Base de CVEs

CVE-2020-37166 Média · 5.5 CWE-120 06/02/2026

AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service

AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the username field with a 1000-byte buffer, causing the application to become unresponsive and terminate.

CVE-2020-37165 Média · 5.5 CWE-120 06/02/2026

AbsoluteTelnet 11.12 - "license name" Denial of Service

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate a 2500-character payload and paste it into the license name field to trigger an application crash.

CVE-2020-37164 Média · 5.5 CWE-120 06/02/2026

AbsoluteTelnet 11.12 - "license entry" Denial of Service

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate a 2500-character payload and paste it into the license entry field to trigger an application crash.

CVE-2020-37155 Alta · 7.5 CWE-120 06/02/2026

Core FTP Lite 1.3 - Denial of Service (PoC)

Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input. Attackers can generate a 7000-byte payload of repeated 'A' characters to trigger an application crash without requiring additional interaction.

CVE-2020-37109 Alta · 7.5 CWE-120 06/02/2026

aSc TimeTables 2020.11.4 - Denial of Service

aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer. Attackers can generate a 1000-character buffer and paste it into the Subject title to trigger an application crash and potential instability.

CVE-2020-37107 Alta · 7.5 CWE-120 06/02/2026

Core FTP LE 2.2 - Denial of Service

Core FTP LE 2.2 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the account field with a large buffer. Attackers can create a text file with 20,000 repeated characters and paste it into the account field to cause the application to become unresponsive and require reinstallation.

CVE-2026-24922 Média · 5.5 CWE-120 06/02/2026

Classic Buffer Overflow em Huawei Harmonyos

Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2020-37131 Média · 5.5 CWE-120 05/02/2026

Product Key Explorer 4.2.2.0 - 'Key' Denial of Service

Nsauditor Product Key Explorer 4.2.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting a specially crafted registration key. Attackers can generate a payload of 1000 bytes of repeated characters and paste it into the 'Key' input field to trigger the application crash.

CVE-2020-37130 Alta · 7.5 CWE-120 05/02/2026

Nsauditor 3.2.0.0 - 'Name' Denial of Service

Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name field.

CVE-2020-37075 Crítica · 9.8 CWE-120 03/02/2026

Estouro de buffer na importação de arquivos do Add Computers Wizard do LanSend

O LanSend 3.2 contém uma vulnerabilidade de estouro de buffer na funcionalidade de importação de arquivos do Add Computers Wizard que permite a atacantes remotos executar código arbitrário. Atacantes podem criar um arquivo de carga maliciosa para acionar a sobrescrita de um manipulador de exceções estruturado (SEH) e executar shellcode ao importar computadores a partir de um arquivo.

CVE-2020-37074 Crítica · 9.8 CWE-120 03/02/2026

Estouro de buffer no Remote Desktop Audit no Assistente de Adição de Computadores (desvio de SEH)

O Remote Desktop Audit 2.3.0.157 contém uma vulnerabilidade de estouro de buffer que permite a invasores executar código arbitrário durante o processo de importação de arquivos do Assistente de Adição de Computadores. Invasores podem criar um arquivo de carga maliciosa para acionar um desvio de manipulador estruturado de exceções (SEH) e executar shellcode ao importar listas de computadores.

CVE-2020-37070 Crítica · 9.8 CWE-120 03/02/2026

Estouro de buffer no CloudMe 1.11.2 com risco de execução remota de código

O CloudMe 1.11.2 contém uma vulnerabilidade de estouro de buffer que permite a atacantes remotos executar código arbitrário por meio de pacotes de rede elaborados. Atacantes podem explorar a vulnerabilidade enviando uma carga útil especialmente elaborada ao serviço CloudMe em execução na porta 8888, possibilitando execução remota de código.

CVE-2020-37069 Crítica · 9.8 CWE-120 03/02/2026

Konica Minolta FTP Utility: estouro de buffer no comando NLST (CVE-2020-37069)

Konica Minolta FTP Utility 1.0 contém uma vulnerabilidade de estouro de buffer no comando NLST que permite que atacantes sobrescrevam registradores do sistema. Atacantes podem enviar um buffer superdimensionado de 1500 caracteres 'A' para travar o servidor FTP e potencialmente executar código não autorizado.

CVE-2020-37068 Crítica · 9.8 CWE-120 03/02/2026

Estouro de buffer no comando LIST do Konica Minolta FTP Utility

O Konica Minolta FTP Utility 1.0 contém uma vulnerabilidade de estouro de buffer no comando LIST que permite que atacantes sobrescrevam registradores do sistema. Atacantes podem enviar um buffer superdimensionado de 1500 caracteres 'A' para travar o servidor FTP e potencialmente executar código não autorizado.

CVE-2020-37065 Crítica · 9.8 CWE-120 03/02/2026

Estouro de buffer no StreamRipper32 2.6 via entrada SongPattern

StreamRipper32 versão 2.6 contém uma vulnerabilidade de estouro de buffer na seção Station/Song que permite que atacantes sobrescrevam memória ao manipular a entrada SongPattern. Atacantes podem criar um payload malicioso maior que 256 bytes para potencialmente executar código arbitrário e comprometer a aplicação.

CVE-2025-67189 Média · 6.5 CWE-120 03/02/2026

Classic Buffer Overflow em Totolink A950rg Firmware

A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The urlKeyword parameter is not properly validated, and the function concatenates multiple user-controlled fields into a fixed-size stack buffer without performing boundary checks. A remote attacker can exploit this flaw to cause denial of service or potentially achieve arbitrary code execution.

CVE-2025-67188 Crítica · 9.8 CWE-120 03/02/2026

Estouro de buffer na pilha em setRadvdCfg do TOTOLINK A950RG (CVE-2025-67188)

Existe uma vulnerabilidade de estouro de buffer em TOTOLINK A950RG V4.1.2cu.5204_B20210112. O problema reside na interface setRadvdCfg do módulo /lib/cste_modules/ipv6.so. A função não valida corretamente o tamanho do parâmetro radvdinterfacename, controlado pelo usuário, permitindo que atacantes remotos acionem um estouro de buffer na pilha.

CVE-2025-67186 Crítica · 9.8 CWE-120 03/02/2026

Estouro de buffer em setUrlFilterRules do TOTOLINK A950RG (CVE-2025-67186)

O TOTOLINK A950RG V4.1.2cu.5204_B20210112 contém uma vulnerabilidade de estouro de buffer na interface setUrlFilterRules de /lib/cste_modules/firewall.so. A vulnerabilidade ocorre porque o parâmetro url não é devidamente validado quanto ao tamanho, permitindo que atacantes remotos acionem um estouro de buffer, potencialmente levando à execução arbitrária de código ou negação de serviço.

CVE-2025-47399 Alta · 7.8 CWE-120 02/02/2026

Buffer Copy Without Checking Size of Input in Camera

Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.

CVE-2020-37050 Crítica · 9.8 CWE-120 30/01/2026

Estouro de buffer no Quick Player via arquivo .m3l malicioso

O Quick Player 1.3 contém uma vulnerabilidade de estouro de buffer que permite que atacantes executem código arbitrário por meio da criação de um arquivo .m3l malicioso com uma carga útil cuidadosamente construída. Atacantes podem acionar a vulnerabilidade carregando um arquivo especialmente criado pelo mecanismo de carregamento de arquivos da aplicação, o que potencialmente permite execução remota de código.

CVE-2020-37049 Alta · 8.4 CWE-120 30/01/2026

Frigate 3.36.0.9 - 'Command Line' Local Buffer Overflow

Frigate 3.36.0.9 contains a local buffer overflow vulnerability in the Command Line input field that allows attackers to execute arbitrary code. Attackers can craft a malicious payload to overflow the buffer, bypass DEP, and execute commands like launching calc.exe through a specially crafted input sequence.

CVE-2020-37043 Crítica · 9.8 CWE-120 30/01/2026

10-Strike Bandwidth Monitor 3.9 - Buffer Overflow

10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling remote code execution and launching arbitrary system commands.

CVE-2020-37042 Alta · 8.4 CWE-120 30/01/2026

Frigate Professional 3.36.0.9 - 'Find Computer' Local Buffer Overflow

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows attackers to execute arbitrary code by overflowing the computer name input field. Attackers can craft a malicious payload that triggers a buffer overflow, enabling code execution and launching calculator as a proof of concept.

CVE-2020-37040 Alta · 8.4 CWE-120 30/01/2026

Code Blocks 17.12 - 'File Name' Local Buffer Overflow

Code Blocks 17.12 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious file name with Unicode characters. Attackers can trigger the vulnerability by pasting a specially crafted payload into the file name field during project creation, potentially executing system commands like calc.exe.

CVE-2020-37036 Alta · 8.4 CWE-120 30/01/2026

RM Downloader 2.50.60 2006.06.23 - 'Load' Local Buffer Overflow

RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload with an egg hunter technique to bypass memory protections and execute commands like launching calc.exe.