Stack-based Buffer Overflow — CVEs by weakness type

Dap 2020 Firmware HIGH 8.8

CVE-2021-27248

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access p…

Patch available

Fix from $1,950 2021-04-14

Surveillance Station CRITICAL 9.8

CVE-2021-28797EPSS 6%

A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerabili…

Fix: 5.1.5.3.3 / 5.1.5.4.3+

Fix from $2,300 2021-04-14

D6220 Firmware HIGH 8.8

CVE-2021-27239

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version …

Fix: 1.0.0.54 / 1.0.0.66+

Fix from $1,950 2021-03-29

Arcgis Engine HIGH 7.8

CVE-2021-29097

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) …

Fix: after 10.8.1

Fix from $1,950 2021-03-25

Cairo HIGH 7.8

CVE-2020-35492

A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to …

Fix: 1.17.4+

Fix from $1,950 2021-03-18

Rv132w Firmware HIGH 7.2

CVE-2021-1287

A vulnerability in the web-based management interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers co…

Fix: 1.0.1.15 / 1.0.1.21+

Fix from $1,950 2021-03-18

Ruggedcom Rm1224 Firmware HIGH 8.8

CVE-2021-25667

A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE…

Fix: 2.1.3 / 4.1+

Fix from $1,950 2021-03-15

Hhvm HIGH 7.5

CVE-2020-1921

In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within the buffer…

Fix: 4.56.3 / 4.80.2+

Fix from $1,950 2021-03-10

Fvdesigner HIGH 7.8

CVE-2021-22666

Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing an attacke…

Fix: after 1.5.76

Fix from $1,950 2021-03-03

Enterprise Linux MEDIUM 6.7

CVE-2020-27749

A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variab…

Fix: 2.06+

Fix from $1,600 2021-03-03

Diskstation Manager HIGH 7.8

CVE-2021-26567

Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and…

Fix: 2.2.7.1 / 6.2.3-25426-3+

Fix from $1,950 2021-02-26

Diskstation Manager HIGH 8.1

CVE-2021-26561

Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle a…

Fix: 6.2.3-25426-3+

Fix from $1,950 2021-02-26

Voiceye Wsactivebridges HIGH 7.8

CVE-2020-7836

VOICEYE WSActiveBridgeES versions prior to 2.1.0.3 contains a stack-based buffer overflow vulnerability caused by improper bound checking parameter g…

Fix: 2.1.0.3+

Fix from $1,950 2021-02-24

Fedora HIGH 7.8

CVE-2020-28599

A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially craf…

Fix: after 2021.01

Fix from $1,950 2021-02-24

Levistudiou HIGH 7.8

CVE-2020-16243EPSS 12%

Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. Opening a specially crafted p…

Fix: after 2019-09-21

Fix from $1,950 2021-02-23

Surveillance Station CRITICAL 9.8

CVE-2020-2501

A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerabili…

Fix: 5.1.5.3.3 / 5.1.5.4.3+

Fix from $2,300 2021-02-17

Jt2go HIGH 7.8

CVE-2020-27001

A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications l…

Fix: 13.1.0.2+

Fix from $1,950 2021-02-09

Cx One HIGH 8.8

CVE-2020-27261EPSS 8%

The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary cod…

Fix: after 5.0.28

Fix from $1,950 2021-02-09

Rv016 Multi Wan Vpn Router Firmware HIGH 7.2

CVE-2021-1340