While no known Remote Code Execution (RCE) vulnerabilities exist, as with all buffer overflows, the possibility of RCE cannot be completely ruled out.

An attacker can send an HTTP request to trigger this vulnerability.įS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.Ī stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and potentially crash a process creating a denial-of-service. A specially-crafted HTTP request can lead to arbitrary command execution. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.Ī directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. An unauthenticated attacker can prepend a victim's request with arbitrary data. SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation.

A specially crafted network request can lead to an out-of-bounds read. An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3.

Tor browser bundle 8.5.2