CWE-121: Stack-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the stack.
Also known as Stack Overflow, Stack Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- we-con plc editorWECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process...6.3 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to...8.8 High
- emerson deltavDeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit...8.8 High
- deltaww cncsoft, screeneditor, ics-cert cncsoft with screeneditor +2 moreCNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based...8.8 High
- qemu, canonical ubuntu linux, redhat enterprise linux +2 moreA stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before...8.3 High
- qemu, qemu qemu: +1 moreA stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the...5.5 Medium
- aveva intouch, intouch 2014, intouch 2017 +2 moreAVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update...9.8 Critical
- bos ip camera, dahuasecurity ip camera firmware +1 moreDahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow9.8 Critical
- aveva indusoft web studio, aveva software, llc intouch machine edition, aveva intouch machine 2017 +2 moreAVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1...9.8 Critical
- d-link dir-818l(w), dir-822, dir-823 +15 more +17 moreD-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action9.8 Critical
- ics-cert eaton 9000x drive, eaton 9000x firmware +1 moreEaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability,...9.8 Critical
- deltaww commgr, ics-cert delta industrial automation commgr and accompanying plc simulators (dvpsimulator eh2, eh3, es2, se, ss2 and ahsim 5x0, ahsim 5x1) +1 moreDelta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with...9.8 Critical
- siemens scalance m875, scalance m875 firmware +1 moreA vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port...8.8 High
- delta electronics industrial automation dopsoft, deltaww delta industrial automation dopsoft +1 moreDelta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed...9.8 Critical
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow...7.8 High
- ics-cert intellivue patient monitors, avalon fetal/maternal monitors, philips avalon fetal\/maternal monitors fm20 firmware, avalon fetal\/maternal monitors fm30 firmware +16 more +18 moreIntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M,...8.2 High
- [unknown] pdnspdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool...7.0 High
- debian linux, procps-ng project procps-ng, [unknown] procps-ng, procps +2 more +4 moreprocps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This...4.4 Medium
- foxit reader, foxitsoftware foxit reader, phantompdf +2 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...9.8 Critical
- deltaww wplsoft, ics-cert delta electronics wplsoft +1 moreWPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where...8.8 High
- lantech ids 2102, ids 2102 firmware +1 moreIn Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been...9.8 Critical
- delta electronics pmsoftDelta PMSoft versions 2.10 and prior have multiple stack-based buffer overflow vulnerabilities...7.8 High
- we-con levistudio hmi editor, levistudiou, pi studio hmi project programmer +2 moreA buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon...5.3 Medium
- indusoft web studio, industrial-software intouch machine edition 2017, ics-cert schneider electric indusoft web studio and intouch machine edition +2 moreA remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior...9.8 Critical
- ics-cert omron cx-one, omron cx-flnet, cx-one +5 more +7 moreParsing malformed project files in Omron CX-One versions 4.42 and prior, including the following...7.8 High
- mitsubishi electric europe b.v. e-designerMitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited...9.8 Critical
- ics-cert omron cx-supervisor, omron cx-supervisor +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack...5.3 Medium
- deltaww delta industrial automation dopsoftA Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial...7.8 High
- deltaww delta industrial automation screen editorA Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial...7.8 High
- freedesktop.org spice-gtkA flaw was found in the way spice-client processed certain messages sent from the server. An...9.8 Critical
- zsh, canonical ubuntu linux, debian linux +3 more +5 morezsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd()...5.5 Medium
- emerson controlwave micro firmwareA Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave...7.5 High
- ge d60 line distance relay firmwareA Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running...9.8 Critical
- 3s-software codesys runtime system, codesys web server +1 moreA Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically:...9.8 Critical
- quest netvault backupThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- fujielectric v-server vpr firmwareA Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and...9.8 Critical
- we-con levistudio hmi editor firmwareAn issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially...7.8 High
- advantech webaccessA Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3....9.8 Critical
- commvault edge, service pack 6 +1 moreCommvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix...9.8 Critical
- dlink dir-850l firmware, d-link dir-850l and potentially others +1 moreMultiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a...8.8 High
- liblouis, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreA missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of...7.8 High
- mit kerberos 5plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2...9.8 Critical
- advantech webaccessA Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8...6.3 Medium
- gnu wget, debian linux +1 moreGNU Wget: stack overflow in HTTP protocol handling8.8 High
- we-con levi studio hmi editorA Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and...9.8 Critical
- linux kernelarch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does...7.8 High
- ge intelligent platforms proficy hmi\/scada cimplicityA Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A...6.8 Medium
- advantech webaccessA stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8...9.8 Critical
- spidercontrol scada microbrowserA Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1...9.8 Critical
- Show moreLoading…