CWE-121: Stack-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the stack.
Also known as Stack Overflow, Stack Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- fuji electric alpha5 smart loader, fujielectric alpha5 smart loader firmware +1 moreMultiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior...7.8 High
- microsoft windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems, windows 10 version 1903 for x64-based systems +3 more +5 moreWindows Subsystem for Linux Elevation of Privilege Vulnerability7.8 High
- national renewable energy laboratory (nrel) energyplusNREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an...5.5 Medium
- juniper junos, juniper networks junos os, debian linux +2 moreJunos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow7.8 High
- redis, canonical ubuntu linux, debian linux +6 more +8 moreA stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions...7.2 High
- postgresql, fedoraproject fedora, opensuse leap +1 more +3 morePostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack...7.5 High
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreWhen receiving calls using WhatsApp for Android, a missing size check when parsing a sender...9.8 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreWhen receiving calls using WhatsApp on Android, a stack allocation failed to properly account for...9.8 Critical
- facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 moreWhen receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided...9.8 Critical
- orpak siteomatA stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote...9.8 Critical
- emerson ovation ocr400 controller, ovation ocr400 firmware +1 moreIn Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow...8.8 High
- opto 22 optodatalink, optoopcserver, pac display basic +5 more +7 moreA vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project...9.8 Critical
- rockwell automation armor compact guardlogix 5370 controllers, compact guardlogix 5370 controllers, compactlogix 5370 l1 controllers +7 more +9 moreRockwell Automation CompactLogix 5370 Stack-based Buffer Overflow7.5 High
- barco wepresent wipg-1000p firmware, crestron am-100 firmware, am-101 firmware +10 more +12 moreThe Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG...9.8 Critical
- deltaww cncsoft screeneditor, ics-cert delta industrial automation cncsoft +1 moreDelta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple...7.8 High
- juniper junos, juniper networks junos os +1 moreQFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) process9.8 Critical
- advantech webaccess, webaccess/scada +1 moreAdvantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow...9.8 Critical
- rockwell automation rslinx classic, rockwellautomation rslinx +1 moreA vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An...9.8 Critical
- honeywell experion pks, experion process knowledge system +1 moreMultiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all...9.8 Critical
- opto 22 optodatalink, optoopcserver, pac display basic +5 more +7 moreA specially crafted configuration file could be used to cause a stack-based buffer overflow...7.8 High
- fatek automation fv designer, automation pm designer v3 +1 moreA malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek...7.5 High
- gpsd project gpsd, microjson project microjson, debian linux +1 more +3 moregpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a...8.8 High
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file...7.5 High
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside...7.5 High
- tenable alcatel lucent i-240w-q gpon ont, nokia i-240w-q gpon ont firmware +1 moreThe Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a...9.8 Critical
- tenable alcatel lucent i-240w-q gpon ont, nokia i-240w-q gpon ont firmware +1 moreThe Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a...8.8 High
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside...6.5 Medium
- ics-cert wecon levistudiou, we-con levistudiou +1 moreMultiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and...7.8 High
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....7.1 High
- dokan open source file system, dokan-dev dokany +1 moreDokan file system driver contains a stack-based buffer overflow7.8 High
- foxitsoftware quick pdf libraryIn Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or...7.8 High
- siemens sinumerik 808d v4.7 firmware, sinumerik 808d v4.8 firmware, sinumerik 828d v4.7 firmware +3 more +5 moreA vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 ...7.8 High
- omron cx-one, cx-programmer, cx-server +2 moreTwo stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and...7.8 High
- ics-cert teledyne dalsa sherlock, teledynedalsa sherlock +1 moreA stack-based buffer overflow vulnerability has been identified in Teledyne DALSA Sherlock...9.8 Critical
- losant arduino mqtt clientThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- aveva edge, indusoft web studio, intouch machine edition 2014 +1 more +3 moreInduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine...9.8 Critical
- advantech webaccessWebAccess Versions 8.3.2 and prior. The application fails to properly validate the length of user...7.8 High
- advantech webaccessAdvantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities...9.8 Critical
- opto 22 pac control basic and pac control professional, opto22 pac control +1 moreA stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control...9.8 Critical
- lcds laquis scadaLAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow...7.8 High
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer...6.5 Medium
- delta electronics industrial automation tpeditor, deltaww tpeditor +1 moreIn Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based...7.8 High
- we-con pi studio, pi studio hmi +1 moreWECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34...9.8 Critical
- delta electronics ispsoftDelta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file,...7.8 High
- fuji electric frenic loader of frenic-mini (c1), frenic-mini (c2), frenic-eco, frenic-multi, frenic-mega, frenic-ace, fujielectric frenic loader 3.3 firmware +1 moreFuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco,...9.8 Critical
- fuji electric v-server, fujielectric v-server firmware +1 moreFuji Electric V-Server 4.0.3.0 and prior, A stack-based buffer overflow vulnerability has been...9.8 Critical
- we-con levistudiouWECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow...8.8 High
- samsung galaxy s8, galaxy s8 firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreA security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in...7.0 High
- rockwell automation rslinx classic, rockwellautomation rslinx +1 moreRockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a...9.8 Critical
- Show moreLoading…