2014-06-02 - CVE Archive

CVE-2014-3936 Jun 02, 14:55 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 84.3%.

RCE Buffer Overflow D-Link Dir 505L Shareport Mobile Companion Dir505 Shareport Mobile Companion Firmware +4

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

84.3%

Threat

6.0

CVE-2013-2019 Jun 02, 15:55 CRITICAL Act Now

Stack-based buffer overflow in BOINC 6.10.58 and 6.12.34 allows remote attackers to have unspecified impact via multiple file_signature elements. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Buffer Overflow Boinc Client Universityofcalifornia

NVD

CVSS 2.0

9.3

EPSS

1.7%

CVE-2013-2298 Jun 02, 15:55 CRITICAL Act Now

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Buffer Overflow Boinc Client Universityofcalifornia

NVD

CVSS 2.0

9.3

EPSS

1.6%

CVE-2014-2959 Jun 02, 19:55 CRITICAL Act Now

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 (646G.GS002) allows remote. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Dell Scalar I500 Firmware Scalar I500 Powervault Ml6000 Firmware +2

NVD

CVSS 2.0

9.0

EPSS

1.5%