Skip to main content

Buffer Overflow

39322 CVEs technique

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2021-25142 Feb 08, 18:15 HIGH This Week

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Baseboard Management Controller Hpe
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-26826 Feb 08, 15:15 HIGH PATCH This Week

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Godot Engine Godotengine
NVD GitHub
CVSS 3.1
7.8
EPSS
1.5%
CVE-2021-26825 Feb 08, 15:15 HIGH PATCH This Week

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Integer Overflow Godot Engine Godotengine
NVD GitHub
CVSS 3.1
7.8
EPSS
1.5%
CVE-2021-26843 Feb 07, 21:15 HIGH POC This Week

An issue was discovered in sthttpd through 2.27.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Sthttpd
NVD GitHub
CVSS 3.1
7.5
EPSS
1.4%
CVE-2021-22305 Feb 06, 03:15 LOW Monitor

There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Huawei Mate 30 Firmware
NVD
CVSS 3.1
3.3
EPSS
0.2%
CVE-2021-22302 Feb 06, 03:15 HIGH This Week

There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Huawei Taurus Al00A Firmware
NVD
CVSS 3.1
7.1
EPSS
0.2%
CVE-2021-22306 Feb 06, 01:15 MEDIUM This Month

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). Rated medium severity (CVSS 4.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Huawei Mate 30 Firmware
NVD
CVSS 3.1
4.6
EPSS
0.2%
CVE-2021-22301 Feb 06, 00:15 MEDIUM This Month

Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Huawei Mate 30 Firmware
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-3382 Feb 05, 16:15 Go HIGH PATCH This Week

Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (crash) via vectors related to a file path. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Gitea
NVD GitHub
CVSS 3.1
7.5
EPSS
1.8%
CVE-2021-25249 Feb 04, 20:15 HIGH PATCH This Week

An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services) could allow a local. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Information Disclosure Memory Corruption Trend Micro Apex One +2
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2021-25248 Feb 04, 20:15 MEDIUM PATCH This Month

An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services) could allow an. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Buffer Overflow Information Disclosure Trend Micro Apex One Worry Free Business Security +1
NVD
CVSS 3.1
5.5
EPSS
0.9%
CVE-2021-0349 Feb 04, 19:15 MEDIUM This Month

In display driver, there is a possible memory corruption due to a use after free. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Denial Of Service Google Use After Free +2
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0348 Feb 04, 19:15 MEDIUM This Month

In vpu, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0347 Feb 04, 19:15 MEDIUM This Month

In ccu, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
4.4
EPSS
0.2%
CVE-2021-0346 Feb 04, 19:15 MEDIUM This Month

In vpu, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0344 Feb 04, 19:15 MEDIUM This Month

In mtkpower, there is a possible memory corruption due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0343 Feb 04, 19:15 MEDIUM This Month

In kisd, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-1348 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1347 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1346 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1345 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.2%
CVE-2021-1344 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.2%
CVE-2021-1343 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.2%
CVE-2021-1342 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1341 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1340 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1339 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1338 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1337 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.9%
CVE-2021-1336 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1335 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1334 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1333 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1332 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1331 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1330 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1329 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1328 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1327 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.2%
CVE-2021-1326 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1325 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1324 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-1323 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.2%
CVE-2021-1322 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.2%
CVE-2021-1321 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.2%
CVE-2021-1320 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.2%
CVE-2021-1319 Feb 04, 17:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Cisco Stack Overflow +6
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2021-0365 Feb 03, 00:15 MEDIUM This Month

In display driver, there is a possible memory corruption due to a use after free. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Denial Of Service Google Use After Free +2
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0362 Feb 03, 00:15 MEDIUM This Month

In aee, there is a possible memory corruption due to a stack buffer overflow. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0361 Feb 03, 00:15 MEDIUM This Month

In kisd, there is a possible out of bounds read due to improper input validation. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2021-0360 Feb 03, 00:15 MEDIUM This Month

In netdiag, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0359 Feb 03, 00:15 MEDIUM This Month

In netdiag, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0357 Feb 03, 00:15 MEDIUM This Month

In netdiag, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0355 Feb 03, 00:15 MEDIUM This Month

In kisd, there is a possible out of bounds write due to an integer overflow. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Integer Overflow Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0354 Feb 03, 00:15 MEDIUM This Month

In ged, there is a possible out of bounds write due to an integer overflow. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Integer Overflow Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0353 Feb 03, 00:15 MEDIUM This Month

In kisd, there is a possible memory corruption due to a heap buffer overflow. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2021-0352 Feb 03, 00:15 MEDIUM This Month

In RT regmap driver, there is a possible memory corruption due to type confusion. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Google Memory Corruption Android
NVD
CVSS 3.1
4.4
EPSS
0.1%
CVE-2021-25138 Jan 29, 19:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-25137 Jan 29, 19:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-25136 Jan 29, 19:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-25135 Jan 29, 19:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-25134 Jan 29, 19:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-25133 Jan 29, 19:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-25132 Jan 29, 19:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-25131 Jan 29, 19:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-25130 Jan 29, 19:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-25127 Jan 29, 19:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2021-25126 Jan 29, 19:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-3345 Jan 29, 15:15 HIGH PATCH This Week

_gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Oracle Gnupg Communications Billing And Revenue Management +1
NVD
CVSS 3.1
7.8
EPSS
1.1%
CVE-2021-25123 Jan 29, 13:15 HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware Cloudline Cl4100 Gen10 Server Firmware Cloudline Cl5200 Gen9 Server Firmware +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-22655 Jan 27, 20:15 HIGH This Week

Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure V Server V Simulator +1
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2021-22653 Jan 27, 20:15 HIGH This Week

Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption V Server V Simulator +1
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2021-22641 Jan 27, 20:15 HIGH POC This Week

A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Heap Overflow V Server V Simulator +1
NVD
CVSS 3.1
7.8
EPSS
2.1%
CVE-2021-22637 Jan 27, 20:15 HIGH This Week

Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow V Server V Simulator +1
NVD
CVSS 3.1
7.8
EPSS
2.1%
CVE-2021-3272 Jan 27, 08:15 MEDIUM POC This Month

jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Fedora Jasper Fedoraproject +1
NVD GitHub
CVSS 3.1
5.5
EPSS
1.1%
CVE-2021-3304 Jan 26, 18:16 CRITICAL POC Act Now

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow F St 3686 Firmware Sagemcom
NVD
CVSS 3.1
9.8
EPSS
1.3%
CVE-2021-3185 Jan 26, 18:16 CRITICAL PATCH Act Now

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

RCE Buffer Overflow Gst Plugins Bad Freedesktop
NVD
CVSS 3.1
9.8
EPSS
2.4%
CVE-2021-25901 Jan 26, 18:16 Cargo MEDIUM PATCH This Month

An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Lazy Init
NVD
CVSS 3.1
5.3
EPSS
1.3%
CVE-2021-25900 Jan 26, 18:16 Cargo CRITICAL POC PATCH Act Now

An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Smallvec Servo
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-22698 Jan 26, 18:16 HIGH This Week

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow File Upload Schneider Electric Ecostruxure Power Build Rapsody
NVD
CVSS 3.1
7.8
EPSS
3.9%
CVE-2021-1068 Jan 20, 23:15 HIGH This Week

NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write to a memory location that is outside the intended boundary. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure Nvidia Shield Experience
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2021-1241 Jan 20, 21:15 HIGH This Week

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Cisco Catalyst Sd Wan Manager Ios Xe Sd Wan +3
NVD
CVSS 3.1
7.5
EPSS
1.4%
CVE-2021-1301 Jan 20, 20:15 CRITICAL Act Now

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Cisco Catalyst Sd Wan Manager Ios Xe Sd Wan Sd Wan Firmware +2
NVD
CVSS 3.1
9.8
EPSS
2.1%
CVE-2021-1300 Jan 20, 20:15 CRITICAL Act Now

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Cisco Catalyst Sd Wan Manager Ios Xe Sd Wan Sd Wan Firmware +2
NVD
CVSS 3.1
9.8
EPSS
2.1%
CVE-2021-1279 Jan 20, 20:15 HIGH This Week

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Cisco Catalyst Sd Wan Manager Ios Xe Sd Wan +3
NVD
CVSS 3.1
8.6
EPSS
1.4%
CVE-2021-1278 Jan 20, 20:15 HIGH This Week

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Cisco Catalyst Sd Wan Manager Ios Xe Sd Wan +3
NVD
CVSS 3.1
7.5
EPSS
1.7%
CVE-2021-1274 Jan 20, 20:15 HIGH This Week

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Cisco Catalyst Sd Wan Manager Ios Xe Sd Wan +3
NVD
CVSS 3.1
8.6
EPSS
1.9%
CVE-2021-1273 Jan 20, 20:15 HIGH This Week

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Cisco Catalyst Sd Wan Manager Ios Xe Sd Wan +3
NVD
CVSS 3.1
8.6
EPSS
1.4%
CVE-2021-3182 Jan 19, 15:15 HIGH This Week

D-Link DCS-5220 devices have a buffer overflow. Rated high severity (CVSS 8.0), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption D-Link Dcs 5220 Firmware
NVD
CVSS 3.1
8.0
EPSS
0.9%
CVE-2021-3177 Jan 19, 06:15 CRITICAL POC PATCH THREAT Act Now

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Python Debian Oracle +11
NVD GitHub
CVSS 3.1
9.8
EPSS
23.3%
CVE-2021-25142
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Baseboard Management Controller Hpe
NVD
CVE-2021-26826
EPSS 2% CVSS 7.8
HIGH PATCH This Week

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +2
NVD GitHub
CVE-2021-26825
EPSS 2% CVSS 7.8
HIGH PATCH This Week

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Integer Overflow +2
NVD GitHub
CVE-2021-26843
EPSS 1% CVSS 7.5
HIGH POC This Week

An issue was discovered in sthttpd through 2.27.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Sthttpd
NVD GitHub
CVE-2021-22305
EPSS 0% CVSS 3.3
LOW Monitor

There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Huawei Mate 30 Firmware
NVD
CVE-2021-22302
EPSS 0% CVSS 7.1
HIGH This Week

There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Huawei +1
NVD
CVE-2021-22306
EPSS 0% CVSS 4.6
MEDIUM This Month

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). Rated medium severity (CVSS 4.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Huawei +1
NVD
CVE-2021-22301
EPSS 0% CVSS 6.7
MEDIUM This Month

Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Huawei Mate 30 Firmware
NVD
CVE-2021-3382 Go
EPSS 2% CVSS 7.5
HIGH PATCH This Week

Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (crash) via vectors related to a file path. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption +1
NVD GitHub
CVE-2021-25249
EPSS 0% CVSS 7.8
HIGH PATCH This Week

An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services) could allow a local. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Information Disclosure Memory Corruption +4
NVD
CVE-2021-25248
EPSS 1% CVSS 5.5
MEDIUM PATCH This Month

An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services) could allow an. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Buffer Overflow Information Disclosure Trend Micro +3
NVD
CVE-2021-0349
EPSS 0% CVSS 6.7
MEDIUM This Month

In display driver, there is a possible memory corruption due to a use after free. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Denial Of Service +4
NVD
CVE-2021-0348
EPSS 0% CVSS 6.7
MEDIUM This Month

In vpu, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2021-0347
EPSS 0% CVSS 4.4
MEDIUM This Month

In ccu, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2021-0346
EPSS 0% CVSS 6.7
MEDIUM This Month

In vpu, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2021-0344
EPSS 0% CVSS 6.7
MEDIUM This Month

In mtkpower, there is a possible memory corruption due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +1
NVD
CVE-2021-0343
EPSS 0% CVSS 6.7
MEDIUM This Month

In kisd, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2021-1348
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1347
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1346
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1345
EPSS 2% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1344
EPSS 2% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1343
EPSS 2% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1342
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1341
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1340
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1339
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1338
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1337
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1336
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1335
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1334
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1333
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1332
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1331
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1330
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1329
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1328
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1327
EPSS 2% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1326
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1325
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1324
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1323
EPSS 2% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1322
EPSS 2% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1321
EPSS 2% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1320
EPSS 2% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-1319
EPSS 3% CVSS 7.2
HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2021-0365
EPSS 0% CVSS 6.7
MEDIUM This Month

In display driver, there is a possible memory corruption due to a use after free. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Denial Of Service +4
NVD
CVE-2021-0362
EPSS 0% CVSS 6.7
MEDIUM This Month

In aee, there is a possible memory corruption due to a stack buffer overflow. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2021-0361
EPSS 0% CVSS 6.7
MEDIUM This Month

In kisd, there is a possible out of bounds read due to improper input validation. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Information Disclosure +2
NVD
CVE-2021-0360
EPSS 0% CVSS 6.7
MEDIUM This Month

In netdiag, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2021-0359
EPSS 0% CVSS 6.7
MEDIUM This Month

In netdiag, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2021-0357
EPSS 0% CVSS 6.7
MEDIUM This Month

In netdiag, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2021-0355
EPSS 0% CVSS 6.7
MEDIUM This Month

In kisd, there is a possible out of bounds write due to an integer overflow. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2021-0354
EPSS 0% CVSS 6.7
MEDIUM This Month

In ged, there is a possible out of bounds write due to an integer overflow. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2021-0353
EPSS 0% CVSS 6.7
MEDIUM This Month

In kisd, there is a possible memory corruption due to a heap buffer overflow. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2021-0352
EPSS 0% CVSS 4.4
MEDIUM This Month

In RT regmap driver, there is a possible memory corruption due to type confusion. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Google +2
NVD
CVE-2021-25138
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-25137
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-25136
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-25135
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-25134
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-25133
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-25132
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-25131
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-25130
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-25127
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-25126
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-3345
EPSS 1% CVSS 7.8
HIGH PATCH This Week

_gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Oracle +3
NVD
CVE-2021-25123
EPSS 0% CVSS 7.8
HIGH This Week

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Cloudline Cl5800 Gen10 Server Firmware Cloudline Cl3100 Gen10 Server Firmware +4
NVD
CVE-2021-22655
EPSS 1% CVSS 7.8
HIGH This Week

Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +3
NVD
CVE-2021-22653
EPSS 1% CVSS 7.8
HIGH This Week

Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +3
NVD
CVE-2021-22641
EPSS 2% CVSS 7.8
HIGH POC This Week

A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Heap Overflow +3
NVD
CVE-2021-22637
EPSS 2% CVSS 7.8
HIGH This Week

Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow +3
NVD
CVE-2021-3272
EPSS 1% CVSS 5.5
MEDIUM POC This Month

jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Fedora +3
NVD GitHub
CVE-2021-3304
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow F St 3686 Firmware Sagemcom
NVD
CVE-2021-3185
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

RCE Buffer Overflow Gst Plugins Bad +1
NVD
CVE-2021-25901 Cargo
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Lazy Init
NVD
CVE-2021-25900 Cargo
EPSS 2% CVSS 9.8
CRITICAL POC PATCH Act Now

An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Smallvec +1
NVD
CVE-2021-22698
EPSS 4% CVSS 7.8
HIGH This Week

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow File Upload +2
NVD
CVE-2021-1068
EPSS 0% CVSS 7.8
HIGH This Week

NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write to a memory location that is outside the intended boundary. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure +2
NVD
CVE-2021-1241
EPSS 1% CVSS 7.5
HIGH This Week

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Cisco +5
NVD
CVE-2021-1301
EPSS 2% CVSS 9.8
CRITICAL Act Now

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Cisco Catalyst Sd Wan Manager +4
NVD
CVE-2021-1300
EPSS 2% CVSS 9.8
CRITICAL Act Now

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Cisco Catalyst Sd Wan Manager +4
NVD
CVE-2021-1279
EPSS 1% CVSS 8.6
HIGH This Week

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Cisco +5
NVD
CVE-2021-1278
EPSS 2% CVSS 7.5
HIGH This Week

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Cisco +5
NVD
CVE-2021-1274
EPSS 2% CVSS 8.6
HIGH This Week

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Cisco +5
NVD
CVE-2021-1273
EPSS 1% CVSS 8.6
HIGH This Week

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Cisco +5
NVD
CVE-2021-3182
EPSS 1% CVSS 8.0
HIGH This Week

D-Link DCS-5220 devices have a buffer overflow. Rated high severity (CVSS 8.0), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption D-Link +1
NVD
CVE-2021-3177
EPSS 23% CVSS 9.8
CRITICAL POC PATCH THREAT Act Now

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Python +13
NVD GitHub
Prev Page 268 of 437 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy