Overview 54 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 8 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
54
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
54
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
54
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 11 / year
19972
Not applicable2
High2
not blocked2
Working exploit published2
19981
Not applicable1
High1
not blocked1
Working exploit published1
19990
20000
20011
Not applicable1
High1
not blocked1
Working exploit published1
20020
20036
Not applicable6
High5
Medium1
not blocked6
Working exploit published6
20040
20050
20060
20071
Not applicable1
High1
not blocked1
Working exploit published1
20081
Not applicable1
High1
not blocked1
Working exploit published1
20092
Not applicable2
High1
Medium1
not blocked2
Working exploit published2
20101
Not applicable1
Critical1
not blocked1
Working exploit published1
20110
20121
Not applicable1
High1
not blocked1
Working exploit published1
20130
20140
20150
20160
20171
Not applicable1
Critical1
not blocked1
Working exploit published1
20182
Not applicable2
Critical1
High1
not blocked2
Working exploit published2
20197
Not applicable7
Critical6
Medium1
not blocked7
Working exploit published7
20209
Not applicable9
Critical4
High3
Medium2
not blocked9
Working exploit published9
20212
Not applicable2
High2
not blocked2
Working exploit published2
20220
20232
Not applicable2
Critical2
not blocked2
Working exploit published2
20241
Not applicable1
High1
not blocked1
Working exploit published1
202511
Not applicable11
Critical2
High6
Medium3
not blocked11
Working exploit published11
20263
Not applicable3
Critical1
High2
not blocked3
Working exploit published3
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-32746 | Critical | 2026-03-13 | Not applicable | Working exploit published | telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full. |
| CVE-2026-25994 | High | 2026-02-11 | Not applicable | Working exploit published | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Session when processing credentials with excessively long usernames. |
| CVE-2025-68137 | High | 2026-01-21 | Not applicable | Working exploit published | EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in `SdpPacket::parse_header()` allows the current buffer length to be set to 7 after a complete header of size 8 has been read. The remaining length to read is computed using the current length subtracted by the header length which results in a negative value. This value is then interpreted as `SIZE_MAX` (or slightly less) because the expected type of the argument is `size_t`. Depending on whether the server is plain TCP or TLS, this leads to either an infinite loop or a stack buffer overflow. Version 2025.10.0 fixes the issue. |
| CVE-2025-10666 | High | 2025-09-18 | Not applicable | Working exploit published | A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnerability is the function sub_4106d4 of the file apply.cgi. The manipulation of the argument countdown_time results in buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be exploited. This vulnerability only affects products that are no longer supported by the maintainer. |
| CVE-2010-10017 | High | 2025-08-30 | Not applicable | Working exploit published | WM Downloader version 3.1.2.2 is vulnerable to a buffer overflow when processing a specially crafted .m3u playlist file. The application fails to properly validate input length, allowing an attacker to overwrite structured exception handler (SEH) records and execute arbitrary code. Exploitation occurs locally when a user opens the malicious file, and the payload executes with the privileges of the current user. |
| CVE-2010-10016 | Critical | 2025-08-30 | Not applicable | Working exploit published | BS.Player version 2.57 (build 1051) contains a vulnerability in its playlist import functionality. When processing .m3u files, the application fails to properly validate the length of playlist entries, resulting in a buffer overflow condition. This flaw occurs during parsing of long URLs embedded in the playlist, allowing overwrite of Structured Exception Handler (SEH) records. The vulnerability is triggered upon opening a crafted playlist file and affects the Unicode parsing logic in the Windows client. |
| CVE-2011-10025 | High | 2025-08-20 | Not applicable | Working exploit published | Subtitle Processor 7.7.1 contains a buffer overflow vulnerability in its .m3u file parser. When a crafted playlist file is opened, the application converts input to Unicode and copies it to a fixed-size stack buffer without proper bounds checking. This allows an attacker to overwrite the Structured Exception Handler (SEH) and execute arbitrary code. |
| CVE-2011-10022 | High | 2025-08-20 | Not applicable | Working exploit published | SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header. The vulnerability occurs due to improper bounds checking on the header value, allowing an attacker to overwrite the Structured Exception Handler (SEH) and execute arbitrary code. Exploitation requires the victim to open a media file that triggers an HTTP request to a malicious server, which responds with a crafted Content-Type header. |
| CVE-2012-10035 | Critical | 2025-08-05 | Not applicable | Working exploit published | Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command. By sending a specially crafted payload, an unauthenticated remote attacker can overwrite memory structures and execute arbitrary code with SYSTEM privileges. |
| CVE-2025-34128 | High | 2025-07-16 | Not applicable | Working exploit published | A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control (VideoPlayer.ocx) version 2.6 when handling overly long arguments to the ConvertFile() method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code within the context of the current process. |
| CVE-2025-34106 | High | 2025-07-15 | Not applicable | Working exploit published | A buffer overflow vulnerability exists in PDF Shaper versions 3.5 and 3.6 when converting a crafted PDF file to an image using the 'Convert PDF to Image' functionality. An attacker can exploit this vulnerability by tricking a user into opening a maliciously crafted PDF file, leading to arbitrary code execution under the context of the user. This vulnerability has been verified on Windows XP, 7, 8, and 10 platforms using the PDFTools.exe component. |
| CVE-2025-5548 | Medium | 2025-06-04 | Not applicable | Working exploit published | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. |
| CVE-2025-4871 | Medium | 2025-05-18 | Not applicable | Working exploit published | A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. |
| CVE-2025-4255 | Medium | 2025-05-05 | Not applicable | Working exploit published | A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RMD Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. |
| CVE-2011-10005 | High | 2024-01-16 | Not applicable | Working exploit published | A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250716. |
| CVE-2023-36355 | Critical | 2023-06-22 | Not applicable | Working exploit published | TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. |
| CVE-2023-28502 | Critical | 2023-03-29 | Not applicable | Working exploit published | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow in the "udadmin" service that can lead to remote code execution as the root user. |
| CVE-2015-2099 | High | 2021-07-22 | Not applicable | Working exploit published | Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) GetRecFileInfo function in the FileConverter.FileConverterCtrl.1 control, (2) Login function in the LoginContoller.LoginControllerCtrl.1 control, or (3) GetThumbnail function in the WESPPlayback.WESPPlaybackCtrl.1 control. |
| CVE-2015-2098 | High | 2021-07-22 | Not applicable | Working exploit published | Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unspecified vectors to the (1) Connect, (2) ConnectEx, or (3) ConnectEx2 function in the WESPEvent.WESPEventCtrl.1 control; (4) AudioOnlySiteChannel function in the WESPPlayback.WESPPlaybackCtrl.1 control; (5) Connect or (6) ConnectEx function in the WESPPTZ.WESPPTZCtrl.1 control; (7) SiteChannel property in the WESPPlayback.WESPPlaybackCtrl.1 control; (8) SiteName property in the WESPPlayback.WESPPlaybackCtrl.1 control; or (9) OpenDVrSSite function in the WESPPTZ.WESPPTZCtrl.1 control. |
| CVE-2020-7374 | High | 2020-08-12 | Not applicable | Working exploit published | Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the user running the Documalis Free PDF Editor or Documalis Free PDF Scanner software. |
| CVE-2020-15956 | High | 2020-08-04 | Not applicable | Working exploit published | ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer overflow and application termination via a malformed payload. |
| CVE-2020-2944 | High | 2020-04-15 | Not applicable | Working exploit published | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). |
| CVE-2020-8012 | Critical | 2020-02-18 | Not applicable | Working exploit published | CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code. |
| CVE-2015-7890 | Medium | 2020-02-12 | Not applicable | Working exploit published | Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung S6 Edge, allow local users to cause a denial of service (memory corruption) via a large (1) buffer or (2) size parameter. |
| CVE-2009-4067 | Medium | 2020-02-11 | Not applicable | Working exploit published | Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system. |
| CVE-2013-1595 | Critical | 2020-01-24 | Not applicable | Working exploit published | A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or cause a Denial of Service. |
| CVE-2013-1592 | Critical | 2020-01-23 | Not applicable | Working exploit published | A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user execute arbitrary code. |
| CVE-2015-7874 | Critical | 2020-01-15 | Not applicable | Working exploit published | Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname. |
| CVE-2013-4743 | Critical | 2019-12-27 | Not applicable | Working exploit published | Static HTTP Server 1.0 has a Local Overflow |
| CVE-2019-6192 | Medium | 2019-12-10 | Not applicable | Working exploit published | A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service. |
| CVE-2019-12518 | Critical | 2019-12-02 | Not applicable | Working exploit published | Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability. |
| CVE-2019-17181 | Critical | 2019-10-28 | Not applicable | Working exploit published | A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET or HEAD request that can result in a compromise of the hosting system. |
| CVE-2019-16724 | Critical | 2019-09-24 | Not applicable | Working exploit published | File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331. |
| CVE-2019-16702 | Critical | 2019-09-23 | Not applicable | Working exploit published | Integard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow involving a long NoJs parameter to the /LoginAdmin URI. |
| CVE-2010-5333 | Critical | 2019-09-13 | Not applicable | Working exploit published | The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. An SEH-overwrite buffer overflow already existed for the vulnerable software. This CVE is to track an alternate exploitation method, utilizing an EIP-overwrite buffer overflow. |
| CVE-2018-12584 | Critical | 2018-07-16 | Not applicable | Working exploit published | The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled. |
| CVE-2017-12718 | High | 2018-02-15 | Not applicable | Working exploit published | A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify input buffer size prior to copying, leading to a buffer overflow, allowing remote code execution on the target device. The pump receives the potentially malicious input infrequently and under certain conditions, increasing the difficulty of exploitation. |
| CVE-2017-15222 | Critical | 2017-10-24 | Not applicable | Working exploit published | Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code. |
| CVE-2012-2763 | High | 2012-07-12 | Not applicable | Working exploit published | Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server. |
| CVE-2010-1205 | Critical | 2010-06-30 | Not applicable | Working exploit published | Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row. |
| CVE-2009-0884 | Medium | 2009-03-12 | Not applicable | Working exploit published | Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets. |
| CVE-2009-0182 | High | 2009-01-20 | Not applicable | Working exploit published | Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line. |
| CVE-2008-0379 | High | 2008-01-22 | Not applicable | Working exploit published | Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow. |
| CVE-2007-1770 | High | 2007-03-30 | Not applicable | Working exploit published | Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations, allows remote attackers to cause a denial of service (giomgr crash) and execute arbitrary code via long parameters in crafted requests. |
| CVE-2003-1387 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username. |
| CVE-2003-1228 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via an HTTP request with a long path. |
| CVE-2003-0947 | High | 2003-12-15 | Not applicable | Working exploit published | Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable. |
| CVE-2003-0595 | High | 2003-08-27 | Not applicable | Working exploit published | Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a long cookie to Witango_UserReference. |
| CVE-2003-0358 | Medium | 2003-06-09 | Not applicable | Working exploit published | Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option. |
| CVE-2002-1337 | High | 2003-03-07 | Not applicable | Working exploit published | Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c. |
| CVE-2000-1094 | High | 2001-01-09 | Not applicable | Working exploit published | Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument. |
| CVE-1999-0284 | High | 1998-01-01 | Not applicable | Working exploit published | Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. |
| CVE-1999-0038 | High | 1997-04-26 | Not applicable | Working exploit published | Buffer overflow in xlock program allows local users to execute commands as root. |
| CVE-1999-0046 | High | 1997-02-06 | Not applicable | Working exploit published | Buffer overflow of rlogin program using TERM environmental variable. |