Filtered by CWE-193
Total 206 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2001-1496 1 Acme 1 Thttpd 2024-11-20 9.8 Critical
Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVE-2001-1391 2 Linux, Redhat 2 Linux Kernel, Linux 2024-11-20 5.5 Medium
Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.
CVE-2001-0609 1 Infodrom 1 Cfingerd 2024-11-20 9.8 Critical
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.
CVE-2024-45796 1 Oisf 1 Suricata 2024-10-22 5.3 Medium
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, a logic error during fragment reassembly can lead to failed reassembly for valid traffic. An attacker could craft packets to trigger this behavior.This issue has been addressed in 7.0.7.
CVE-2024-36136 1 Ivanti 1 Avalanche 2024-08-15 7.5 High
An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS.
CVE-2020-26159 2023-11-07 8.6 High
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none