CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 19)
Page 19 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23817 | High | 7.0 | 2024-08-13 | Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the… |
CVE-2021-46746 | Medium | 5.2 | 2024-08-13 | Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access to AMD signing key… |
CVE-2024-42547 | Critical | 9.8 | 2024-08-12 | TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the http_host parameter in the loginauth function. |
CVE-2024-42546 | Critical | 9.8 | 2024-08-12 | TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth function. |
CVE-2024-42545 | Critical | 9.8 | 2024-08-12 | TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg function. |
CVE-2024-42543 | Critical | 9.8 | 2024-08-12 | TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the http_host parameter in the loginauth function. |
CVE-2024-42520 | Critical | 9.8 | 2024-08-12 | TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl. |
CVE-2024-7613 | High | 8.8 | 2024-08-12 | A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDh… |
CVE-2024-7490 | Critical | 9.8 | 2024-08-08 | Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer… |
CVE-2024-7585 | High | 8.8 | 2024-08-07 | A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as critical. Affected by this vulnerability is the function formApPortalWebAuth of the… |
CVE-2024-7584 | High | 8.8 | 2024-08-07 | A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.3(4687). Affected is the function formApPortalPhoneAuth of the file /goform/apP… |
CVE-2024-20454 | Critical | 9.8 | 2024-08-07 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones… |
CVE-2024-20451 | High | 7.5 | 2024-08-07 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones… |
CVE-2024-20450 | Critical | 9.8 | 2024-08-07 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones… |
CVE-2024-7583 | High | 8.8 | 2024-08-07 | A vulnerability, which was classified as critical, has been found in Tenda i22 1.0.0.3(4687). This issue affects the function formApPortalOneKeyAuth of the fil… |
CVE-2024-7582 | High | 8.8 | 2024-08-07 | A vulnerability classified as critical was found in Tenda i22 1.0.0.3(4687). This vulnerability affects the function formApPortalAccessCodeAuth of the file /go… |
CVE-2024-42238 | Medium | 5.5 | 2024-08-07 | In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Return error if block header overflows file Return an error from cs_dsp… |
CVE-2024-7534 | High | 8.8 | 2024-08-06 | Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-7465 | High | 8.8 | 2024-08-05 | A vulnerability, which was classified as critical, was found in TOTOLINK CP450 4.1.0cu.747_B20191224. Affected is the function loginauth of the file /cgi-bin/c… |
CVE-2024-7463 | High | 8.8 | 2024-08-05 | A vulnerability classified as critical was found in TOTOLINK CP900 6.3c.566. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cs… |
CVE-2024-7462 | High | 8.8 | 2024-08-05 | A vulnerability classified as critical has been found in TOTOLINK N350RT 9.3.5u.6139_B20201216. This affects the function setWizardCfg of the file /cgi-bin/cst… |
CVE-2024-7338 | High | 8.8 | 2024-08-01 | A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setParentalRules of the file… |
CVE-2024-7337 | High | 8.8 | 2024-08-01 | A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function loginauth o… |
CVE-2024-7336 | High | 8.8 | 2024-08-01 | A vulnerability classified as critical was found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected by this vulnerability is the function loginauth of the file… |
CVE-2024-7335 | High | 8.8 | 2024-08-01 | A vulnerability classified as critical has been found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected is the function getSaveConfig of the file /cgi-bin/cste… |
CVE-2024-7334 | High | 8.8 | 2024-08-01 | A vulnerability was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. It has been rated as critical. This issue affects the function UploadCustomModule of the f… |
CVE-2024-7333 | High | 8.8 | 2024-08-01 | A vulnerability was found in TOTOLINK N350RT 9.3.5u.6139_B20201216. It has been declared as critical. This vulnerability affects the function setParentalRules… |
CVE-2024-7331 | High | 8.8 | 2024-08-01 | A vulnerability was found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as critical. Affected by this issue is the function UploadCustomModule of th… |
CVE-2024-41660 | Critical | 9.8 | 2024-07-31 | slpd-lite is a unicast SLP UDP server. Any OpenBMC system that includes the slpd-lite package is impacted. Installing this package is the default when building… |
CVE-2024-7217 | Medium | 6.3 | 2024-07-30 | A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. This vulnerability affects the function loginauth of the file /cgi-… |
CVE-2024-7213 | High | 8.8 | 2024-07-30 | A vulnerability, which was classified as critical, was found in TOTOLINK A7000R 9.1.0u.6268_B20220504. Affected is the function setWizardCfg of the file /cgi-b… |
CVE-2024-7212 | High | 8.8 | 2024-07-30 | A vulnerability, which was classified as critical, has been found in TOTOLINK A7000R 9.1.0u.6268_B20220504. This issue affects the function loginauth of the fi… |
CVE-2024-27878 | Medium | 6.7 | 2024-07-29 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code wit… |
CVE-2024-33365 | High | 7.5 | 2024-07-29 | Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitrary code via the Virtual_Data_Check func… |
CVE-2024-41631 | High | 7.5 | 2024-07-29 | Buffer Overflow vulnerability in host-host NEUQ_board v.1.0 allows a remote attacker to cause a denial of service via the password.h component. |
CVE-2024-41039 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix overflow checking of wmfw header Fix the checking that firmware fil… |
CVE-2024-41038 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers Check that all fi… |
CVE-2024-7187 | High | 8.8 | 2024-07-29 | A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been declared as critical. This vulnerability affects the function UploadCustomModu… |
CVE-2024-7186 | High | 8.8 | 2024-07-29 | A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been classified as critical. This affects the function setWiFiAclAddConfig of the f… |
CVE-2024-7185 | High | 8.8 | 2024-07-29 | A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical. Affected by this issue is the function setWebWlanIdx of the fil… |
CVE-2024-7184 | High | 8.8 | 2024-07-29 | A vulnerability has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical. Affected by this vulnerability is the function setUrlFilte… |
CVE-2024-7183 | High | 8.8 | 2024-07-29 | A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected is the function setUploadSetting of the file /… |
CVE-2024-7182 | High | 8.8 | 2024-07-29 | A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This issue affects the function setUpgradeFW of th… |
CVE-2024-7180 | High | 8.8 | 2024-07-29 | A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This affects the function setPortForwardRules of the file /cgi… |
CVE-2024-7179 | High | 8.8 | 2024-07-29 | A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been rated as critical. Affected by this issue is the function setParentalRules of… |
CVE-2024-7178 | High | 8.8 | 2024-07-29 | A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been declared as critical. Affected by this vulnerability is the function setMacQos… |
CVE-2024-7177 | High | 8.8 | 2024-07-29 | A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been classified as critical. Affected is the function setLanguageCfg of the file /c… |
CVE-2024-7176 | High | 8.8 | 2024-07-29 | A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical. This issue affects the function setIpQosRules of the file /cgi-… |
CVE-2024-7174 | High | 8.8 | 2024-07-29 | A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This affects the function setdeviceName of the file /cg… |
CVE-2024-7173 | High | 8.8 | 2024-07-29 | A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected by this issue is the function loginauth o… |
CVE-2024-7172 | High | 8.8 | 2024-07-28 | A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected by this vulnerability is the function getSaveConfig of the… |
CVE-2024-7157 | High | 8.8 | 2024-07-28 | A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. It has been classified as critical. This affects the function getSaveConfig of the file /c… |
CVE-2024-41464 | High | 7.5 | 2024-07-24 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic |
CVE-2024-40724 | High | 7.8 | 2024-07-19 | Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted f… |
CVE-2024-40536 | Medium | 5.3 | 2024-07-16 | Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack overflow via the pin_3g_code parameter in the config_3g_para functio… |
CVE-2024-40130 | Critical | 9.8 | 2024-07-16 | open5gs v2.6.4 is vulnerable to Buffer Overflow. via /lib/core/abts.c. |
CVE-2024-33180 | Critical | 9.8 | 2024-07-16 | Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo. |
CVE-2024-4143 | Critical | 9.8 | 2024-07-15 | A potential security vulnerability has been identified in certain HP PC products using AMI BIOS, which might allow arbitrary code execution. AMI has released f… |
CVE-2024-40415 | Critical | 9.8 | 2024-07-15 | A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. |
CVE-2024-40902 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: jfs: xattr: fix buffer overflow for invalid xattr When an xattr size is not what is expec… |
CVE-2024-39543 | Medium | 6.5 | 2024-07-11 | A Buffer Copy without Checking Size of Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evol… |
CVE-2024-39538 | Medium | 6.5 | 2024-07-11 | A Buffer Copy without Checking Size of Input vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved on ACX7000 Series al… |
CVE-2024-25076 | Medium | 6.8 | 2024-07-10 | An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The bootrom function responsible for validating the Flash Product… |
CVE-2024-39181 | Medium | 6.5 | 2024-07-09 | Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a buffer overflow via the ApCliSsid parameter in thegenerate_conf_router() fu… |
CVE-2024-6604 | High | 7.5 | 2024-07-09 | Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume t… |
CVE-2024-5974 | High | 7.2 | 2024-07-09 | A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with s… |
CVE-2024-6564 | Medium | 6.7 | 2024-07-08 | Buffer overflow in "rcar_dev_init" due to using due to using untrusted data (rcar_image_number) as a loop counter before verifying it against RCAR_MAX_BL3X_IM… |
CVE-2024-6563 | High | 7.5 | 2024-07-08 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. This vulne… |
CVE-2024-31504 | High | 7.5 | 2024-07-08 | Buffer Overflow vulnerability in SILA Embedded Solutions GmbH freemodbus v.2018-09-12 allows a remtoe attacker to cause a denial of service via the LINUXTCP se… |
CVE-2024-39480 | High | 8.4 | 2024-07-05 | In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Currently, when the user attempts symbol com… |
CVE-2024-29507 | Medium | 5.4 | 2024-07-03 | Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters. |
CVE-2024-29506 | High | 8.8 | 2024-07-03 | Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name. |
CVE-2024-32230 | High | 7.8 | 2024-07-01 | FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0 |
CVE-2024-32228 | Medium | 6.6 | 2024-07-01 | FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevc_frame_end. |
CVE-2024-23368 | High | 7.8 | 2024-07-01 | Memory corruption when allocating and accessing an entry in an SMEM partition. |
CVE-2024-27628 | High | 8.1 | 2024-06-28 | Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. |
CVE-2024-39349 | Critical | 9.8 | 2024-06-28 | A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it does not affect th… |
CVE-2024-39134 | High | 7.5 | 2024-06-27 | A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/z… |
CVE-2024-39207 | High | 8.2 | 2024-06-27 | lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmem_write function. |
CVE-2024-39129 | Medium | 5.3 | 2024-06-27 | Heap Buffer Overflow vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function PushTSBuf() at /src/PayloadBuf.cpp. |
CVE-2024-37571 | Medium | 4.3 | 2024-06-26 | Buffer Overflow vulnerability in SAS Broker 9.2 build 1495 allows attackers to cause denial of service or obtain sensitive information via crafted payload to t… |
CVE-2024-38952 | High | 7.5 | 2024-06-25 | PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at /logger/logged_topics.cpp. |
CVE-2024-38951 | Medium | 6.5 | 2024-06-25 | A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted MavLink message. |
CVE-2024-4640 | High | 7.1 | 2024-06-25 | OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker… |
CVE-2024-39291 | High | 7.8 | 2024-06-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode()… |
CVE-2024-33278 | Critical | 9.8 | 2024-06-24 | Buffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.388_24198 allows a remote attacker to execute arbitrary code via the conn… |
CVE-2021-47609 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Fix string overflow in SCPI genpd driver Without the bound checks for… |
CVE-2024-38577 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow There is a possibility of… |
CVE-2024-38576 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: rcu: Fix buffer overflow in print_cpu_stall_info() The rcuc-starvation output from print_… |
CVE-2024-38541 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_modalias() In of_modalias(), if the buffer ha… |
CVE-2024-6143 | High | 8.8 | 2024-06-19 | Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbi… |
CVE-2024-6142 | High | 8.8 | 2024-06-19 | Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arb… |
CVE-2024-37305 | High | 8.2 | 2024-06-17 | oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum… |
CVE-2024-24320 | High | 8.8 | 2024-06-14 | Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sensitive information and execute arbitrar… |
CVE-2024-37637 | Critical | 9.8 | 2024-06-14 | TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg. |
CVE-2024-0099 | High | 7.8 | 2024-06-13 | NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could cause buffer overrun in the host. A successful exp… |
CVE-2024-32907 | High | 7.8 | 2024-06-13 | In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to local escalation of privilege with no addi… |
CVE-2024-37635 | Critical | 9.8 | 2024-06-13 | TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg |
CVE-2024-37632 | Critical | 9.8 | 2024-06-13 | TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth . |
CVE-2024-36760 | High | 7.5 | 2024-06-13 | A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: (/ SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : _ $LT $impl… |