CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 60)
Page 60 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-11420 | Critical | 9.8 | 2017-07-18 | Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-… |
CVE-2017-9671 | High | 7.8 | 2017-07-17 | A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicio… |
CVE-2017-9669 | High | 7.8 | 2017-07-17 | A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a maliciou… |
CVE-2017-6744 | High | 8.8 | 2017-07-17 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r… |
CVE-2017-6743 | High | 8.8 | 2017-07-17 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r… |
CVE-2017-6742 | High | 8.8 | 2017-07-17 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute cod… |
CVE-2017-6741 | High | 8.8 | 2017-07-17 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute cod… |
CVE-2017-6740 | High | 8.8 | 2017-07-17 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r… |
CVE-2017-6739 | High | 8.8 | 2017-07-17 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute cod… |
CVE-2017-6738 | High | 8.8 | 2017-07-17 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r… |
CVE-2017-6737 | High | 8.8 | 2017-07-17 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute cod… |
CVE-2017-6736 | High | 8.8 | 2017-07-17 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r… |
CVE-2017-9639 | High | 7.3 | 2017-07-17 | An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified (aka improper restriction o… |
CVE-2017-10983 | High | 7.5 | 2017-07-17 | An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service. |
CVE-2017-10978 | High | 7.5 | 2017-07-17 | An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service. |
CVE-2017-2344 | High | 7.8 | 2017-07-17 | A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial of service… |
CVE-2017-11362 | Critical | 9.8 | 2017-07-17 | In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cau… |
CVE-2017-11345 | High | 7.8 | 2017-07-17 | Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U… |
CVE-2017-11344 | High | 7.8 | 2017-07-17 | Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U… |
CVE-2017-11339 | Medium | 6.5 | 2017-07-17 | There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of serv… |
CVE-2017-11328 | Medium | 5.5 | 2017-07-17 | Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file. |
CVE-2017-11311 | High | 7.8 | 2017-07-17 | soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code exec… |
CVE-2017-10602 | High | 7.0 | 2017-07-17 | A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and access to Junos CLI, to execute code with ro… |
CVE-2017-1000075 | Critical | 9.8 | 2017-07-17 | Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function |
CVE-2017-1000074 | Critical | 9.8 | 2017-07-17 | Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function. |
CVE-2017-1000073 | Critical | 9.8 | 2017-07-17 | Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution. |
CVE-2017-1000044 | Critical | 9.8 | 2017-07-17 | gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when rendering |
CVE-2017-0152 | High | 8.1 | 2017-07-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers. The v… |
CVE-2017-0028 | Critical | 9.8 | 2017-07-17 | A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could corrupt memory in a… |
CVE-2017-2818 | High | 7.5 | 2017-07-12 | An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an overly large… |
CVE-2017-2814 | High | 7.5 | 2017-07-12 | An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image resizin… |
CVE-2017-11190 | High | 7.8 | 2017-07-12 | unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enabled, might allow remote attackers to cause a denial of service (stack-based buffer overflow and app… |
CVE-2017-8619 | High | 7.5 | 2017-07-11 | Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scr… |
CVE-2017-8618 | High | 7.5 | 2017-07-11 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 16… |
CVE-2017-8617 | High | 7.5 | 2017-07-11 | Microsoft Edge in Windows 10 1703 Microsoft Edge allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handl… |
CVE-2017-8610 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to… |
CVE-2017-8609 | High | 7.5 | 2017-07-11 | Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the cont… |
CVE-2017-8608 | High | 7.5 | 2017-07-11 | Microsoft browsers in Microsoft Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703… |
CVE-2017-8607 | High | 7.5 | 2017-07-11 | Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607… |
CVE-2017-8606 | High | 7.5 | 2017-07-11 | Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607… |
CVE-2017-8605 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
CVE-2017-8604 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current… |
CVE-2017-8603 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current… |
CVE-2017-8601 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
CVE-2017-8598 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
CVE-2017-8596 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user w… |
CVE-2017-8595 | High | 7.5 | 2017-07-11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
CVE-2017-8594 | High | 7.5 | 2017-07-11 | Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the cu… |
CVE-2017-8502 | High | 7.8 | 2017-07-11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnera… |
CVE-2017-8501 | High | 7.8 | 2017-07-11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnera… |
CVE-2017-0243 | High | 7.8 | 2017-07-11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vul… |
CVE-2017-6731 | High | 7.5 | 2017-07-10 | A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attack… |
CVE-2017-11111 | High | 7.8 | 2017-07-08 | In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possi… |
CVE-2017-9629 | Critical | 9.8 | 2017-07-07 | A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The stack-based buffe… |
CVE-2017-0340 | High | 7.8 | 2017-07-07 | An elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into a fixed sized buffer with a user-controlled size could lead to… |
CVE-2017-2184 | High | 8.8 | 2017-07-07 | Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI. |
CVE-2017-0706 | Medium | 6.8 | 2017-07-06 | A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-35195787. References: B-RB#12053… |
CVE-2017-0689 | Medium | 5.5 | 2017-07-06 | A denial of service vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-362159… |
CVE-2017-8290 | High | 7.5 | 2017-07-06 | A potential Buffer Overflow Vulnerability (from a BB Code handling issue) has been identified in TeamSpeak Server version 3.0.13.6 (08/11/2016 09:48:33), it en… |
CVE-2017-10971 | High | 8.8 | 2017-07-06 | In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack… |
CVE-2017-9927 | High | 8.8 | 2017-07-05 | In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted fi… |
CVE-2017-9926 | High | 8.8 | 2017-07-05 | In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted fi… |
CVE-2017-9925 | High | 8.8 | 2017-07-05 | In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a… |
CVE-2017-9924 | High | 8.8 | 2017-07-05 | In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a… |
CVE-2017-9923 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related… |
CVE-2017-9922 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related… |
CVE-2017-9921 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related… |
CVE-2017-9920 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related… |
CVE-2017-9919 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related… |
CVE-2017-9918 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related… |
CVE-2017-9917 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafte… |
CVE-2017-9916 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafte… |
CVE-2017-9915 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with TOOLS plugin 4.50 allows attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a… |
CVE-2017-9914 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .bie file, related to a "Read Access Violation on Block Data Move… |
CVE-2017-9913 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file… |
CVE-2017-9912 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file… |
CVE-2017-9911 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file… |
CVE-2017-9910 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file… |
CVE-2017-9909 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file… |
CVE-2017-9908 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file… |
CVE-2017-9907 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file… |
CVE-2017-9906 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file… |
CVE-2017-9905 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file… |
CVE-2017-9904 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file… |
CVE-2017-9903 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code F… |
CVE-2017-9902 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code F… |
CVE-2017-9901 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls subseq… |
CVE-2017-9900 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code F… |
CVE-2017-9899 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code F… |
CVE-2017-9898 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x00… |
CVE-2017-9897 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x00… |
CVE-2017-9896 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow st… |
CVE-2017-9895 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow st… |
CVE-2017-9894 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffG… |
CVE-2017-9893 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffG… |
CVE-2017-9892 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx… |
CVE-2017-9891 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx… |
CVE-2017-9890 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx… |
CVE-2017-9889 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx… |
CVE-2017-9888 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx… |