CVE-2023-28505

HIGH Year: 2023
CVSS v3 Score
8.1
High
Weakness Type
CWE-120
View all →

Vulnerability Description

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a buffer overflow in an API function, where a string is copied into a caller-provided buffer without checking the length. This requires a valid login to exploit.

Related Vulnerabilities

CVE-2017-0176

HIGH
CVSS:8.1(High)

A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target compu...

CWE-1202017

CVE-2017-12718

HIGH
CVSS:8.1(High)

A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify inpu...

CWE-1202017

CVE-2017-2830

HIGH
CVSS:8.1(High)

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can ...

CWE-1202017

CVE-2017-2854

HIGH
CVSS:8.1(High)

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is a...

CWE-1202017

CVE-2017-2855

HIGH
CVSS:8.1(High)

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is a...

CWE-1202017

CVE-2017-2856

HIGH
CVSS:8.1(High)

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is a...

CWE-1202017