CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 41)
Page 41 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-9187 | Critical | 9.8 | 2019-03-25 | Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all version… |
CVE-2015-1007 | High | 7.8 | 2019-03-25 | A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, which may allow remote code execution… |
CVE-2019-9969 | High | 7.8 | 2019-03-24 | XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted… |
CVE-2019-9968 | High | 7.8 | 2019-03-24 | XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted… |
CVE-2019-9967 | High | 7.8 | 2019-03-24 | XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted… |
CVE-2019-9966 | High | 7.8 | 2019-03-24 | XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted… |
CVE-2019-9965 | High | 7.8 | 2019-03-24 | XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted fi… |
CVE-2019-9964 | High | 7.8 | 2019-03-24 | XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted fi… |
CVE-2019-9963 | High | 7.8 | 2019-03-24 | XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted fi… |
CVE-2019-9962 | High | 7.8 | 2019-03-24 | XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted fi… |
CVE-2015-6458 | High | 8.8 | 2019-03-21 | Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on Ju… |
CVE-2015-6457 | High | 8.8 | 2019-03-21 | Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on Ju… |
CVE-2019-9895 | Critical | 9.8 | 2019-03-21 | In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding. |
CVE-2018-20642 | Medium | 6.5 | 2019-03-21 | PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of profile editing) via crafted JavaScript c… |
CVE-2018-20637 | Medium | 6.5 | 2019-03-21 | PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank profile) via crafted Ja… |
CVE-2018-20634 | Medium | 6.5 | 2019-03-21 | PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure) via JavaScript code in the First Name f… |
CVE-2018-20340 | Medium | 6.8 | 2019-03-21 | Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to… |
CVE-2018-1992 | Medium | 6.4 | 2019-03-21 | The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial boot firmware image that drives the re… |
CVE-2018-14745 | High | 8.8 | 2019-03-21 | Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code… |
CVE-2017-16231 | Medium | 5.5 | 2019-03-21 | In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE… |
CVE-2016-5800 | High | 7.5 | 2019-03-21 | A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Des… |
CVE-2018-20182 | Critical | 9.8 | 2019-03-15 | rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamless_process_line() that results in memory… |
CVE-2018-12214 | High | 8.2 | 2019-03-14 | Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 1… |
CVE-2018-12213 | Medium | 6.0 | 2019-03-14 | Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 1… |
CVE-2018-12212 | Medium | 6.5 | 2019-03-14 | Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057)… |
CVE-2018-12210 | Medium | 6.5 | 2019-03-14 | Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 1… |
CVE-2018-12208 | High | 7.6 | 2019-03-14 | Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or… |
CVE-2018-12201 | Medium | 6.7 | 2019-03-14 | Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processo… |
CVE-2018-12199 | Medium | 6.2 | 2019-03-14 | Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow… |
CVE-2018-12191 | High | 7.6 | 2019-03-14 | Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00… |
CVE-2018-1980 | High | 8.4 | 2019-03-11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authentica… |
CVE-2018-1978 | High | 8.4 | 2019-03-11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authentica… |
CVE-2018-1923 | High | 8.4 | 2019-03-11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially r… |
CVE-2018-1922 | High | 8.4 | 2019-03-11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially r… |
CVE-2019-1616 | High | 8.6 | 2019-03-11 | A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a buffer overflow, resu… |
CVE-2019-9675 | High | 8.1 | 2019-03-11 | An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link valu… |
CVE-2019-1605 | High | 7.8 | 2019-03-08 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability… |
CVE-2017-12447 | High | 7.8 | 2019-03-07 | GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption)… |
CVE-2019-3712 | High | 8.2 | 2019-03-07 | Dell WES Wyse Device Agent versions prior to 14.1.2.9 and Dell Wyse ThinLinux HAgent versions prior to 5.4.55 00.10 contain a buffer overflow vulnerability. An… |
CVE-2019-9588 | High | 7.8 | 2019-03-06 | There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) th… |
CVE-2019-0613 | High | 8.8 | 2019-03-05 | A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attac… |
CVE-2018-11793 | High | 7.5 | 2019-03-05 | When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1… |
CVE-2019-6224 | High | 8.8 | 2019-03-05 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A rem… |
CVE-2019-6213 | High | 7.8 | 2019-03-05 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An applicat… |
CVE-2019-1663 | Critical | 9.8 | 2019-02-28 | A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco… |
CVE-2018-18493 | Critical | 9.8 | 2019-02-28 | A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculat… |
CVE-2018-12407 | Critical | 9.8 | 2019-02-28 | A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, when working with the VertexBuffer11 mod… |
CVE-2018-12406 | High | 8.8 | 2019-02-28 | Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2018-12405 | Critical | 9.8 | 2019-02-28 | Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory c… |
CVE-2018-12390 | Critical | 9.8 | 2019-02-28 | Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory c… |
CVE-2018-12389 | High | 8.8 | 2019-02-28 | Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and w… |
CVE-2018-12388 | High | 8.8 | 2019-02-28 | Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2019-3598 | Medium | 5.3 | 2019-02-28 | Buffer Access with Incorrect Length Value in McAfee Agent (MA) 5.x allows remote unauthenticated users to potentially cause a denial of service via specificall… |
CVE-2019-5670 | High | 7.8 | 2019-02-27 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation… |
CVE-2019-5669 | High | 7.8 | 2019-02-27 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation… |
CVE-2018-20797 | Medium | 6.5 | 2019-02-27 | An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofo_calloc in base/PdfMemoryManagement.cpp when called… |
CVE-2018-13914 | High | 7.8 | 2019-02-25 | Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Indu… |
CVE-2018-13912 | Medium | 5.5 | 2019-02-25 | Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag… |
CVE-2018-11938 | High | 7.8 | 2019-02-25 | Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2018-11289 | High | 7.8 | 2019-02-25 | Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in Snapdragon Auto, Snapd… |
CVE-2019-8375 | Critical | 9.8 | 2019-02-24 | The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog si… |
CVE-2019-9019 | Medium | 6.8 | 2019-02-22 | The British Airways Entertainment System, as installed on Boeing 777-36N(ER) and possibly other aircraft, does not prevent the USB charging/data-transfer featu… |
CVE-2019-8996 | Critical | 9.8 | 2019-02-21 | In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow. |
CVE-2019-1684 | Medium | 6.5 | 2019-02-21 | A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series could allow… |
CVE-2019-5762 | High | 8.8 | 2019-02-19 | Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sand… |
CVE-2019-3812 | Medium | 4.4 | 2019-02-19 | QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_ddc() function. A l… |
CVE-2018-12159 | Medium | 5.5 | 2019-02-18 | Buffer overflow in the command-line interface for Intel(R) PROSet Wireless v20.50 and before may allow an authenticated user to potentially enable denial of se… |
CVE-2019-8396 | Medium | 6.5 | 2019-02-17 | A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5… |
CVE-2019-8383 | High | 7.8 | 2019-02-17 | An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in lib/png.c. It can be triggered by se… |
CVE-2019-8381 | High | 7.8 | 2019-02-17 | An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to… |
CVE-2018-6271 | High | 7.8 | 2019-02-13 | NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buffer and does not properly validated the e… |
CVE-2019-6541 | High | 7.8 | 2019-02-13 | A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior, which may allow arbitrary code execution. Mat Powell, Ziad… |
CVE-2018-13893 | High | 7.8 | 2019-02-11 | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Out of bound mask range access caused by using possi… |
CVE-2018-13888 | High | 7.8 | 2019-02-11 | There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdrag… |
CVE-2018-12547 | Critical | 9.8 | 2019-02-11 | In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This affects existing APIs… |
CVE-2018-20762 | High | 7.8 | 2019-02-06 | GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in applications/mp4box/fileimport.c when MP4Box is used f… |
CVE-2018-20761 | High | 7.8 | 2019-02-06 | GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init function in scene_manager.c in libgpac_static.a. |
CVE-2018-3990 | Critical | 9.3 | 2019-02-05 | An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400). A spec… |
CVE-2018-18503 | High | 8.8 | 2019-02-05 | When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situation… |
CVE-2018-18502 | Critical | 9.8 | 2019-02-05 | Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2018-18501 | Critical | 9.8 | 2019-02-05 | Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory c… |
CVE-2018-12548 | Critical | 9.8 | 2019-01-31 | In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer val… |
CVE-2019-1651 | Critical | 9.9 | 2019-01-24 | A vulnerability in the vContainer of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to cause a denial of service (DoS) condition and e… |
CVE-2019-1641 | High | 7.8 | 2019-01-23 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to e… |
CVE-2019-1640 | High | 7.8 | 2019-01-23 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to e… |
CVE-2019-1639 | High | 7.8 | 2019-01-23 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to e… |
CVE-2019-1638 | High | 7.8 | 2019-01-23 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to e… |
CVE-2019-1637 | High | 7.8 | 2019-01-23 | A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to e… |
CVE-2018-5881 | High | 8.8 | 2019-01-18 | Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in… |
CVE-2018-5880 | High | 7.8 | 2019-01-18 | Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM92… |
CVE-2018-5868 | High | 7.8 | 2019-01-18 | Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD 45… |
CVE-2018-5867 | High | 7.8 | 2019-01-18 | Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM960… |
CVE-2018-11279 | High | 8.8 | 2019-01-18 | Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in… |
CVE-2018-15998 | High | 7.8 | 2019-01-18 | Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017… |
CVE-2018-15987 | High | 7.8 | 2019-01-18 | Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017… |
CVE-2018-4404 | High | 8.8 | 2019-01-11 | In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling. |
CVE-2018-4330 | High | 7.8 | 2019-01-11 | In iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling. |
CVE-2018-4281 | Critical | 9.8 | 2019-01-11 | In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation. |
CVE-2018-4262 | High | 8.8 | 2019-01-11 | In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memory corruption issue… |
CVE-2018-4258 | Critical | 9.8 | 2019-01-11 | In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking. |