CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 13)
Page 13 of 45 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-5549 | High | 7.3 | 2025-06-04 | A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the compon… |
CVE-2025-5548 | High | 7.3 | 2025-06-04 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler… |
CVE-2025-5547 | High | 7.3 | 2025-06-04 | A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. This issue affects some unknown processing of the component CDUP… |
CVE-2025-32105 | Critical | 9.8 | 2025-06-03 | A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remote code execution. |
CVE-2025-31712 | Medium | 5.1 | 2025-06-03 | In cplog service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executio… |
CVE-2024-53013 | Medium | 6.6 | 2025-06-03 | Memory corruption may occur while processing voice call registration with user. |
CVE-2025-5408 | Critical | 9.8 | 2025-06-01 | A vulnerability was found in WAVLINK QUANTUM D2G, QUANTUM D3G, WL-WN530G3A, WL-WN530HG3, WL-WN532A3 and WL-WN576K1 up to V1410_240222 and classified as critica… |
CVE-2025-5357 | High | 7.3 | 2025-05-30 | A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the comp… |
CVE-2025-5356 | High | 7.3 | 2025-05-30 | A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown function of the component BYE Command Handler… |
CVE-2025-5331 | High | 7.3 | 2025-05-29 | A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. This vulnerability affects unknown code of the component NLST Command Hand… |
CVE-2025-5330 | High | 7.3 | 2025-05-29 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component RETR Command Handler. T… |
CVE-2025-29632 | Medium | 5.4 | 2025-05-29 | Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handler_generated.go, ha… |
CVE-2025-5295 | High | 7.3 | 2025-05-28 | A vulnerability classified as critical was found in FreeFloat FTP Server 1.0.0. This vulnerability affects unknown code of the component PORT Command Handler… |
CVE-2025-5222 | High | 7.0 | 2025-05-27 | A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot… |
CVE-2025-5221 | High | 7.3 | 2025-05-27 | A vulnerability was found in FreeFloat FTP Server 1.0.0. It has been classified as critical. This affects an unknown part of the component QUOTE Command Handle… |
CVE-2025-5220 | High | 7.3 | 2025-05-27 | A vulnerability was found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the component GET C… |
CVE-2025-5219 | High | 7.3 | 2025-05-27 | A vulnerability has been found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the comp… |
CVE-2025-5218 | High | 7.3 | 2025-05-27 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.0. Affected is an unknown function of the component LITERAL Command Ha… |
CVE-2025-5217 | High | 7.3 | 2025-05-27 | A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.0. This issue affects some unknown processing of the component RM… |
CVE-2025-5156 | High | 8.8 | 2025-05-25 | A vulnerability was found in H3C GR-5400AX up to 100R008 and classified as critical. Affected by this issue is the function EditWlanMacList of the file /routin… |
CVE-2025-5112 | High | 7.3 | 2025-05-23 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MGET Command Handler. T… |
CVE-2025-5111 | High | 7.3 | 2025-05-23 | A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the comp… |
CVE-2025-5110 | High | 7.3 | 2025-05-23 | A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unknown functionality of the component VERBO… |
CVE-2025-5109 | High | 7.3 | 2025-05-23 | A vulnerability classified as critical has been found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component STATUS Command Handler. The… |
CVE-2025-5076 | High | 7.3 | 2025-05-22 | A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component SEND Co… |
CVE-2025-5075 | High | 7.3 | 2025-05-22 | A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the compon… |
CVE-2025-46714 | High | 7.8 | 2025-05-22 | Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to 1.15.12, API_G… |
CVE-2025-46713 | High | 7.8 | 2025-05-22 | Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 0.0.1 and prior to 1.15.12, API_S… |
CVE-2025-5074 | High | 7.3 | 2025-05-22 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component PROMPT Command Handl… |
CVE-2025-5073 | High | 7.3 | 2025-05-22 | A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. This issue affects some unknown processing of the component MKDI… |
CVE-2025-5053 | High | 7.3 | 2025-05-21 | A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the comp… |
CVE-2025-5052 | High | 7.3 | 2025-05-21 | A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unknown functionality of the component LS Co… |
CVE-2025-5051 | High | 7.3 | 2025-05-21 | A vulnerability classified as critical has been found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component BINARY Command Handler. The… |
CVE-2025-5050 | High | 7.3 | 2025-05-21 | A vulnerability was found in FreeFloat FTP Server 1.0. It has been rated as critical. This issue affects some unknown processing of the component BELL Command… |
CVE-2025-5049 | High | 7.3 | 2025-05-21 | A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. This vulnerability affects unknown code of the component APPEND Comman… |
CVE-2019-16536 | High | 8.8 | 2025-05-21 | Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3. |
CVE-2025-37939 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix accessing BTF.ext core_relo header Update btf_ext_parse_info() to ensure the… |
CVE-2025-37891 | High | 7.8 | 2025-05-19 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function fr… |
CVE-2025-4897 | High | 8.8 | 2025-05-18 | A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodal… |
CVE-2025-4896 | High | 8.8 | 2025-05-18 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/UserCo… |
CVE-2025-4891 | Medium | 5.3 | 2025-05-18 | A vulnerability was found in code-projects Police Station Management System 1.0. It has been classified as critical. Affected is the function criminal::display… |
CVE-2025-4889 | Medium | 5.3 | 2025-05-18 | A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of th… |
CVE-2025-4888 | Medium | 5.3 | 2025-05-18 | A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. This affects the function medicineType::take_orde… |
CVE-2025-4872 | High | 7.3 | 2025-05-18 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component CCC Command Handler… |
CVE-2025-4871 | High | 7.3 | 2025-05-18 | A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST C… |
CVE-2025-4848 | High | 7.3 | 2025-05-18 | A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component RECV Command Hand… |
CVE-2025-4847 | High | 7.3 | 2025-05-18 | A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the component MLS Command Han… |
CVE-2025-4846 | High | 7.3 | 2025-05-18 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MPUT Command Handler. T… |
CVE-2025-4845 | High | 7.3 | 2025-05-18 | A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the comp… |
CVE-2025-4844 | High | 7.3 | 2025-05-18 | A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unknown functionality of the component CD Co… |
CVE-2025-4835 | High | 8.8 | 2025-05-17 | A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an un… |
CVE-2025-4834 | High | 8.8 | 2025-05-17 | A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been classified as critical. Affected is an unknown function of th… |
CVE-2025-4833 | High | 8.8 | 2025-05-17 | A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This issue affects some unknown processing of… |
CVE-2025-4832 | High | 8.8 | 2025-05-17 | A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This vulnerability affects unknown code o… |
CVE-2025-4831 | High | 8.8 | 2025-05-17 | A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the fi… |
CVE-2025-4830 | High | 8.8 | 2025-05-17 | A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by this issue is some un… |
CVE-2025-4829 | High | 8.8 | 2025-05-17 | A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by this vulnerability is the function sub… |
CVE-2025-4827 | High | 8.8 | 2025-05-17 | A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the… |
CVE-2025-4826 | High | 8.8 | 2025-05-17 | A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects some unknown p… |
CVE-2025-4825 | High | 8.8 | 2025-05-17 | A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the fil… |
CVE-2025-4824 | High | 8.8 | 2025-05-17 | A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boa… |
CVE-2025-4823 | High | 8.8 | 2025-05-17 | A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is the function sub… |
CVE-2025-4792 | High | 7.3 | 2025-05-16 | A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component MDELETE Command H… |
CVE-2025-4791 | High | 7.3 | 2025-05-16 | A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the component HASH Command Ha… |
CVE-2025-4790 | High | 7.3 | 2025-05-16 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component GLOB Command Handler. T… |
CVE-2025-4789 | High | 7.3 | 2025-05-16 | A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the comp… |
CVE-2025-4788 | High | 7.3 | 2025-05-16 | A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unknown functionality of the component DELET… |
CVE-2025-4733 | High | 8.8 | 2025-05-16 | A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects some unknown processi… |
CVE-2025-4732 | High | 8.8 | 2025-05-16 | A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boaf… |
CVE-2025-4731 | High | 8.8 | 2025-05-16 | A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/for… |
CVE-2025-4730 | High | 8.8 | 2025-05-16 | A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functional… |
CVE-2025-44879 | High | 7.5 | 2025-05-14 | WS-WN572HP3 V230525 was discovered to contain a buffer overflow in the component /www/cgi-bin/upload.cgi. This vulnerability allows attackers to cause a Denial… |
CVE-2025-46785 | Medium | 6.5 | 2025-05-14 | Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
CVE-2025-45863 | Critical | 9.8 | 2025-05-13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface. |
CVE-2025-45865 | Critical | 9.8 | 2025-05-13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface. |
CVE-2025-45861 | Critical | 9.8 | 2025-05-13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface. |
CVE-2025-45866 | Medium | 5.4 | 2025-05-13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface. |
CVE-2025-45864 | Medium | 5.4 | 2025-05-13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface. |
CVE-2025-45859 | Medium | 5.4 | 2025-05-13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface. |
CVE-2025-31223 | High | 8.0 | 2025-05-12 | The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchO… |
CVE-2025-44175 | Medium | 5.4 | 2025-05-12 | Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function. |
CVE-2025-45779 | Critical | 9.8 | 2025-05-12 | Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter. |
CVE-2025-3496 | High | 7.5 | 2025-05-12 | An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface. |
CVE-2025-4497 | Medium | 5.3 | 2025-05-10 | A vulnerability was found in code-projects Simple Banking System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the co… |
CVE-2025-4496 | High | 8.8 | 2025-05-10 | A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulne… |
CVE-2025-4462 | High | 8.8 | 2025-05-09 | A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. This issue affects some unknown processing of the file /b… |
CVE-2025-4452 | High | 8.8 | 2025-05-09 | A vulnerability was found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this issue is the function formSetWizard2. The manipulation of the… |
CVE-2025-4451 | High | 8.8 | 2025-05-09 | A vulnerability has been found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this vulnerability is the function formSetWAN_Wizard52. The m… |
CVE-2025-4450 | High | 8.8 | 2025-05-09 | A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is the function formSetEasy_Wizard. The manipulation of the a… |
CVE-2025-4449 | High | 8.8 | 2025-05-09 | A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This issue affects the function formEasySetupWizard3. The manipul… |
CVE-2025-4448 | High | 8.8 | 2025-05-09 | A vulnerability classified as critical was found in D-Link DIR-619L 2.04B04. This vulnerability affects the function formEasySetupWizard. The manipulation of t… |
CVE-2025-4446 | High | 8.0 | 2025-05-09 | A vulnerability has been found in H3C GR-5400AX up to 100R008 and classified as critical. This vulnerability affects the function Edit_List_SSID of the file /g… |
CVE-2025-4442 | High | 8.8 | 2025-05-09 | A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetWAN_Wizard55. The manipu… |
CVE-2025-4441 | High | 8.8 | 2025-05-08 | A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formSetWAN_Wizard534. The manipulation of t… |
CVE-2025-4440 | High | 8.0 | 2025-05-08 | A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of the file /goform/aspF… |
CVE-2025-1253 | High | 7.8 | 2025-05-08 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries)… |
CVE-2025-37803 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb t… |
CVE-2025-36557 | High | 7.5 | 2025-05-07 | When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkerne… |
CVE-2025-36525 | High | 7.5 | 2025-05-07 | When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. Note: Software versions which h… |
CVE-2025-4368 | High | 8.8 | 2025-05-06 | A vulnerability, which was classified as critical, was found in Tenda AC8 16.03.34.06. Affected is the function formGetRouterStatus of the file /goform/MtuSetM… |