Skip to content
OpenAdvisories

Archive

21 August 2025

Vulnerabilities first published on this day (UTC), newest first.

15 results · Clear filters · Feed

  • High 8.4
    CVE-2009-20003 Public exploit

    Xenorate <= 2.50 .xpl File Stack-Based Buffer Overflow

    Xenorate versions up to and including 2.50, a Windows-based multimedia player, is vulnerable to a stack-based buffer overflow when processing .xpl playlist files. The application fails to properly validate the length of input data, allowing an attacker to cra…

  • High 8.4
    CVE-2010-20114 Public exploit

    VariCAD EN <= 2010-2.05 .dwb File Stack Buffer Overflow

    VariCAD EN up to and including version 2010-2.05 is vulnerable to a stack-based buffer overflow when parsing .dwb drawing files. The application fails to properly validate the length of input data embedded in the file, allowing a crafted .dwb file to overwrit…

  • High 8.4
    CVE-2010-20123 Public exploit

    Steinberg MyMP3Player <= 3.0.0.67 Buffer Overflow

    Steinberg MyMP3Player version 3.0 (build 3.0.0.67) is vulnerable to a stack-based buffer overflow when parsing .m3u playlist files. The application fails to properly validate the length of input data within the playlist, allowing a specially crafted file to o…

  • High 8.5
    CVE-2010-20007 Public exploit

    Seagull FTP v3.3 Build 409 Stack Buffer Overflow

    Seagull FTP Client <= v3.3 Build 409 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the client connects to an FTP server and receives a crafted response to a LIST command containing an excessively long filename,…

  • High 8.4
    CVE-2009-20002 Public exploit

    Millenium MP3 Studio <= 2.0 .pls File Stack-Based Buffer Overflow

    Millenium MP3 Studio versions up to and including 2.0 is vulnerable to a stack-based buffer overflow when parsing .pls playlist files. The application fails to properly validate the length of the File1 field within the playlist, allowing an attacker to craft …

  • High 8.4
    CVE-2010-20120 Public exploit

    Maple <= v13 Maplet File Creation and Command Execution

    Maple versions up to and including 13's Maplet framework allows embedded commands to be executed automatically when a .maplet file is opened. This behavior bypasses standard security restrictions that normally prevent code execution in regular Maple worksheet…

  • High 8.5
    CVE-2010-20034 Public exploit

    Gekko Manager FTP Client <= 0.77 Stack Buffer Overflow

    Gekko Manager FTP Client <= 0.77 contains a stack-based buffer overflow in its FTP directory listing parser. When processing a server response to a LIST command, the client fails to properly validate the length of filenames. A crafted response containing an o…

  • High 8.4
    CVE-2009-20004 Public exploit

    gAlan <= 0.2.1 Buffer Overflow

    gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files. The application fails to properly validate the length of input data, allowing a specially crafted file to overwrite the …

  • High 8.4
    CVE-2010-20108 Public exploit

    FTPPad <= 1.2.0 Stack Buffer Overflow

    FTPPad <= 1.2.0 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the client connects to an FTP server and receives a crafted response to a LIST command containing an excessively long directory and filename, the ap…

  • High 8.5
    CVE-2010-20107 Public exploit

    FTP Synchronizer Professional <= 4.0.73.274 Stack Buffer Overflow

    A stack-based buffer overflow exists in FTP Synchronizer Professional <= v4.0.73.274. When the client connects to an FTP server and issues a LIST command—typically during sync preview or profile creation—the server’s response containing an overly long filenam…

  • High 8.4
    CVE-2010-20111 Public exploit

    Digital Music Pad <= 8.2.3.3.4 Stack Buffer Overflow

    Digital Music Pad v8.2.3.3.4 contains a stack-based buffer overflow vulnerability in its playlist file parser. When opening a .pls file containing an excessively long string in the File1 field, the application fails to properly validate input length, resultin…

  • High 8.6
    CVE-2010-20119 Public exploit

    CommuniCrypt Mail <= 1.16 ANSMTP/AOSMTP ActiveX Control Buffer Overflow

    CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.dll and AOSMTP.dll ActiveX controls, specifically within the AddAttachments() method. This method fails to properly validate the length of i…

  • High 8.7
    CVE-2010-20109 Public exploit

    Barracuda Spam & Virus Firewall "locale" Path Traversal

    Barracuda products, confirmed in Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to October 2010, contain a path traversal vulnerability in the view_help.cgi endpoint. The locale parameter fails to properly sanitize user input, all…

  • High 8.4
    CVE-2010-10015 Public exploit

    AOL <= 9.5 Phobos.Playlist 'Import()' Stack-Based Buffer Overflow

    AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overflow when provided with an excessively long string ar…

  • High 8.5
    CVE-2025-34158 Public exploit

    Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between sphe…