CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 54)
Page 54 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-15744 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15743 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15742 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15741 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15740 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15739 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15738 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15737 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15803 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is… |
CVE-2017-15802 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is… |
CVE-2017-15801 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is… |
CVE-2017-15670 | Critical | 9.8 | 2017-10-20 | The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related… |
CVE-2017-15650 | High | 7.5 | 2017-10-19 | musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict the number of addre… |
CVE-2015-4422 | High | 7.0 | 2017-10-19 | The TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a… |
CVE-2015-4421 | High | 7.5 | 2017-10-19 | The tzdriver module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service… |
CVE-2017-12293 | High | 8.6 | 2017-10-19 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability… |
CVE-2017-12260 | High | 7.5 | 2017-10-19 | A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones co… |
CVE-2017-12259 | High | 7.5 | 2017-10-19 | A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthe… |
CVE-2017-15601 | High | 7.5 | 2017-10-18 | In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt… |
CVE-2017-8022 | High | 8.1 | 2017-10-18 | An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4). The Server service (nsrd) is aff… |
CVE-2011-5320 | Medium | 6.2 | 2017-10-18 | scanf and related functions in glibc before 2.15 allow local users to cause a denial of service (segmentation fault) via a large string of 0s. |
CVE-2017-13999 | Critical | 9.8 | 2017-10-17 | A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vulnerabilities have… |
CVE-2017-6273 | High | 7.8 | 2017-10-17 | NVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component where there is the potential to write to a memory location that is outside the inten… |
CVE-2017-15385 | High | 7.8 | 2017-10-16 | The store_versioninfo_gnu_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause a denial of service (r_read_le16 inval… |
CVE-2017-15221 | High | 7.8 | 2017-10-16 | ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324. |
CVE-2017-15372 | Medium | 5.5 | 2017-10-16 | There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a de… |
CVE-2017-15370 | Medium | 5.5 | 2017-10-16 | There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service a… |
CVE-2017-8727 | High | 7.5 | 2017-10-13 | Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows… |
CVE-2017-8726 | Medium | 4.3 | 2017-10-13 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre… |
CVE-2017-8718 | High | 7.8 | 2017-10-13 | The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15… |
CVE-2017-8717 | High | 7.8 | 2017-10-13 | The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15… |
CVE-2017-8703 | Medium | 5.5 | 2017-10-13 | The Microsoft Windows Subsystem for Linux on Microsoft Windows 10 1703 allows a denial of service vulnerability when it improperly handles objects in memory, a… |
CVE-2017-11826 | High | 7.8 | 2017-10-13 | Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 200… |
CVE-2017-11825 | High | 7.8 | 2017-10-13 | Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security… |
CVE-2017-11822 | High | 7.5 | 2017-10-13 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold… |
CVE-2017-11821 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scri… |
CVE-2017-11819 | High | 7.5 | 2017-10-13 | Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handle objects in memory… |
CVE-2017-11813 | High | 7.5 | 2017-10-13 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to exec… |
CVE-2017-11812 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of… |
CVE-2017-11811 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
CVE-2017-11810 | High | 7.5 | 2017-10-13 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold… |
CVE-2017-11809 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
CVE-2017-11808 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
CVE-2017-11807 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scri… |
CVE-2017-11806 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scri… |
CVE-2017-11805 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scri… |
CVE-2017-11804 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
CVE-2017-11802 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
CVE-2017-11800 | High | 7.5 | 2017-10-13 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use… |
CVE-2017-11799 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
CVE-2017-11798 | High | 7.5 | 2017-10-13 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre… |
CVE-2017-11796 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engi… |
CVE-2017-11793 | High | 7.5 | 2017-10-13 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold… |
CVE-2017-11792 | High | 7.5 | 2017-10-13 | ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, due to how the scrip… |
CVE-2017-11774 | High | 7.8 | 2017-10-13 | Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles… |
CVE-2017-15281 | High | 8.8 | 2017-10-12 | ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other… |
CVE-2017-5789 | Critical | 9.8 | 2017-10-11 | HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. A… |
CVE-2017-15264 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Dat… |
CVE-2017-15263 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15262 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15261 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15260 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15259 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15258 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15257 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15256 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15255 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15254 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15253 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15252 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15251 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15250 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15249 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15248 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15247 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15246 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15245 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15244 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15243 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15242 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15241 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15240 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15239 | High | 7.8 | 2017-10-11 | IrfanView 4.44 - 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf… |
CVE-2017-15220 | Critical | 9.8 | 2017-10-11 | Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows r… |
CVE-2017-9714 | High | 7.8 | 2017-10-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an out of bound memory access may happen in lim… |
CVE-2017-9706 | High | 7.8 | 2017-10-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an array out-of-bounds access can potentially o… |
CVE-2017-11067 | High | 7.8 | 2017-10-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the Athdiag procfs entry does not have a proper… |
CVE-2017-11059 | High | 7.8 | 2017-10-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, setting the HMAC key by different threads durin… |
CVE-2017-11057 | High | 7.8 | 2017-10-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in compatibility mode, flash_data from 64-bit u… |
CVE-2017-11056 | High | 7.8 | 2017-10-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while doing sha and cipher operations, a usersp… |
CVE-2017-11053 | High | 7.8 | 2017-10-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when qos map set IE of length less than 16 is r… |
CVE-2017-11050 | High | 7.8 | 2017-10-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when the pktlogconf tool gives a pktlog buffer… |
CVE-2014-9092 | Medium | 6.5 | 2017-10-10 | libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker. |
CVE-2017-14980 | Critical | 9.8 | 2017-10-10 | Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login. |
CVE-2017-13723 | High | 7.8 | 2017-10-10 | In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of… |
CVE-2014-9474 | Critical | 9.8 | 2017-10-10 | Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to… |
CVE-2015-1206 | Medium | 5.5 | 2017-10-06 | Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service (unpaged memory write and process crash) via a craf… |
CVE-2017-1000254 | High | 7.5 | 2017-10-06 | libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks… |
CVE-2017-15047 | Critical | 9.8 | 2017-10-06 | The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or p… |
CVE-2017-15046 | Medium | 5.5 | 2017-10-06 | LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a different vulnerability… |