14993 vulnerabilidades · General Orden: CVSS EPSS Año ID
CVE-2018-25262
Angry IP Scanner for Linux General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-787 1 PoC

Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the application by supplying malformed input to the port selection field. Attackers can craft a malicious string containing buffer overflow patterns and paste it into the Preferences Ports tab to trigger an application crash.

CVE-2018-25306
PDFunite General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-120 1 PoC

PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmentation fault in the XRef::getEntry function within libpoppler by providing a specially crafted PDF file to the pdfunite utility.

CVE-2018-25227
Valentina Studio General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-466 1 PoC

Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can trigger the crash by pasting a 256-byte buffer of repeated characters into the Host parameter during server connection attempts.

CVE-2018-25244
Eco Search General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-1312 1 PoC

Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar and trigger a crash by initiating a search operation.

CVE-2018-25235
NetworkActiv Web Server General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-787 1 PoC

NetworkActiv Web Server 4.0 contains a buffer overflow vulnerability in the username field of the Security options that allows local attackers to crash the application by supplying an excessively long string. Attackers can trigger a denial of service by entering a crafted username value exceeding the expected buffer size through the Set username interface.

CVE-2018-25233
WebDrive General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-233 1 PoC

WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the username field during Secure WebDAV connection setup. Attackers can input a buffer-overflow payload of 5000 bytes in the username parameter and trigger a connection test to cause the application to crash.

CVE-2018-25288
StyleWriter General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-120 1 PoC

StyleWriter 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a 6000-byte payload into the Pattern to Find or Advice Message fields in the Add Pattern dialog to trigger a denial of service condition.

CVE-2018-25240
Watchr General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-1260 1 PoC

Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to cause the application to crash.

CVE-2018-25286
Easy PhotoResQ General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-120 1 PoC

Easy PhotoResQ 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Folder/filename field. Attackers can input a 6000-byte payload through the File Options dialog to trigger a denial of service condition.

CVE-2018-25271
Textpad General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-787 1 PoC

Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through the Run command interface. Attackers can paste a 5000-byte payload into the Command field via Tools > Run to trigger a buffer overflow that crashes the application.

CVE-2018-25278
PicaJet FX General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-120 1 PoC

PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields via the Help menu's Register PicaJet dialog to trigger an application crash.

CVE-2018-25291
Project64 General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-120 1 PoC

Project64 2.3.2 contains a buffer overflow vulnerability in the Plugin Directory settings field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 6000-byte payload into the Plugin Directory field through the Options > Settings > Directories interface to trigger an application crash when settings are reopened.

CVE-2018-25252
FTP Voyager General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-787 1 PoC

FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data into the site profile IP field. Attackers can create a malicious site profile containing 500 bytes of repeated characters and paste it into the IP field to trigger a buffer overflow that crashes the FTP Voyager process.

CVE-2018-25198
eToolz General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-787 1 PoC

eToolz 3.4.8.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying oversized input buffers. Attackers can create a payload file containing 255 bytes of data that triggers a buffer overflow condition when processed by the application.

CVE-2018-25253
Termite General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-787 1 PoC

Termite 3.4 contains a buffer overflow vulnerability in the User interface language settings field that allows local attackers to cause a denial of service by supplying an excessively long string. Attackers can paste a 2000-byte payload into the Settings User interface language field to crash the application.

CVE-2018-25297
Wansview General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-120 1 PoC

Wansview 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can inject 2000-byte payloads into the Camera name and DID number fields during camera addition to trigger application crashes.

CVE-2018-25292
Restorator General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-120 2 PoCs

Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can create a malicious payload exceeding 4000 bytes and paste it into the Name input field to trigger an application crash and denial of service.

CVE-2018-25284
HD Tune Pro General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-120 1 PoC

HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field. Attackers can trigger a denial of service by entering a 6000-byte payload through the File > Options > Save dialog's folder/file name input field.

CVE-2018-25282
ZenMap General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-674 1 PoC

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import functionality to cause the program to consume excessive system resources and crash.

CVE-2018-25293
Prime95 General
6.9
MEDIUM
EPSS
0.0%
2018 CWE-120 1 PoC

Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long string in the optional proxy password field. Attackers can trigger a denial of service by entering a 6000-byte payload into the proxy password parameter, causing the application to crash when processing the connection settings.