CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 43)
Page 43 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-5153 | Critical | 9.8 | 2018-11-21 | In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthen… |
CVE-2018-18861 | Critical | 9.8 | 2018-11-20 | Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command. |
CVE-2018-18440 | High | 7.8 | 2018-11-20 | DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled. |
CVE-2018-18439 | Critical | 9.8 | 2018-11-20 | DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploita… |
CVE-2018-18759 | High | 7.5 | 2018-11-16 | Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow. |
CVE-2018-18756 | High | 7.5 | 2018-11-16 | Local Server 1.0.9 has a Buffer Overflow via crafted data on Port 4008. |
CVE-2018-0684 | Critical | 9.8 | 2018-11-15 | Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier) allows remote attackers to e… |
CVE-2018-0683 | Critical | 9.8 | 2018-11-15 | Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote attackers to e… |
CVE-2018-19278 | High | 7.5 | 2018-11-14 | Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a speci… |
CVE-2018-9533 | High | 8.8 | 2018-11-14 | In ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a missing bounds check. This could lead to remote code execution wi… |
CVE-2018-8552 | High | 7.5 | 2018-11-14 | An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information… |
CVE-2018-8476 | Critical | 9.8 | 2018-11-14 | A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Service… |
CVE-2018-17614 | High | 8.8 | 2018-11-13 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Losant Arduino MQTT Client prior to V2.7. User interaction… |
CVE-2018-19219 | Medium | 6.5 | 2018-11-12 | In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack. |
CVE-2018-19183 | High | 7.5 | 2018-11-12 | ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute. NOTE: th… |
CVE-2018-18920 | High | 8.8 | 2018-11-12 | Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x' wa… |
CVE-2018-19150 | High | 7.8 | 2018-11-10 | Memory corruption in PDMODELProvidePDModelHFT in pdmodel.dll in pdfforge PDF Architect 6 allows remote attackers to cause a denial of service (application cras… |
CVE-2018-19130 | Medium | 6.5 | 2018-11-09 | In Libav 12.3, there is an invalid memory access in vc1_decode_frame in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aa… |
CVE-2018-17907 | Low | 3.3 | 2018-11-05 | When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the applicatio… |
CVE-2018-17905 | High | 7.8 | 2018-11-05 | When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur within a specif… |
CVE-2018-18956 | High | 7.5 | 2018-11-05 | The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault and daemon cra… |
CVE-2018-18820 | High | 8.1 | 2018-11-05 | A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can s… |
CVE-2018-18695 | High | 7.8 | 2018-11-01 | M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via a crafted MRD file. |
CVE-2018-3900 | High | 8.8 | 2018-11-01 | An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause… |
CVE-2016-2123 | High | 8.8 | 2018-11-01 | A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled mem… |
CVE-2018-14652 | Medium | 6.5 | 2018-10-31 | The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XAT… |
CVE-2018-16839 | Medium | 4.3 | 2018-10-31 | Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service. |
CVE-2018-17706 | High | 8.8 | 2018-10-29 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is… |
CVE-2018-17910 | High | 7.8 | 2018-10-29 | WebAccess Versions 8.3.2 and prior. The application fails to properly validate the length of user-supplied data, causing a buffer overflow condition that allow… |
CVE-2018-11884 | High | 7.8 | 2018-10-29 | Improper input validation leads to buffer overflow while processing network list offload command in WLAN function in Snapdragon Mobile in version SD 835, SD 84… |
CVE-2018-11882 | High | 7.8 | 2018-10-29 | Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660. |
CVE-2018-11880 | High | 7.8 | 2018-10-29 | Incorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660. |
CVE-2018-11877 | High | 7.8 | 2018-10-29 | When the buffer length passed is very large in WLAN, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 83… |
CVE-2018-11876 | High | 7.8 | 2018-10-29 | Lack of input validation while copying to buffer in WLAN will lead to a buffer overflow in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660. |
CVE-2018-11875 | High | 7.8 | 2018-10-29 | Lack of check of buffer size before copying in a WLAN function can lead to a buffer overflow in Snapdragon Mobile in version SD 845, SD 850. |
CVE-2018-11874 | High | 7.8 | 2018-10-29 | Buffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA66… |
CVE-2018-11871 | High | 7.8 | 2018-10-29 | Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon M… |
CVE-2018-11870 | High | 7.8 | 2018-10-29 | Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in Snapdragon Automobil… |
CVE-2018-11867 | High | 7.8 | 2018-10-29 | Lack of buffer length check before copying in WLAN function while processing FIPS event, can lead to a buffer overflow in Snapdragon Mobile in version SD 845. |
CVE-2018-11862 | High | 7.8 | 2018-10-29 | Buffer overflow can happen in WLAN module due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SDA660. |
CVE-2018-11861 | High | 7.8 | 2018-10-29 | Buffer overflow can happen in WLAN function due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SDA660. |
CVE-2018-11859 | High | 7.8 | 2018-10-29 | Buffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850. |
CVE-2018-11858 | High | 7.8 | 2018-10-29 | When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version SD 835, SD 845, SD… |
CVE-2018-11857 | High | 7.8 | 2018-10-29 | Improper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon Mobile in version SD 835, SD 845, SD 850 |
CVE-2018-11856 | High | 7.8 | 2018-10-29 | Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850. |
CVE-2018-18732 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18731 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18730 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18727 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18709 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18708 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18707 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-18706 | High | 7.5 | 2018-10-29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-5866 | High | 7.8 | 2018-10-26 | While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM96… |
CVE-2018-11854 | High | 7.8 | 2018-10-26 | Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660 |
CVE-2018-11853 | High | 7.8 | 2018-10-26 | Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdragon Wear in version I… |
CVE-2018-11850 | High | 7.8 | 2018-10-26 | Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon… |
CVE-2018-11849 | High | 7.8 | 2018-10-26 | Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapd… |
CVE-2017-18124 | High | 7.8 | 2018-10-26 | During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wea… |
CVE-2018-15497 | Critical | 9.8 | 2018-10-23 | The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue rem… |
CVE-2017-18303 | High | 7.8 | 2018-10-23 | While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile… |
CVE-2017-18295 | High | 7.8 | 2018-10-23 | Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206… |
CVE-2017-18283 | Medium | 6.5 | 2018-10-23 | Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD… |
CVE-2017-18171 | High | 8.8 | 2018-10-23 | Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version… |
CVE-2018-18520 | Medium | 6.5 | 2018-10-19 | An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-size is intended to support ar files ins… |
CVE-2018-5188 | Critical | 9.8 | 2018-10-18 | Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that wit… |
CVE-2018-5187 | Critical | 9.8 | 2018-10-18 | Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort tha… |
CVE-2018-5186 | Critical | 9.8 | 2018-10-18 | Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these cou… |
CVE-2018-12376 | Critical | 9.8 | 2018-10-18 | Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort t… |
CVE-2018-12375 | High | 8.8 | 2018-10-18 | Memory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these cou… |
CVE-2018-12359 | High | 8.8 | 2018-10-18 | A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written ou… |
CVE-2018-18384 | Medium | 5.5 | 2018-10-16 | Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size v… |
CVE-2018-18310 | Medium | 5.5 | 2018-10-15 | An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers… |
CVE-2018-18309 | Medium | 5.5 | 2018-10-15 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dereference wa… |
CVE-2018-15951 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a buffer errors vulnerability. Su… |
CVE-2018-12855 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a buffer errors vulnerability. Su… |
CVE-2018-12853 | High | 7.8 | 2018-10-12 | Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a buffer errors vulnerability. Su… |
CVE-2018-12541 | Medium | 6.5 | 2018-10-10 | In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding t… |
CVE-2018-12152 | High | 7.8 | 2018-10-10 | Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.505… |
CVE-2018-8423 | High | 7.8 | 2018-10-10 | A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." Thi… |
CVE-2018-7632 | High | 7.5 | 2018-10-09 | Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading… |
CVE-2018-7631 | Critical | 9.8 | 2018-10-09 | Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leading "/" and without… |
CVE-2018-17962 | High | 7.5 | 2018-10-09 | Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used. |
CVE-2018-18197 | Critical | 9.8 | 2018-10-09 | An issue was discovered in libgig 4.1.0. There is an operator new[] failure (due to a big pSampleLoops heap request) in DLS::Sampler::Sampler in DLS.cpp. |
CVE-2018-18193 | High | 8.8 | 2018-10-09 | An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big pWavePoolTable heap request) in DLS::File::File in DLS.cpp. |
CVE-2018-1000804 | Critical | 9.8 | 2018-10-08 | contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query Language) database engine that can result in Attacker can perform Remote C… |
CVE-2018-0470 | High | 8.6 | 2018-10-05 | A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affect… |
CVE-2018-0423 | High | 8.1 | 2018-10-05 | A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco… |
CVE-2018-17540 | High | 7.5 | 2018-10-03 | The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate. |
CVE-2017-7908 | High | 7.6 | 2018-10-02 | A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that l… |
CVE-2018-9515 | High | 7.8 | 2018-10-02 | In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation of privile… |
CVE-2018-3984 | High | 7.8 | 2018-10-01 | An exploitable uninitialized length vulnerability exists within the Word document-parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specially crafte… |
CVE-2018-14802 | Critical | 9.8 | 2018-10-01 | Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not prope… |
CVE-2018-14794 | Critical | 9.8 | 2018-10-01 | Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire co… |
CVE-2018-17847 | High | 7.5 | 2018-10-01 | The html package (aka x/net/html) through 2018-09-25 in Go mishandles <svg><template><desc><t><svg></template>, leading to a "panic: runtime error" (index out… |
CVE-2018-16713 | Medium | 6.5 | 2018-09-26 | IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL… |
CVE-2018-16711 | High | 8.8 | 2018-09-26 | IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL… |
CVE-2018-6038 | Medium | 6.5 | 2018-09-25 | Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
CVE-2018-17407 | High | 7.8 | 2018-09-23 | An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling of Type 1… |
CVE-2018-17359 | Medium | 5.5 | 2018-09-23 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in bfd_z… |