CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 39)
Page 39 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-1892 | High | 7.5 | 2019-07-06 | A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unaut… |
CVE-2017-13719 | Critical | 9.8 | 2019-07-03 | The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using… |
CVE-2019-7165 | Critical | 9.8 | 2019-07-03 | A buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code. |
CVE-2018-11425 | Critical | 9.8 | 2019-07-03 | Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11424. |
CVE-2018-11423 | High | 7.5 | 2019-07-03 | There is Memory corruption in the web interface Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior, different vulnerability than CVE-2018-11420. |
CVE-2017-8416 | High | 8.8 | 2019-07-02 | An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which is called "dldps2121" and listens for b… |
CVE-2017-8412 | High | 8.8 | 2019-07-02 | An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom binary called mp4ts under the /var/www/video folder. It seems that thi… |
CVE-2017-8414 | High | 7.8 | 2019-07-02 | An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary orthrus in /sbin folder of the device handles all the UPnP connections received by… |
CVE-2017-8410 | Critical | 9.8 | 2019-07-02 | An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary rtspd in /sbin folder of the device handles all the rtsp connections received by th… |
CVE-2019-4322 | High | 7.8 | 2019-07-01 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authentica… |
CVE-2019-4154 | High | 7.8 | 2019-07-01 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authentica… |
CVE-2019-10993 | Critical | 9.8 | 2019-06-28 | In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute arbitrary code. |
CVE-2018-15519 | Critical | 9.8 | 2019-06-28 | Various Lexmark devices have a Buffer Overflow (issue 1 of 2). |
CVE-2018-15520 | Critical | 9.8 | 2019-06-28 | Various Lexmark devices have a Buffer Overflow (issue 2 of 2). |
CVE-2019-12982 | Medium | 6.5 | 2019-06-26 | Ming (aka libming) 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could levera… |
CVE-2019-12968 | Medium | 5.3 | 2019-06-26 | A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 to 11 inclusive) distributed with Doomseeker 1.1 and 1.2. Affected plugin vers… |
CVE-2019-7231 | Medium | 5.7 | 2019-06-24 | The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates th… |
CVE-2019-1630 | Medium | 5.5 | 2019-06-20 | A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to caus… |
CVE-2018-16595 | Medium | 6.5 | 2019-06-19 | The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow. |
CVE-2017-8329 | Medium | 6.4 | 2019-06-18 | An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of setting a… |
CVE-2017-8336 | High | 8.8 | 2019-06-18 | An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding ne… |
CVE-2017-8335 | High | 8.0 | 2019-06-18 | An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of setting n… |
CVE-2012-6711 | High | 7.0 | 2019-06-18 | A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable… |
CVE-2018-18944 | High | 7.5 | 2019-06-18 | Artha ~ The Open Thesaurus 1.0.3.0 has a Buffer Overflow. |
CVE-2017-10724 | High | 8.8 | 2019-06-17 | Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device W… |
CVE-2017-10723 | High | 8.8 | 2019-06-17 | Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device W… |
CVE-2017-10722 | High | 7.8 | 2019-06-17 | Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to conne… |
CVE-2017-10720 | High | 7.8 | 2019-06-17 | Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to conne… |
CVE-2017-9392 | High | 8.8 | 2019-06-17 | An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be… |
CVE-2017-9391 | High | 8.8 | 2019-06-17 | An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be… |
CVE-2019-6326 | High | 7.2 | 2019-06-17 | HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have emb… |
CVE-2018-6339 | Critical | 9.8 | 2019-06-14 | When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant… |
CVE-2018-5911 | High | 7.8 | 2019-06-14 | Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn… |
CVE-2018-3583 | High | 7.8 | 2019-06-14 | A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT… |
CVE-2018-13907 | Medium | 5.3 | 2019-06-14 | While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations are invoked in Snap… |
CVE-2019-12822 | High | 7.5 | 2019-06-14 | In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and… |
CVE-2019-5439 | Medium | 6.5 | 2019-06-13 | A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit. |
CVE-2019-11127 | Medium | 6.7 | 2019-06-13 | Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or inf… |
CVE-2019-11126 | Medium | 6.7 | 2019-06-13 | Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or… |
CVE-2019-9676 | High | 7.8 | 2019-06-12 | Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits in the fu… |
CVE-2019-6571 | High | 7.5 | 2019-06-12 | A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS LOGO!8 (6ED1052-xyy… |
CVE-2018-10703 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any iss… |
CVE-2018-10701 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any iss… |
CVE-2018-10695 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there a… |
CVE-2018-10693 | High | 8.8 | 2019-06-07 | An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network i… |
CVE-2018-19800 | Critical | 9.8 | 2019-06-07 | aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo. |
CVE-2019-11983 | High | 7.0 | 2019-06-05 | A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (… |
CVE-2018-13381 | Medium | 5.3 | 2019-06-04 | A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0, 1.2.8 and earlier… |
CVE-2017-14854 | Critical | 9.1 | 2019-06-03 | A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects all versions prior to… |
CVE-2018-20815 | Critical | 9.8 | 2019-05-31 | In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk. |
CVE-2018-19978 | High | 8.0 | 2019-05-29 | A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker (au… |
CVE-2019-7085 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7076 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7066 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7054 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7051 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7046 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7042 | High | 8.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7020 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-2250 | High | 7.8 | 2019-05-24 | Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industri… |
CVE-2019-2248 | High | 7.8 | 2019-05-24 | Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2018-12012 | High | 7.8 | 2019-05-24 | While updating blacklisting region shared buffered memory region is not validated against newly updated black list, causing boot-up to be compromised in Snapdr… |
CVE-2018-11940 | Critical | 9.8 | 2019-05-24 | Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2018-11928 | High | 7.8 | 2019-05-24 | Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… |
CVE-2018-11923 | High | 7.8 | 2019-05-24 | Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto, Snapdragon Compute… |
CVE-2018-7851 | Medium | 6.5 | 2019-05-22 | CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware… |
CVE-2019-12044 | High | 7.5 | 2019-05-22 | A Buffer Overflow exists in Citrix NetScaler Gateway 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 12.0.59.8, and 12.1.x before 12.1.49.23 a… |
CVE-2019-0170 | Medium | 6.7 | 2019-05-17 | Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2019-0153 | Critical | 9.8 | 2019-05-17 | Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via networ… |
CVE-2019-0119 | Medium | 6.7 | 2019-05-17 | Buffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Processor, Intel(R) Server Board, Intel(R)… |
CVE-2019-0113 | Medium | 5.5 | 2019-05-17 | Insufficient bounds checking in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an aut… |
CVE-2019-1768 | Medium | 6.7 | 2019-05-16 | A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator creden… |
CVE-2019-1773 | High | 7.8 | 2019-05-15 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to e… |
CVE-2019-1772 | High | 7.8 | 2019-05-15 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to e… |
CVE-2019-1771 | High | 7.8 | 2019-05-15 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to e… |
CVE-2019-1767 | Medium | 6.7 | 2019-05-15 | A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator creden… |
CVE-2018-4025 | High | 7.5 | 2019-05-13 | An exploitable denial-of-service vulnerability exists in the XML_GetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashc… |
CVE-2018-15128 | Critical | 9.8 | 2019-05-13 | An issue was discovered in Polycom Group Series 6.1.6.1 and earlier, HDX 3.1.12 and earlier, and Pano 1.1.1 and earlier. A remote code execution vulnerability… |
CVE-2018-14712 | Medium | 6.5 | 2019-05-13 | Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to inject system commands via the "hook" URL parameter. |
CVE-2019-11059 | Critical | 9.8 | 2019-05-10 | Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow. |
CVE-2015-1006 | Critical | 9.8 | 2019-05-10 | A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Basic versions prior… |
CVE-2019-7181 | High | 7.5 | 2019-05-09 | Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program. |
CVE-2019-3561 | Critical | 9.8 | 2019-04-29 | Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory. This affects all supported versions of HHVM (4.0.3, 3… |
CVE-2019-11577 | Critical | 9.8 | 2019-04-28 | dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses. |
CVE-2019-9810 | High | 8.8 | 2019-04-26 | Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerabili… |
CVE-2019-9793 | Medium | 5.9 | 2019-04-26 | A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. This vulnera… |
CVE-2019-11493 | High | 7.8 | 2019-04-26 | VeryPDF 4.1 has a Memory Overflow leading to Code Execution because pdfocx!CxImageTIF::operator in pdfocx.ocx (used by pdfeditor.exe and pdfcmd.exe) is mishand… |
CVE-2018-14559 | High | 7.5 | 2019-04-25 | An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10… |
CVE-2018-14557 | High | 7.5 | 2019-04-25 | An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10… |
CVE-2018-19442 | Critical | 9.8 | 2019-04-25 | A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute arbitrary… |
CVE-2018-10055 | High | 8.1 | 2019-04-24 | Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other par… |
CVE-2018-8825 | High | 8.8 | 2019-04-23 | Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). |
CVE-2019-11418 | Critical | 9.8 | 2019-04-22 | apply.cgi on the TRENDnet TEW-632BRP 1.010B32 router has a buffer overflow via long strings to the SOAPACTION:HNAP1 interface. |
CVE-2018-20818 | Critical | 9.8 | 2019-04-22 | A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and OpenPLC_v3 versions. It occurs in the modbus.cpp mapUnusedIO()… |
CVE-2018-20817 | Critical | 9.8 | 2019-04-19 | SV_SteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is missing a size check when reading authBlob data into a buffer, w… |
CVE-2019-10245 | High | 7.5 | 2019-04-19 | In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes… |
CVE-2017-7777 | High | 8.8 | 2019-04-15 | Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function. |
CVE-2017-7773 | High | 8.8 | 2019-04-15 | Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor. |
CVE-2017-7772 | High | 8.8 | 2019-04-12 | Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function. |
CVE-2017-14199 | Critical | 9.8 | 2019-04-12 | A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0. |