CWE:

	Tytuł	Data	Autor
High	MikroTik RouterOS SMB Buffer Overflow	20.03.2018	Core Security Technolo...
High	Digital Canal Structural Wind Analysis 9.1 Buffer Overflow	02.07.2017	Karn Ganeshen
High	Linux XFBurn Stack-based Buffer Overflow	24.03.2017	Hosein Askari
High	Putty pscp <= 0.66 - Stack Buffer Overwrite	11.03.2016	tintinweb
High	VAMPSET 2.2.145 Stack / Heap Buffer Overflow	31.03.2015	CORE
Med.	Fortinet Single Sign On Stack Overflow	19.03.2015	CORE
High	GetGo Download Manager 4.x Stack Buffer Overflow	04.03.2014	RCE
High	VideoCharge Studio 2.12.3.685 Stack Buffer Overflow	20.02.2014	Julien Ahrens
High	Android Camera Driver Buffer Overflow / Memory Disclosure	22.10.2013	Jonathan Salwan
Med.	nss-pam-ldapd FD_SET array index error (stack-based buffer overflow)	18.02.2013	Garth Mollett
Low	Photodex ProShow Producer 5.0.3297 ExpandMacroFilename() Local Buffer Overflow	26.01.2013	Julien Ahrens
High	Sony PC Companion 2.1 (DownloadURLToFile()) Stack-based Buffer Overload	21.12.2012	Gjoko LiquidWorm Krsti...
High	Sony PC Companion 2.1 (Load()) Stack-based Buffer Overload	21.12.2012	Gjoko LiquidWorm Krsti...
High	Sony PC Companion 2.1 (CheckCompatibility()) Stack-based Buffer Overload	21.12.2012	Gjoko LiquidWorm Krsti...
High	Sony PC Companion 2.1 (Admin_RemoveDirectory()) Stack-based Buffer Overload	21.12.2012	Gjoko LiquidWorm Krsti...
High	Sound Editor Pro v7.5.1 Stack-based Buffer Overflow	17.09.2012	Julien Ahrens
High	Photodex ProShow Producer v5.0.3256 Local Buffer Overflow Vulnerability	03.07.2012	Inshell Security
High	Photodex ProShow Producer 5.0.3256 Buffer Overflow	03.07.2012	Julien Ahrens

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2024-10-20

CVE-2024-10194

Updating...

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been classified as critical. Affected is the function Goto_chidx of the file login.cgi of the component Front-End Authentication Page. The manipulation of the argument wlanUrl leads to stack-based buffer overflow. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

2024-10-18

	CVE-2024-10130	Updating...	A vulnerability classified as critical was found in Tenda AC8 16.03.34.06. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
	CVE-2024-10123	Updating...	A vulnerability was found in Tenda AC8 16.03.34.06. It has been declared as critical. Affected by this vulnerability is the function compare_parentcontrol_time of the file /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This is not the same issue like CVE-2023-33671. The vendor was contacted early about this disclosure but did not respond in any way.

2024-10-10

CVE-2024-47962

Updating...

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can manipulate an insider to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.

2024-10-09

CVE-2024-47410

Updating...

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

2024-10-08

	CVE-2024-43549	Updating...	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
	CVE-2024-41902	Updating...	A vulnerability has been identified in JT2Go (All versions < V2406.0003). The affected application contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.

2024-09-27

CVE-2024-9284

Updating...

A vulnerability was found in TP-LINK TL-WR841ND up to 20240920. It has been rated as critical. Affected by this issue is some unknown functionality of the file /userRpm/popupSiteSurveyRpm.htm. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

2024-09-20

CVE-2024-9043

Updating...

Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.

2024-09-18

CVE-2024-34026

Updating...

A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.

 

---

Copyright 2024, cxsecurity.com