NetSchedScan 1.0 contains a buffer overflow vulnerability in the scan Hostname/IP field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a crafted payload containing 388 bytes of data followed by 4 bytes of EIP overw...
Vendor
foundstone vulnerabilities
3 published CVES affecting foundstone, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 1
- High
- 1
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest foundstone CVEs
Newest publication first
-
MediumCVSS 6.9 EPSS 0.17%
-
CriticalCVSS 9.8 EPSS 0.46%
SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter.
-
HighCVSS 7.5 EPSS 3.0%
Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.