Browse CVEs

CRITICAL 9.8 CVE-2017-12707 A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. Opening a maliciously crafted h… Scada Microbrowser after 1.6.30.144 Fix from $2,3002017-08-25 MEDIUM 6.3 CVE-2017-7936 A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i… Vybrid Mvf30nn151cku26 Firmware Mitigation only Fix from $1,6002017-08-07 MEDIUM 6.6 CVE-2017-9647 A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between … S Gold 2 Pmb 8876 Mitigation only Fix from $1,6002017-08-07 CRITICAL 9.8 CVE-2017-9629EPSS 10% A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The stack-b… Wonderware Archestra Logger after 2017.426.2307.1 Fix from $2,3002017-07-07 HIGH 7.5 CVE-2017-7910 A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be able to run a… Wind Analysis Mitigation only Fix from $1,9502017-06-14 HIGH 7.5 CVE-2017-5177EPSS 18% A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability has been ide… Winplc7 Firmware after 5.0.45.5921 Fix from $1,9502017-05-19 CRITICAL 9.8 CVE-2017-6025 A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, pa… Web Server after 2.3 Fix from $2,3002017-05-19 HIGH 8.8 CVE-2017-6035 A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer over… Levi Studio Hmi Editor after 1.8.0 Fix from $1,9502017-04-27 CRITICAL 9.8 CVE-2017-6023 An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs:… Ethernet Module Configuration Tool Cbe Firmware after 3.5 Fix from $2,3002017-03-16 CRITICAL 9.8 CVE-2015-6490EPSS 7% Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attacker… Micrologix 1100 Firmware after 15.002 Fix from $2,3002015-10-28 HIGH 7.5 CVE-2014-9200EPSS 6% Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modb… Somachine Mitigation only Fix from $1,9502015-02-01 HIGH 10.0 CVE-2014-9190EPSS 6% Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrar… Wonderware Intouch Access Anywhere Server Mitigation only Fix from $1,9502015-01-10 HIGH 7.8 CVE-2014-9163 KEVEPSS 20% Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 o… Flash Player 11.2.202.425 / 13.0.0.259+ Fix from $1,9502014-12-10 HIGH 8.4 CVE-2013-2597 KEV Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualco… Android Msm Mitigation only Fix from $1,9502014-08-31 HIGH 7.5 CVE-2014-2364EPSS 61% Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1)… Advantech Webaccess after 7.1 Fix from $1,9502014-07-19 HIGH 8.3 CVE-2014-0782EPSS 57% Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 a… B\/m9000cs Software after 5.05.01 Fix from $1,9502014-05-16 HIGH 7.5 CVE-2014-0764 By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then ex… Advantech Webaccess after 7.1 Fix from $1,9502014-04-12 HIGH 7.5 CVE-2014-0765 To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, the stati… Advantech Webaccess after 7.1 Fix from $1,9502014-04-12 HIGH 7.5 CVE-2014-0766 An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically sized buffer on the stack to overflow the… Advantech Webaccess after 7.1 Fix from $1,9502014-04-12 HIGH 7.5 CVE-2014-0767 An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the stat… Advantech Webaccess after 7.1 Fix from $1,9502014-04-12 HIGH 7.5 CVE-2014-0768 An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer. The attacker may then r… Advantech Webaccess after 7.1 Fix from $1,9502014-04-12 HIGH 7.5 CVE-2014-0770 By providing an overly long string to the UserName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then ex… Advantech Webaccess after 7.1 Fix from $1,9502014-04-12 HIGH 10.0 CVE-2014-0787EPSS 16% Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code via a crafted packet. Kingscada after 3.1.2 Fix from $1,9502014-04-12 HIGH 9.0 CVE-2014-0783EPSS 68% Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a cr… Centum Cs 3000 No fix yet Fix from $1,9502014-03-14 HIGH 8.3 CVE-2014-0784EPSS 36% Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a c… Centum Cs 3000 No fix yet Fix from $1,9502014-03-14 MEDIUM 6.9 CVE-2014-0774 Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLU… Ofs Test Client Tlxcdlfofs33 Mitigation only Fix from $1,6002014-02-28 HIGH 7.8 CVE-2014-0753 Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service (system cras… Integraxor after 4.1.4380 Fix from $1,9502014-01-21 HIGH 7.5 CVE-2010-3872 A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgi… Mod Fcgid after 2.3.5 Fix from $1,9502010-11-22 HIGH 8.8 CVE-2008-0015 KEVEPSS 77% Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX… Windows 2003 Server Mitigation only Fix from $1,9502009-07-07 HIGH 8.8 CVE-2009-0927 KEVEPSS 97% Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute ar… Acrobat Reader 7.1.1 / 8.1.3+ Fix from $1,9502009-03-19