CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 11)
Page 11 of 45 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-9006 | High | 8.8 | 2025-08-15 | A vulnerability was identified in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function formdelFileName of the file /goform/delFileName. The manip… |
CVE-2025-20222 | High | 8.6 | 2025-08-14 | A vulnerability in the RADIUS proxy feature for the IPsec VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Fire… |
CVE-2025-8940 | High | 8.8 | 2025-08-14 | A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this vulnerability is the function strcpy of the file /goform/saveParentControlInfo… |
CVE-2025-8939 | High | 8.8 | 2025-08-14 | A vulnerability was determined in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/WifiGuestSet. The manipulation of the argum… |
CVE-2025-50616 | High | 7.5 | 2025-08-13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046f984 function of the cgitest.cgi file. Attackers can trigger this… |
CVE-2025-50614 | High | 7.5 | 2025-08-13 | A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_0047151c function of the cgitest.cgi file. Attackers can trigger… |
CVE-2025-50613 | High | 7.5 | 2025-08-13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00475e1c function of the cgitest.cgi file. Attackers can trigger this… |
CVE-2025-50612 | High | 7.5 | 2025-08-13 | A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_004743f8 function of the cgitest.cgi file. Attackers can trigger… |
CVE-2025-50611 | High | 7.5 | 2025-08-13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00473154 function of the cgitest.cgi file. Attackers can trigger this… |
CVE-2025-50610 | High | 7.5 | 2025-08-13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00476598 function of the cgitest.cgi file. Attackers can trigger this… |
CVE-2025-50609 | High | 7.5 | 2025-08-13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the Function_00465620 of the cgitest.cgi file. Attackers can trigger this vul… |
CVE-2025-50608 | High | 7.5 | 2025-08-13 | A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00471994 function of the cgitest.cgi file. Attackers can trigger this… |
CVE-2025-8760 | Critical | 9.8 | 2025-08-13 | A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 Build 1124. This affects the function base64_decode of the component fcgi_server. The manipulation o… |
CVE-2025-7677 | Medium | 5.9 | 2025-08-11 | A denial-of-service (DoS) attack is possible if access to the local network is provided to unauthorized users. This is due to a buffer copy issue that may lead… |
CVE-2025-51824 | Medium | 6.5 | 2025-08-11 | libcsp 2.0 is vulnerable to Buffer Overflow in the csp_usart_open() function at drivers/usart/zephyr.c. |
CVE-2025-51823 | Medium | 6.5 | 2025-08-11 | libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter. The function uses strcpy to copy t… |
CVE-2025-8854 | Critical | 9.8 | 2025-08-11 | Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to execute arbitrary code via a crafted OF… |
CVE-2025-8736 | Medium | 5.3 | 2025-08-08 | A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the c… |
CVE-2025-6634 | High | 7.8 | 2025-08-06 | A maliciously crafted TGA file, when linked or imported into Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this… |
CVE-2025-27072 | Medium | 5.5 | 2025-08-06 | Information disclosure while processing a packet at EAVB BE side with invalid header length. |
CVE-2025-27071 | High | 7.3 | 2025-08-06 | Memory corruption while processing specific files in Powerline Communication Firmware. |
CVE-2025-54642 | Medium | 6.7 | 2025-08-06 | Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may aff… |
CVE-2025-54641 | Medium | 6.7 | 2025-08-06 | Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may… |
CVE-2025-54632 | Medium | 6.8 | 2025-08-06 | Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
CVE-2012-10035 | | 2025-08-05 | Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command. By sending a specially crafted pay… | |
CVE-2025-43214 | Medium | 6.5 | 2025-07-30 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2… |
CVE-2025-43213 | Medium | 6.5 | 2025-07-30 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2… |
CVE-2025-31277 | High | 8.8 | 2025-07-30 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2… |
CVE-2025-5038 | High | 7.8 | 2025-07-29 | A maliciously crafted X_T file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this… |
CVE-2025-53713 | High | 7.5 | 2025-07-29 | A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_APC.htm file due to missing input parameter va… |
CVE-2025-53712 | High | 7.5 | 2025-07-29 | A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_AP.htm file due to missing input parameter val… |
CVE-2025-53711 | High | 7.5 | 2025-07-29 | A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3. The vulnerability exists in the /userRpm/WlanNetworkRpm.htm file due t… |
CVE-2025-8246 | High | 8.8 | 2025-07-27 | A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2025-8245 | High | 8.8 | 2025-07-27 | A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-8244 | High | 8.8 | 2025-07-27 | A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formMap… |
CVE-2025-8243 | High | 8.8 | 2025-07-27 | A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formM… |
CVE-2025-8242 | High | 8.8 | 2025-07-27 | A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/for… |
CVE-2025-8180 | High | 8.8 | 2025-07-26 | A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formdeleteUserName of the file… |
CVE-2025-8177 | Medium | 5.3 | 2025-07-26 | A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The mani… |
CVE-2025-8170 | High | 8.8 | 2025-07-25 | A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015. This vulnerability affects the function tcpcheck_net of the file /router… |
CVE-2025-8169 | High | 8.8 | 2025-07-25 | A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function formSetWanPPTPcallback of the file /goform/formSetWanPP… |
CVE-2025-8168 | High | 8.8 | 2025-07-25 | A vulnerability was found in D-Link DIR-513 1.10. It has been rated as critical. Affected by this issue is the function websAspInit of the file /goform/formSet… |
CVE-2025-8160 | High | 8.8 | 2025-07-25 | A vulnerability classified as critical has been found in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/SetSysTimeCfg of the… |
CVE-2025-8140 | High | 8.8 | 2025-07-25 | A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm… |
CVE-2025-8139 | High | 8.8 | 2025-07-25 | A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an unknown part of the file /boafrm/formPort… |
CVE-2025-8138 | High | 8.8 | 2025-07-25 | A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is some unknown functionality of the file /… |
CVE-2025-8137 | High | 8.8 | 2025-07-25 | A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-8136 | High | 8.8 | 2025-07-25 | A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected is an unknown function of the file /boafrm/formFi… |
CVE-2025-31701 | High | 8.1 | 2025-07-23 | A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, pote… |
CVE-2025-31700 | High | 8.1 | 2025-07-23 | A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, pote… |
CVE-2025-8019 | High | 8.8 | 2025-07-22 | A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected by this issue is the function sub_40B6F… |
CVE-2025-7945 | High | 8.8 | 2025-07-22 | A vulnerability was found in D-Link DIR-513 up to 20190831. It has been declared as critical. This vulnerability affects the function formSetWanDhcpplus of the… |
CVE-2025-7914 | High | 8.8 | 2025-07-21 | A vulnerability has been found in Tenda AC6 15.03.06.50 and classified as critical. Affected by this vulnerability is the function setparentcontrolinfo of the… |
CVE-2025-7913 | High | 8.8 | 2025-07-21 | A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. Affected is the function updateWifiInfo of the component MQT… |
CVE-2025-7912 | High | 8.8 | 2025-07-20 | A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748_B20211015. This issue affects the function recvSlaveUpgstatus of t… |
CVE-2025-7837 | High | 8.8 | 2025-07-19 | A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this issue is the function recvSlaveStaInfo of the compo… |
CVE-2025-53888 | Critical | 9.8 | 2025-07-18 | RIOT-OS, an operating system that supports Internet of Things devices, has an ineffective size check implemented with `assert()` can lead to buffer overflow in… |
CVE-2025-7758 | High | 8.8 | 2025-07-17 | A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015. Affected by this issue is the function setDiagnos… |
CVE-2025-7747 | High | 8.8 | 2025-07-17 | A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromWizardHandle of the file /goform/WizardHandle of th… |
CVE-2025-51630 | Critical | 9.8 | 2025-07-17 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules. |
CVE-2025-34128 | | 2025-07-16 | A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control (VideoPlayer.ocx) version 2.6 when handling overly long arguments to the Convert… | |
CVE-2025-7673 | Critical | 9.8 | 2025-07-16 | A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unau… |
CVE-2025-34106 | | 2025-07-15 | A buffer overflow vulnerability exists in PDF Shaper versions 3.5 and 3.6 when converting a crafted PDF file to an image using the 'Convert PDF to Image' funct… | |
CVE-2025-7571 | High | 8.8 | 2025-07-14 | A vulnerability classified as critical has been found in UTT HiPER 840G up to 3.1.1-190328. This affects an unknown part of the file /goform/aspApBasicConfigUr… |
CVE-2025-7570 | High | 8.8 | 2025-07-14 | A vulnerability was found in UTT HiPER 840G up to 3.1.1-190328. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2025-7468 | High | 8.8 | 2025-07-12 | A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /gofo… |
CVE-2025-7465 | High | 8.8 | 2025-07-12 | A vulnerability classified as critical was found in Tenda FH1201 1.2.0.14. Affected by this vulnerability is the function fromRouteStatic of the file /goform/f… |
CVE-2025-7463 | High | 8.8 | 2025-07-12 | A vulnerability was found in Tenda FH1201 1.2.0.14. It has been declared as critical. This vulnerability affects the function formWrlsafeset of the file /gofor… |
CVE-2023-38036 | Critical | 9.8 | 2025-07-12 | A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could resu… |
CVE-2025-7460 | High | 8.8 | 2025-07-11 | A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnerability is the function setWiFiAclRules… |
CVE-2025-49464 | Medium | 6.5 | 2025-07-10 | Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access. |
CVE-2025-46789 | Medium | 6.5 | 2025-07-10 | Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access. |
CVE-2025-5037 | High | 7.8 | 2025-07-10 | A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can leverage th… |
CVE-2025-48386 | Medium | 6.3 | 2025-07-08 | Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to int… |
CVE-2025-7345 | High | 7.5 | 2025-07-08 | A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When pro… |
CVE-2025-27058 | High | 7.8 | 2025-07-08 | Memory corruption while processing packet data with exceedingly large packet. |
CVE-2025-27052 | High | 7.8 | 2025-07-08 | Memory corruption while processing data packets in diag received from Unix clients. |
CVE-2025-27043 | High | 7.8 | 2025-07-08 | Memory corruption while processing manipulated payload in video firmware. |
CVE-2025-21445 | High | 7.8 | 2025-07-08 | Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host. |
CVE-2025-21444 | High | 7.8 | 2025-07-08 | Memory corruption while copying the result to the transmission queue in EMAC. |
CVE-2025-21426 | Medium | 6.6 | 2025-07-08 | Memory corruption while processing camera TPG write request. |
CVE-2025-24004 | Medium | 5.2 | 2025-07-08 | A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss… |
CVE-2025-24003 | High | 8.2 | 2025-07-08 | An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting… |
CVE-2025-7118 | High | 8.8 | 2025-07-07 | A vulnerability, which was classified as critical, has been found in UTT HiPER 840G up to 3.1.1-190328. This issue affects some unknown processing of the file… |
CVE-2025-7117 | High | 8.8 | 2025-07-07 | A vulnerability classified as critical was found in UTT HiPER 840G up to 3.1.1-190328. This vulnerability affects unknown code of the file /goform/websWhiteLis… |
CVE-2025-7116 | High | 8.8 | 2025-07-07 | A vulnerability classified as critical has been found in UTT 进取 750W up to 3.2.2-191225. This affects an unknown part of the file /goform/Fast_wireless_conf. T… |
CVE-2025-7077 | High | 8.8 | 2025-07-06 | A vulnerability classified as critical has been found in Shenzhen Libituo Technology LBT-T300-T310 up to 2.2.3.6. This affects the function config_3g_para of t… |
CVE-2025-50263 | High | 8.1 | 2025-07-03 | Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the list parameter. |
CVE-2025-50262 | High | 7.5 | 2025-07-03 | Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetQosBand function via the list parameter. |
CVE-2025-50258 | High | 8.1 | 2025-07-03 | Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter. |
CVE-2025-50641 | Medium | 6.5 | 2025-07-01 | Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the addWifiMacFilter function via the parameter deviceId. |
CVE-2025-6953 | High | 8.8 | 2025-07-01 | A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/form… |
CVE-2025-6940 | High | 8.8 | 2025-07-01 | A vulnerability classified as critical was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2025-6939 | High | 8.8 | 2025-07-01 | A vulnerability classified as critical has been found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formWlSiteS… |
CVE-2025-6882 | High | 8.8 | 2025-06-30 | A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP. The manipulation… |
CVE-2025-6881 | High | 8.8 | 2025-06-30 | A vulnerability was found in D-Link DI-8100 16.07.21. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pppoe_ba… |
CVE-2025-6825 | High | 8.8 | 2025-06-28 | A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of th… |
CVE-2025-6824 | High | 8.8 | 2025-06-28 | A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParen… |
CVE-2023-28904 | Medium | 5.2 | 2025-06-28 | A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical access to the MIB3 ECU… |
CVE-2025-41418 | Medium | 5.3 | 2025-06-27 | Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by proces… |