CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 44)
Page 44 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-17358 | Medium | 5.5 | 2018-09-23 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in _bfd_… |
CVE-2018-3877 | Critical | 9.9 | 2018-09-21 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware vers… |
CVE-2018-3874 | Critical | 9.9 | 2018-09-21 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware vers… |
CVE-2018-3873 | Critical | 9.9 | 2018-09-21 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware vers… |
CVE-2018-1710 | High | 8.4 | 2018-09-21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerability that can poten… |
CVE-2018-14829 | Critical | 9.8 | 2018-09-20 | Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet… |
CVE-2018-14821 | High | 7.5 | 2018-09-20 | Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malf… |
CVE-2018-14792 | Medium | 6.3 | 2018-09-19 | WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files. |
CVE-2018-1149 | Critical | 9.8 | 2018-09-19 | cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests. |
CVE-2018-5905 | High | 7.0 | 2018-09-19 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a race condition while accessing num of clients in… |
CVE-2018-3573 | High | 7.8 | 2018-09-19 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while relocating kernel images with a specially cra… |
CVE-2018-11895 | High | 7.8 | 2018-09-19 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check Validation in WLAN function c… |
CVE-2018-11893 | High | 7.8 | 2018-09-19 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing vendor scan request, when input ar… |
CVE-2018-11889 | High | 7.8 | 2018-09-19 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when requesting rssi timeout, access invalid memory… |
CVE-2018-11878 | High | 7.8 | 2018-09-19 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, possibility of invalid memory access while processi… |
CVE-2018-11869 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received… |
CVE-2018-11868 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received… |
CVE-2018-11863 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received from firmware to ca… |
CVE-2018-11860 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a potential buffer over flow could occur while proc… |
CVE-2018-11842 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, during wlan association, driver allocates memory. I… |
CVE-2018-11836 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check can lead to out-of-bounds acc… |
CVE-2018-11832 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of input size validation before copying to buf… |
CVE-2018-11298 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing SET_PASSPOINT_LIST vendor command… |
CVE-2018-11274 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, buffer overflow may occur when payload size is extr… |
CVE-2018-11265 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, possible buffer overflow while incrementing the log… |
CVE-2018-14320 | Medium | 6.5 | 2018-09-17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit thi… |
CVE-2018-17143 | High | 7.5 | 2018-09-17 | The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in p… |
CVE-2018-17106 | High | 7.5 | 2018-09-16 | In Tinyftp Tinyftpd 1.1, a buffer overflow exists in the text variable of the do_mkd function in the ftpproto.c file. An attacker can overwrite ebp via a long… |
CVE-2018-17076 | High | 8.8 | 2018-09-16 | GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a c… |
CVE-2018-10637 | High | 7.8 | 2018-09-13 | A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji Electric V-Server Lite… |
CVE-2018-16745 | High | 7.8 | 2018-09-13 | An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow a buffer overflow if l… |
CVE-2018-8464 | High | 7.5 | 2018-09-13 | An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Executio… |
CVE-2018-3657 | Medium | 6.7 | 2018-09-12 | Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code… |
CVE-2018-12151 | Medium | 5.5 | 2018-09-12 | Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer overflow potentiall… |
CVE-2018-12150 | Medium | 6.7 | 2018-09-12 | Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose i… |
CVE-2018-12149 | Medium | 5.5 | 2018-09-12 | Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny service to the applicatio… |
CVE-2017-1085 | High | 7.8 | 2018-09-12 | In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only memory region below the stack into a read-… |
CVE-2017-1084 | High | 7.5 | 2018-09-12 | In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results… |
CVE-2017-1083 | High | 7.5 | 2018-09-12 | In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibility a poorly written process could be c… |
CVE-2018-3875 | Critical | 9.9 | 2018-09-10 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware vers… |
CVE-2018-16782 | High | 8.8 | 2018-09-10 | libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmpr_read_rle_internal function in imagew-bmp.c. |
CVE-2018-16768 | High | 8.8 | 2018-09-10 | In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecifi… |
CVE-2018-16767 | High | 8.8 | 2018-09-10 | In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecifi… |
CVE-2018-16765 | High | 8.8 | 2018-09-10 | In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecifi… |
CVE-2018-12897 | High | 7.8 | 2018-09-07 | SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow. |
CVE-2018-16665 | Medium | 6.1 | 2018-09-07 | An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow while parsing AQL in lvm_shift_for_operator in os/storage/antelope/lvm.c. |
CVE-2018-16664 | High | 7.0 | 2018-09-07 | An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow in lvm_set_type in os/storage/antelope/lvm.c while parsing AQL (lvm_set_op, lvm_s… |
CVE-2017-2795 | High | 8.3 | 2018-09-07 | An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xl… |
CVE-2017-2792 | High | 8.3 | 2018-09-07 | An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially craft… |
CVE-2018-0644 | Medium | 6.5 | 2018-09-07 | Buffer overflow in Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA (Online Receipt… |
CVE-2018-16647 | Medium | 5.5 | 2018-09-06 | In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault in fz_write… |
CVE-2018-16644 | Medium | 6.5 | 2018-09-06 | There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remo… |
CVE-2018-1000667 | Medium | 5.5 | 2018-09-06 | NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assem… |
CVE-2018-1000663 | Medium | 6.5 | 2018-09-06 | jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode from jsiEval.c that can result in Crash due to segmentation fault… |
CVE-2018-16585 | High | 7.8 | 2018-09-06 | An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys PostScript command is accepted even though it is not intended for use during… |
CVE-2018-16510 | High | 7.8 | 2018-09-05 | An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers… |
CVE-2018-16422 | Medium | 6.6 | 2018-09-04 | A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1… |
CVE-2018-16421 | Medium | 6.6 | 2018-09-04 | Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be us… |
CVE-2018-16420 | Medium | 6.6 | 2018-09-04 | Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be… |
CVE-2018-16419 | Medium | 6.6 | 2018-09-04 | Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used… |
CVE-2018-16418 | Medium | 6.6 | 2018-09-04 | A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply c… |
CVE-2018-16393 | Medium | 6.8 | 2018-09-03 | Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc… |
CVE-2018-16392 | Medium | 6.8 | 2018-09-03 | Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by att… |
CVE-2018-16391 | Medium | 6.8 | 2018-09-03 | Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used b… |
CVE-2018-16333 | High | 7.5 | 2018-09-02 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN dev… |
CVE-2018-16302 | High | 7.8 | 2018-09-01 | MediaComm Zip-n-Go before 4.95 has a Buffer Overflow via a crafted file. |
CVE-2018-12811 | Critical | 9.8 | 2018-08-29 | Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability. Successful exploitation could lead to remote… |
CVE-2018-12810 | Critical | 9.8 | 2018-08-29 | Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability. Successful exploitation could lead to remote… |
CVE-2018-15897 | Medium | 6.5 | 2018-08-28 | PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, Com… |
CVE-2017-15406 | High | 8.8 | 2018-08-28 | A stack buffer overflow in V8 in Google Chrome prior to 62.0.3202.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
CVE-2017-15398 | Critical | 9.8 | 2018-08-28 | A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious se… |
CVE-2017-15396 | Medium | 6.5 | 2018-08-28 | A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.32… |
CVE-2017-15418 | Medium | 4.3 | 2018-08-28 | Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process m… |
CVE-2017-15417 | Medium | 5.3 | 2018-08-28 | Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via… |
CVE-2017-15416 | Medium | 6.5 | 2018-08-28 | Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2017-15415 | Medium | 6.5 | 2018-08-28 | Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page. |
CVE-2017-15409 | High | 8.8 | 2018-08-28 | Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2017-15408 | High | 8.8 | 2018-08-28 | Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file… |
CVE-2018-15839 | Critical | 9.8 | 2018-08-28 | D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header. |
CVE-2018-15871 | Medium | 6.5 | 2018-08-25 | An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability causes a se… |
CVE-2018-15870 | Medium | 6.5 | 2018-08-25 | An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault… |
CVE-2018-15120 | Medium | 6.5 | 2018-08-24 | libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or pos… |
CVE-2017-11563 | Critical | 9.8 | 2018-08-24 | D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as chan… |
CVE-2018-3872 | Critical | 9.9 | 2018-08-23 | An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware ve… |
CVE-2018-1159 | Medium | 6.5 | 2018-08-23 | Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability. An authenticated remote attacker can crash the HTTP server by ra… |
CVE-2017-14452 | High | 8.5 | 2018-08-23 | An exploitable buffer overflow vulnerability exists in the PubNub message handler for the "control" channel of Insteon Hub running firmware version 1012. Speci… |
CVE-2018-3925 | High | 8.5 | 2018-08-23 | An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 d… |
CVE-2018-3917 | Critical | 9.9 | 2018-08-23 | On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of i… |
CVE-2018-3905 | Critical | 9.9 | 2018-08-23 | An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices w… |
CVE-2018-3878 | Critical | 9.9 | 2018-08-23 | Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 device… |
CVE-2017-14455 | High | 8.5 | 2018-08-23 | On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global s… |
CVE-2017-14453 | High | 8.5 | 2018-08-23 | On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global s… |
CVE-2017-2575 | Medium | 6.5 | 2018-08-22 | A vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due to missing check of the return value of function malloc in the… |
CVE-2018-14799 | Low | 3.7 | 2018-08-22 | In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user… |
CVE-2018-10858 | Medium | 4.3 | 2018-08-22 | A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to… |
CVE-2018-10932 | Medium | 4.3 | 2018-08-21 | lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to i… |
CVE-2018-14793 | High | 8.8 | 2018-08-21 | DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to allow arbitrary code ex… |
CVE-2018-1000223 | High | 8.8 | 2018-08-20 | soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() that can result… |
CVE-2018-1000221 | Critical | 9.8 | 2018-08-20 | pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can result in dequote() function returns 1-byte allocation if initial… |
CVE-2018-1000657 | High | 7.8 | 2018-08-20 | Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later contains a Bu… |