CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 45)
Page 45 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1000637 | High | 7.8 | 2018-08-20 | zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code exec… |
CVE-2018-15354 | High | 7.5 | 2018-08-17 | A Buffer Overflow exploited through web interface by remote attacker can cause denial of service in Kraftway 24F2XG Router firmware 3.5.30.1118. |
CVE-2018-15353 | Critical | 9.8 | 2018-08-17 | A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftway 24F2XG Router firmware 3.5.30.1118. |
CVE-2018-10873 | High | 8.3 | 2018-08-17 | A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malic… |
CVE-2018-14779 | Medium | 6.8 | 2018-08-15 | A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `ykpiv_transf… |
CVE-2018-15172 | High | 7.5 | 2018-08-15 | TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header. |
CVE-2018-6414 | Critical | 9.8 | 2018-08-13 | A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected devices. Due… |
CVE-2018-5925 | High | 7.8 | 2018-08-13 | A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer o… |
CVE-2018-15191 | Medium | 6.5 | 2018-08-10 | PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or A… |
CVE-2018-15188 | Medium | 6.5 | 2018-08-10 | PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in th… |
CVE-2018-0429 | High | 7.8 | 2018-08-09 | Stack-based buffer overflow in the Cisco Thor decoder before commit 18de8f9f0762c3a542b1122589edb8af859d9813 allows local users to cause a denial of service (s… |
CVE-2018-15176 | High | 7.8 | 2018-08-08 | XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at MSVCR120!memcpy+0x0000000000000074 and application crash) or p… |
CVE-2018-15175 | High | 7.8 | 2018-08-08 | XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at Qt5Core!QVariant::~QVariant+0x0000000000000014 and application… |
CVE-2018-15174 | High | 7.8 | 2018-08-08 | XnView 2.45 allows remote attackers to cause a denial of service (Read Access Violation at the Instruction Pointer and application crash) or possibly have unsp… |
CVE-2017-9003 | High | 7.5 | 2018-08-06 | Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort… |
CVE-2016-4404 | Critical | 9.8 | 2018-08-06 | A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow co… |
CVE-2016-4403 | Critical | 9.8 | 2018-08-06 | A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow co… |
CVE-2016-4402 | Critical | 9.8 | 2018-08-06 | A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow co… |
CVE-2017-14447 | High | 8.5 | 2018-08-06 | An exploitable buffer overflow vulnerability exists in the PubNub message handler for the 'ad' channel of Insteon Hub running firmware version 1012. Specially… |
CVE-2018-14948 | High | 7.8 | 2018-08-05 | An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memory Management Routines (operator new [] v… |
CVE-2018-14947 | High | 8.8 | 2018-08-05 | An issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched Memory Management Routines (operator new [] versus operator delete… |
CVE-2018-14946 | High | 8.8 | 2018-08-05 | An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routines (malloc versus operator delete). |
CVE-2018-14939 | Critical | 9.8 | 2018-08-05 | The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environments such as FreeBSD l… |
CVE-2017-14444 | Critical | 9.9 | 2018-08-02 | An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the URL pa… |
CVE-2015-9262 | Critical | 9.8 | 2018-08-01 | _XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte… |
CVE-2016-8654 | High | 7.8 | 2018-08-01 | A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are… |
CVE-2018-3670 | High | 8.8 | 2018-08-01 | Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a… |
CVE-2016-9581 | Low | 3.3 | 2018-08-01 | An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2. |
CVE-2018-14290 | High | 8.8 | 2018-07-31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to ex… |
CVE-2018-7992 | Medium | 5.5 | 2018-07-31 | Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00)… |
CVE-2016-9597 | High | 7.5 | 2018-07-30 | It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making… |
CVE-2018-14743 | High | 7.5 | 2018-07-30 | An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in wiretype_decode in context.c. |
CVE-2018-14742 | High | 7.5 | 2018-07-30 | An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in set_field_one in bootstrap.c during a memcpy. |
CVE-2018-14741 | High | 7.5 | 2018-07-30 | An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_pattern_pack in pattern.c. |
CVE-2018-14740 | High | 7.5 | 2018-07-30 | An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in set_field_one in bootstrap.c while making a query. |
CVE-2018-14739 | High | 7.5 | 2018-07-30 | An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_pattern_set_default in pattern.c. |
CVE-2018-14738 | High | 7.5 | 2018-07-30 | An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_rmessage_message in rmessage.c. |
CVE-2016-9603 | Medium | 5.5 | 2018-07-27 | A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client… |
CVE-2017-15101 | High | 7.8 | 2018-07-27 | A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a denial of ser… |
CVE-2016-9577 | High | 7.5 | 2018-07-27 | A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE se… |
CVE-2017-2634 | High | 7.5 | 2018-07-27 | It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_header() fu… |
CVE-2017-2630 | Medium | 5.5 | 2018-07-27 | A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur w… |
CVE-2018-14615 | Medium | 5.5 | 2018-07-27 | An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncate_inline_inode() in fs/f2fs/inline.c when umounting an f2fs i… |
CVE-2018-10881 | Medium | 4.2 | 2018-07-26 | A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and… |
CVE-2018-10628 | Critical | 9.8 | 2018-07-24 | AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted p… |
CVE-2018-14590 | High | 7.5 | 2018-07-24 | An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Processor::ProcessFragments in Core/Ap4Processor.cpp. |
CVE-2018-14586 | High | 8.8 | 2018-07-24 | An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Mpeg2TsAudioSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp, a different vulnerabili… |
CVE-2017-3223 | Critical | 9.8 | 2018-07-24 | Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a st… |
CVE-2018-1999011 | High | 8.8 | 2018-07-23 | FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asf_o format demuxer that can result in heap-buffer-o… |
CVE-2018-14564 | Critical | 9.8 | 2018-07-23 | An issue was discovered in libthulac.so in THULAC through 2018-02-25. A SEGV can occur in NGramFeature::find_bases in include/cb_ngram_feature.h. |
CVE-2018-14563 | Critical | 9.8 | 2018-07-23 | An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new[]" in the TaggingLearner class in include/cb… |
CVE-2018-14531 | Critical | 9.8 | 2018-07-23 | An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4_HvccAtom class in Core/Ap4HvccAtom.cpp. |
CVE-2018-14522 | High | 8.8 | 2018-07-23 | An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit in pitch/pitch.c, as demonstrated by aubionotes. |
CVE-2018-14521 | High | 8.8 | 2018-07-23 | An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_readframe in io/source_avcodec.c, as demonstrated by aubiomfcc. |
CVE-2018-5043 | High | 8.8 | 2018-07-20 | Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnerability. Su… |
CVE-2018-5037 | High | 8.8 | 2018-07-20 | Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnerability. Su… |
CVE-2018-5034 | High | 8.8 | 2018-07-20 | Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnerability. Su… |
CVE-2018-12784 | Critical | 9.8 | 2018-07-20 | Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnerability. Su… |
CVE-2018-14443 | Medium | 6.5 | 2018-07-20 | get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV). |
CVE-2018-0379 | High | 7.8 | 2018-07-18 | Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attac… |
CVE-2018-0346 | High | 7.5 | 2018-07-18 | A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of servic… |
CVE-2018-0342 | Medium | 6.7 | 2018-07-18 | A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code… |
CVE-2018-7546 | Medium | 5.5 | 2018-07-18 | wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file. |
CVE-2018-14362 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cac… |
CVE-2018-14338 | High | 8.1 | 2018-07-17 | samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, pos… |
CVE-2016-6563 | Critical | 9.8 | 2018-07-13 | Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML f… |
CVE-2016-6559 | Critical | 9.8 | 2018-07-13 | Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or write from mem… |
CVE-2018-10098 | Medium | 5.5 | 2018-07-13 | In MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL… |
CVE-2018-10018 | High | 8.8 | 2018-07-13 | The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument. |
CVE-2018-14047 | Medium | 5.5 | 2018-07-13 | An issue has been found in PNGwriter 0.7.0. It is a SEGV in pngwriter::readfromfile in pngwriter.cc. NOTE: there is a "Warning: PNGwriter was never designed fo… |
CVE-2018-14015 | Medium | 5.5 | 2018-07-12 | The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted… |
CVE-2018-13997 | High | 7.5 | 2018-07-12 | Genann through 2018-07-08 has a SEGV in genann_run in genann.c. |
CVE-2017-7467 | High | 7.0 | 2018-07-11 | A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could potentially use this… |
CVE-2018-3629 | Medium | 6.5 | 2018-07-10 | Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x… |
CVE-2018-3628 | High | 8.8 | 2018-07-10 | Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9… |
CVE-2018-13869 | Critical | 9.8 | 2018-07-10 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c. |
CVE-2018-10872 | Medium | 6.5 | 2018-07-10 | A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack sw… |
CVE-2018-13848 | High | 7.5 | 2018-07-10 | An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp. |
CVE-2018-13847 | High | 7.5 | 2018-07-10 | An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StcoAtom::AdjustChunkOffsets in Core/Ap4StcoAtom.cpp. |
CVE-2018-4998 | High | 8.8 | 2018-07-09 | Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier have a Memory corruption vulnerability… |
CVE-2018-6857 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6856 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6855 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6854 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6853 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6852 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6851 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-5872 | High | 8.0 | 2018-07-06 | While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) befo… |
CVE-2018-5862 | High | 7.8 | 2018-07-06 | In __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security… |
CVE-2018-5858 | High | 7.8 | 2018-07-06 | In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 201… |
CVE-2018-5893 | High | 7.8 | 2018-07-06 | While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM… |
CVE-2018-5889 | High | 7.8 | 2018-07-06 | While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MS… |
CVE-2018-5885 | Critical | 9.8 | 2018-07-06 | While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5878 | Critical | 9.8 | 2018-07-06 | While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon We… |
CVE-2018-5876 | High | 8.8 | 2018-07-06 | While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5875 | High | 8.8 | 2018-07-06 | While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5835 | High | 7.8 | 2018-07-06 | If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copying keyRSC in Android releases from CAF u… |
CVE-2018-5834 | High | 7.8 | 2018-07-06 | In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS… |
CVE-2018-5830 | High | 7.8 | 2018-07-06 | While processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, a buffer overflow can potentially occur in Android releases from CAF using the linux kernel (A… |
CVE-2017-18158 | High | 7.8 | 2018-07-06 | Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Androi… |