wolterman
High	IBM Tivoli Storage Manager 5.2.0.1 Buffer Overflow	21.11.2020	Paolo Stagno
High	Nidesoft 3GP Video Converter 2.6.18 Local Stack Buffer Overflow	12.11.2020	Felipe Winsnes
High	Sony IPELA Network Camera 1.82.01 ftpclient.cgi Remote Stack Buffer Overflow	07.10.2020	LiquidWorm
High	Sony IPELA Network Camera Remote Stack Buffer Overflow	01.10.2020	LiquidWorm

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2024-10-08

	CVE-2024-47046	Updating...	A vulnerability has been identified in Simcenter Nastran 2306 (All versions), Simcenter Nastran 2312 (All versions), Simcenter Nastran 2406 (All versions < V2406.5000). The affected application is vulnerable to memory corruption while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process.
	CVE-2024-45475	Updating...	A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. An attacker could leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
	CVE-2024-45474	Updating...	A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. An attacker could leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
	CVE-2024-45473	Updating...	A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. An attacker could leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
	CVE-2024-45472	Updating...	A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. An attacker could leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
	CVE-2024-45468	Updating...	A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.
	CVE-2024-45467	Updating...	A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.

2024-10-07

	CVE-2023-6362	Updating...	A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlling the Structured Exception Handler (SEH) registers. This could allow attackers to execute arbitrary code via a long filename argument.
	CVE-2023-6361	Updating...	A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlling the Structured Exception Handler (SEH) registers. This could allow attackers to execute arbitrary code via a long filename argument.

2024-09-24

CVE-2024-38269

Updating...

An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread crash on an affected device.

 

---

Copyright 2024, cxsecurity.com