CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 19)
Page 19 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4161 | High | 7.3 | 2025-05-01 | A vulnerability classified as critical has been found in PCMan FTP Server up to 2.0.7. This affects an unknown part of the component VERBOSE Command Handler. T… |
CVE-2025-4160 | High | 7.3 | 2025-05-01 | A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component… |
CVE-2025-4159 | High | 7.3 | 2025-05-01 | A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-4158 | High | 7.3 | 2025-05-01 | A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been classified as critical. Affected is an unknown function of the component PROMPT Command… |
CVE-2025-4150 | High | 8.8 | 2025-05-01 | A vulnerability was found in Netgear EX6200 1.0.3.94. It has been declared as critical. This vulnerability affects the function sub_54340. The manipulation of… |
CVE-2025-4149 | High | 8.8 | 2025-05-01 | A vulnerability was found in Netgear EX6200 1.0.3.94. It has been classified as critical. This affects the function sub_54014. The manipulation of the argument… |
CVE-2025-4148 | High | 8.8 | 2025-05-01 | A vulnerability was found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this issue is the function sub_503FC. The manipulation of the argu… |
CVE-2025-4147 | High | 8.8 | 2025-05-01 | A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this vulnerability is the function sub_47F7C. The manipulatio… |
CVE-2025-4146 | High | 8.8 | 2025-05-01 | A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94. Affected is the function sub_41940. The manipulation of the argument h… |
CVE-2025-4145 | High | 8.8 | 2025-05-01 | A vulnerability, which was classified as critical, has been found in Netgear EX6200 1.0.3.94. This issue affects the function sub_3D0BC. The manipulation of th… |
CVE-2025-4142 | High | 8.8 | 2025-04-30 | A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. This vulnerability affects the function sub_3C8EC. The manipulation of th… |
CVE-2025-4141 | High | 8.8 | 2025-04-30 | A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94. This affects the function sub_3C03C. The manipulation of the argument… |
CVE-2025-4140 | High | 8.8 | 2025-04-30 | A vulnerability, which was classified as critical, has been found in Netgear EX6120 1.0.3.94. Affected by this issue is the function sub_30394. The manipulatio… |
CVE-2025-4139 | High | 8.8 | 2025-04-30 | A vulnerability classified as critical was found in Netgear EX6120 1.0.0.68. Affected by this vulnerability is the function fwAcosCgiInbound. The manipulation… |
CVE-2025-24132 | Medium | 6.5 | 2025-04-30 | The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local… |
CVE-2025-4120 | High | 8.8 | 2025-04-30 | A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been classified as critical. Affected is the function sub_4238E8. The manipulation of the argu… |
CVE-2025-4117 | Medium | 5.5 | 2025-04-30 | A vulnerability, which was classified as critical, was found in Netgear JWNR2000v2 1.0.0.11. This affects the function sub_41A914. The manipulation of the argu… |
CVE-2025-4116 | High | 8.8 | 2025-04-30 | A vulnerability, which was classified as critical, has been found in Netgear JWNR2000v2 1.0.0.11. Affected by this issue is the function get_cur_lang_ver. The… |
CVE-2025-4115 | High | 8.8 | 2025-04-30 | A vulnerability classified as critical was found in Netgear JWNR2000v2 1.0.0.11. Affected by this vulnerability is the function default_version_is_new. The man… |
CVE-2025-4114 | High | 8.8 | 2025-04-30 | A vulnerability classified as critical has been found in Netgear JWNR2000v2 1.0.0.11. Affected is the function check_language_file. The manipulation of the arg… |
CVE-2025-4079 | High | 7.3 | 2025-04-29 | A vulnerability, which was classified as critical, was found in PCMan FTP Server up to 2.0.7. Affected is an unknown function of the component RENAME Command H… |
CVE-2025-4077 | Medium | 5.3 | 2025-04-29 | A vulnerability classified as critical was found in code-projects School Billing System 1.0. This vulnerability affects the function searchrec. The manipulatio… |
CVE-2025-4069 | Medium | 5.3 | 2025-04-29 | A vulnerability, which was classified as critical, has been found in code-projects Product Management System 1.0. Affected by this issue is the function add_it… |
CVE-2025-4068 | Medium | 5.3 | 2025-04-29 | A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0. Affected by this vulnerability is the function change… |
CVE-2025-4093 | High | 8.1 | 2025-04-29 | Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort thi… |
CVE-2025-4092 | Medium | 6.5 | 2025-04-29 | Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s… |
CVE-2025-4091 | High | 8.1 | 2025-04-29 | Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption a… |
CVE-2025-4063 | Medium | 5.3 | 2025-04-29 | A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical. Affected by this issue is the function cancel… |
CVE-2025-4062 | Medium | 5.3 | 2025-04-29 | A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by this vulnerability is the function canc… |
CVE-2025-4061 | Medium | 5.3 | 2025-04-29 | A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function add_item. Th… |
CVE-2025-4059 | Medium | 5.3 | 2025-04-29 | A vulnerability classified as critical was found in code-projects Prison Management System 1.0. This vulnerability affects the function addrecord of the compon… |
CVE-2025-4038 | Medium | 5.3 | 2025-04-28 | A vulnerability was found in code-projects Train Ticket Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is the functio… |
CVE-2025-4029 | Medium | 5.3 | 2025-04-28 | A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by this issue is the function addrecord of… |
CVE-2025-4007 | High | 8.8 | 2025-04-28 | A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). Affected by this vulnerability is the function cgidhcpsCfgSe… |
CVE-2025-3993 | High | 8.8 | 2025-04-28 | A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWsc… |
CVE-2025-3992 | High | 8.8 | 2025-04-28 | A vulnerability has been found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formW… |
CVE-2025-3991 | High | 8.8 | 2025-04-28 | A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/formWdsEncryp… |
CVE-2025-3990 | High | 8.8 | 2025-04-27 | A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of t… |
CVE-2025-3989 | High | 8.8 | 2025-04-27 | A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is an unknown functionality of the file /bo… |
CVE-2025-3988 | High | 8.8 | 2025-04-27 | A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPortFw. The m… |
CVE-2025-2851 | High | 8.0 | 2025-04-26 | A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate… |
CVE-2025-46333 | | 2025-04-25 | z2d is a pure Zig 2D graphics library. Versions of z2d after `0.5.1` and up to and including `0.6.0`, when writing from one surface to another using `z2d.compo… | |
CVE-2025-3854 | High | 8.0 | 2025-04-22 | A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6… |
CVE-2025-3845 | High | 7.3 | 2025-04-21 | A vulnerability was found in markparticle WebServer up to 1.0. It has been declared as critical. Affected by this vulnerability is the function Buffer::HasWrit… |
CVE-2025-3820 | High | 8.8 | 2025-04-19 | A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this issue is the function cgiSysUplinkCheck… |
CVE-2025-3803 | High | 8.8 | 2025-04-19 | A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been rated as critical. This issue affects the function cgiSysScheduleReboot… |
CVE-2025-3802 | High | 8.8 | 2025-04-19 | A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been declared as critical. This vulnerability affects the function cgiPingSe… |
CVE-2025-3791 | Medium | 5.3 | 2025-04-18 | A vulnerability classified as critical was found in symisc UnQLite up to 957c377cb691a4f617db9aba5cc46d90425071e2. This vulnerability affects the function jx9M… |
CVE-2025-3786 | High | 8.8 | 2025-04-18 | A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical. This issue affects the function fromSetWirelessRepeat of the file /goform… |
CVE-2025-3785 | High | 8.8 | 2025-04-18 | A vulnerability has been found in D-Link DWR-M961 1.1.36 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formStaticDHCP… |
CVE-2025-3763 | Medium | 5.3 | 2025-04-17 | A vulnerability classified as critical has been found in SourceCodester Phone Management System 1.0. This affects the function main of the component Password H… |
CVE-2025-3762 | High | 7.3 | 2025-04-17 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component MPUT… |
CVE-2025-3728 | Medium | 5.3 | 2025-04-16 | A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipula… |
CVE-2025-3727 | High | 7.3 | 2025-04-16 | A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component STATUS Command Handler. The mani… |
CVE-2025-3726 | High | 7.3 | 2025-04-16 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component CD Co… |
CVE-2025-3725 | High | 7.3 | 2025-04-16 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the compon… |
CVE-2025-3724 | High | 7.3 | 2025-04-16 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component DIR Command Handler… |
CVE-2025-3723 | High | 7.3 | 2025-04-16 | A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processing of the component MDTM Command Handle… |
CVE-2025-31200 | Critical | 9.8 | 2025-04-16 | A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1… |
CVE-2025-3693 | High | 8.8 | 2025-04-16 | A vulnerability was found in Tenda W12 3.0.0.5. It has been rated as critical. Affected by this issue is the function cgiWifiRadioSet of the file /bin/httpd. T… |
CVE-2025-3683 | High | 7.3 | 2025-04-16 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component SIZE Command Ha… |
CVE-2025-3682 | High | 7.3 | 2025-04-16 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component PASV Command Handler. Th… |
CVE-2025-3681 | High | 7.3 | 2025-04-16 | A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component MODE Comm… |
CVE-2025-3680 | High | 7.3 | 2025-04-16 | A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the componen… |
CVE-2025-3679 | High | 7.3 | 2025-04-16 | A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component HOST Command Handler… |
CVE-2025-3678 | High | 7.3 | 2025-04-16 | A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component HELP C… |
CVE-2025-3618 | Medium | 5.5 | 2025-04-15 | A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while… |
CVE-2025-24797 | Critical | 9.4 | 2025-04-15 | Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-contr… |
CVE-2025-3588 | Medium | 5.3 | 2025-04-14 | A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file… |
CVE-2025-3549 | Medium | 5.3 | 2025-04-14 | A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateS… |
CVE-2025-3548 | Medium | 5.3 | 2025-04-14 | A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Se… |
CVE-2025-3538 | High | 8.8 | 2025-04-13 | A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function auth_asp of the file /auth.asp of the co… |
CVE-2025-3409 | Medium | 6.3 | 2025-04-08 | A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_include_string. The manipulation of the argu… |
CVE-2025-3407 | Medium | 6.3 | 2025-04-08 | A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function stbhw_build_tileset_f… |
CVE-2025-3406 | Medium | 4.3 | 2025-04-08 | A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function stbhw_build_tileset_from_image of the… |
CVE-2025-32033 | High | 7.5 | 2025-04-07 | The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Prior to 1… |
CVE-2025-3380 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. Affected by this issue is some unknown functionality of the compon… |
CVE-2025-3379 | High | 7.3 | 2025-04-07 | A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. Affected by this vulnerability is an unknown functionality of the component EPSV Co… |
CVE-2025-3378 | High | 7.3 | 2025-04-07 | A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component EPRT Command Handler. The man… |
CVE-2025-3377 | High | 7.3 | 2025-04-07 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. This issue affects some unknown processing of the component ENC Command Han… |
CVE-2025-3376 | High | 7.3 | 2025-04-07 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component CONF Command Ha… |
CVE-2025-3375 | High | 7.3 | 2025-04-07 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component CDUP Command Handler. Th… |
CVE-2025-3374 | High | 7.3 | 2025-04-07 | A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component CCC Comma… |
CVE-2025-3373 | High | 7.3 | 2025-04-07 | A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the componen… |
CVE-2025-3372 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component MKDIR Command Handler… |
CVE-2025-3371 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component DELETE… |
CVE-2025-0050 | Medium | 5.9 | 2025-04-07 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Dr… |
CVE-2025-3349 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component SYST C… |
CVE-2025-3346 | High | 8.8 | 2025-04-07 | A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform… |
CVE-2025-3328 | High | 8.8 | 2025-04-07 | A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function form_fast_setting_wifi_set of the file /gof… |
CVE-2025-3266 | High | 7.3 | 2025-04-04 | A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Affected by this issue is some unknown functionality of… |
CVE-2025-3259 | High | 8.8 | 2025-04-04 | A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11. This issue affects the function formSetDeviceName of the file /gofo… |
CVE-2025-3203 | Medium | 4.3 | 2025-04-04 | A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /go… |
CVE-2025-3196 | Medium | 5.3 | 2025-04-04 | A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD2Importer::InternRea… |
CVE-2025-3166 | Medium | 5.3 | 2025-04-03 | A vulnerability classified as critical was found in code-projects Product Management System 1.0. This vulnerability affects the function search_item of the com… |
CVE-2025-3161 | High | 8.8 | 2025-04-03 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetA… |
CVE-2025-3160 | Low | 3.3 | 2025-04-03 | A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCo… |
CVE-2025-3159 | Medium | 5.3 | 2025-04-03 | A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4… |
CVE-2025-3158 | Medium | 5.3 | 2025-04-03 | A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO… |
CVE-2025-3148 | Low | 3.3 | 2025-04-03 | A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the compon… |