CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 20)
Page 20 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-37040 | Medium | 5.4 | 2024-06-12 | CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a user with access to the device’s web in… |
CVE-2024-36650 | High | 7.5 | 2024-06-11 | TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/sy… |
CVE-2022-37020 | Medium | 6.8 | 2024-06-10 | Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP… |
CVE-2024-24192 | Critical | 9.1 | 2024-06-06 | robdns commit d76d2e6 was discovered to contain a heap overflow via the component block->filename at /src/zonefile-insertion.c. |
CVE-2024-5305 | High | 7.8 | 2024-06-06 | Kofax Power PDF PDF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… |
CVE-2024-5463 | Medium | 6.5 | 2024-06-04 | A vulnerability regarding buffer copy without checking the size of input ('Classic Buffer Overflow') has been found in the login component. This allows remote… |
CVE-2023-43556 | Critical | 9.3 | 2024-06-03 | Memory corruption in Hypervisor when platform information mentioned is not aligned. |
CVE-2023-43542 | High | 7.8 | 2024-06-03 | Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. |
CVE-2023-43538 | Critical | 9.3 | 2024-06-03 | Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization. |
CVE-2024-5564 | High | 8.1 | 2024-05-31 | A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv… |
CVE-2024-37017 | High | 8.1 | 2024-05-31 | asdcplib (aka AS-DCP Lib) 2.13.1 has a heap-based buffer over-read in ASDCP::TimedText::MXFReader::h__Reader::MD_to_TimedText_TDesc in AS_DCP_TimedText.cpp in… |
CVE-2024-30165 | High | 7.1 | 2024-05-28 | Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permis… |
CVE-2024-30164 | Medium | 6.7 | 2024-05-28 | Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions. This is resolve… |
CVE-2024-35400 | Medium | 5.3 | 2024-05-28 | TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRules |
CVE-2024-35398 | Critical | 9.8 | 2024-05-28 | TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules. |
CVE-2022-48681 | High | 7.2 | 2024-05-28 | Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail. |
CVE-2022-4969 | Medium | 5.3 | 2024-05-27 | A vulnerability, which was classified as critical, has been found in bwoodsend rockhopper up to 0.1.2. Affected by this issue is the function count_rows of the… |
CVE-2024-33809 | Medium | 6.5 | 2024-05-24 | PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks. |
CVE-2024-5243 | High | 7.5 | 2024-05-23 | TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affe… |
CVE-2021-47485 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing eithe… |
CVE-2024-25724 | High | 7.3 | 2024-05-21 | In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing from Routing Service, Recording Service, Queuing Service, and Cl… |
CVE-2024-27130 | High | 7.2 | 2024-05-21 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2024-27129 | Medium | 6.4 | 2024-05-21 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2024-27128 | Medium | 6.4 | 2024-05-21 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-52735 | Critical | 9.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself sock_map proto callba… |
CVE-2021-47347 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wl1251: Fix possible buffer overflow in wl1251_cmd_scan Function wl1251_cmd_scan calls me… |
CVE-2024-0816 | Medium | 5.5 | 2024-05-21 | The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS… |
CVE-2023-37929 | Medium | 6.5 | 2024-05-21 | The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause… |
CVE-2024-35571 | Critical | 9.8 | 2024-05-20 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv. |
CVE-2024-35823 | Medium | 5.3 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: vt: fix unicode buffer corruption when deleting characters This is the same issue that wa… |
CVE-2024-27407 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed overflow check in mi_enum_attr() |
CVE-2023-38581 | High | 8.8 | 2024-05-16 | Buffer overflow in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via lo… |
CVE-2024-34905 | High | 7.5 | 2024-05-16 | FlyFish v3.0.0 was discovered to contain a buffer overflow via the password parameter on the login page. This vulnerability allows attackers to cause a Denial… |
CVE-2024-0762 | High | 7.5 | 2024-05-14 | Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix SecureCore™ f… |
CVE-2024-35099 | Critical | 9.8 | 2024-05-14 | TOTOLINK LR350 V9.3.5u.6698_B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth. |
CVE-2024-34945 | Critical | 9.8 | 2024-05-14 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle. |
CVE-2024-34196 | High | 8.8 | 2024-05-14 | Totolink AC1200 Wireless Dual Band Gigabit Router A3002RU_V3 Firmware V3.0.0-B20230809.1615 is vulnerable to Buffer Overflow. The "boa" program allows attacker… |
CVE-2024-33876 | Medium | 5.7 | 2024-05-14 | HDF5 Library through 1.14.3 has a heap buffer overflow in H5S__point_deserialize in H5Spoint.c. |
CVE-2024-33875 | Medium | 5.7 | 2024-05-14 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c, resulting in the corruption of the instruction pointer. |
CVE-2024-33874 | Critical | 9.8 | 2024-05-14 | HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c. |
CVE-2024-33773 | Medium | 6.5 | 2024-05-14 | A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a denial of ser… |
CVE-2024-33771 | Medium | 6.5 | 2024-05-14 | A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial of servic… |
CVE-2024-33454 | Medium | 6.5 | 2024-05-14 | Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack component. |
CVE-2024-30259 | High | 8.2 | 2024-05-14 | FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4… |
CVE-2024-29166 | Medium | 5.7 | 2024-05-14 | HDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode, resulting in the corruption of the instruction pointer and causing denial of service or po… |
CVE-2024-29159 | Critical | 9.8 | 2024-05-14 | HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the corruption of the instruction pointer and causing denial of service… |
CVE-2024-28759 | Medium | 4.3 | 2024-05-14 | A crafted network packet may cause a buffer overrun in Wind River VxWorks 7 through 23.09. |
CVE-2024-27280 | Critical | 9.8 | 2024-05-14 | A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods… |
CVE-2022-32504 | Critical | 9.8 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. The code used to parse the JSON objects received from the WebSocket service provided by the dev… |
CVE-2024-34244 | High | 7.5 | 2024-05-08 | libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be triggered when the function is fed with specially craf… |
CVE-2023-42757 | Medium | 4.2 | 2024-05-07 | Process Explorer before 17.04 allows attackers to make it functionally unavailable (a denial of service for analysis) by renaming an executable file to a new e… |
CVE-2024-32664 | Medium | 5.3 | 2024-05-07 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, specially craf… |
CVE-2024-33783 | Medium | 6.5 | 2024-05-07 | MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vu… |
CVE-2024-33780 | Medium | 6.5 | 2024-05-07 | MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPprf.cpp. This vulnerability allows attac… |
CVE-2023-46012 | Critical | 9.8 | 2024-05-07 | Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD UPnP. |
CVE-2024-22472 | High | 8.1 | 2024-05-07 | A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects… |
CVE-2024-34252 | High | 7.5 | 2024-05-06 | wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source… |
CVE-2024-21480 | High | 7.3 | 2024-05-06 | Memory corruption while playing audio file having large-sized input buffer. |
CVE-2023-43526 | Medium | 6.7 | 2024-05-06 | Memory corruption while querying module parameters from Listen Sound model client in kernel from user space. |
CVE-2023-43525 | Medium | 6.7 | 2024-05-06 | Memory corruption while copying the sound model data from user to kernel buffer during sound model register. |
CVE-2023-43524 | Medium | 6.7 | 2024-05-06 | Memory corruption when the bandpass filter order received from AHAL is not within the expected range. |
CVE-2024-4511 | Medium | 6.3 | 2024-05-06 | A vulnerability classified as critical has been found in Shanghai Sunfull Automation BACnet Server HMI1002-ARM 2.0.4. This affects an unknown part of the compo… |
CVE-2023-52729 | High | 7.5 | 2024-05-04 | TCPServer.cpp in SimpleNetwork through 29bc615 has an off-by-one error that causes a buffer overflow when trying to add '\0' to the end of long msg data. It ca… |
CVE-2022-48696 | High | 7.1 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the max_raw_read and ma… |
CVE-2024-31963 | Medium | 6.4 | 2024-05-02 | A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1… |
CVE-2024-33820 | High | 7.5 | 2024-05-01 | Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overflow via the formWlEncrypt function of t… |
CVE-2024-27045 | High | 7.0 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' Tell snprint… |
CVE-2024-32018 | High | 8.8 | 2024-05-01 | RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. Most codeba… |
CVE-2024-32017 | Critical | 9.8 | 2024-05-01 | RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The size ch… |
CVE-2024-31225 | High | 8.3 | 2024-05-01 | RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The `_on_rd… |
CVE-2024-26952 | High | 8.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of… |
CVE-2024-26936 | High | 8.2 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate request buffer size in smb2_allocate_rsp_buf() The response buffer should… |
CVE-2023-46960 | High | 8.6 | 2024-04-29 | Buffer Overflow vulnerability in PyPXE v.1.8.4 allows a remote attacker to cause a denial of service via the handle function in the tftp module. |
CVE-2023-46566 | High | 7.5 | 2024-04-29 | Buffer Overflow vulnerability in msoulier tftpy commit 467017b844bf6e31745138a30e2509145b0c529c allows a remote attacker to cause a denial of service via the p… |
CVE-2023-46565 | High | 7.5 | 2024-04-29 | Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of service via the handl… |
CVE-2023-52080 | High | 7.7 | 2024-04-29 | IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function. Attackers with access to… |
CVE-2024-1969 | High | 8.2 | 2024-04-29 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Secomea GateManager (webserver modules) allows crash of GateManager.Thi… |
CVE-2022-48657 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amu_fie_setup() cpufreq_get_hw_max_freq() retur… |
CVE-2024-26927 | High | 8.4 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Add some bounds checking to firmware data Smatch complains about "head->full_s… |
CVE-2023-50364 | Medium | 6.4 | 2024-04-26 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-50362 | Medium | 5.0 | 2024-04-26 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-50361 | Medium | 5.0 | 2024-04-26 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2024-32324 | High | 7.8 | 2024-04-25 | Buffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2 allows a local attacker to execute arbitrary code via the vpn_client_… |
CVE-2024-20313 | High | 7.4 | 2024-04-24 | A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device t… |
CVE-2024-33214 | High | 7.5 | 2024-04-23 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter in ip/goform/RouteStatic. |
CVE-2024-30799 | Medium | 4.4 | 2024-04-22 | An issue in PX4 Autopilot v1.14 and before allows a remote attacker to execute arbitrary code and cause a denial of service via the Breach Return Point functio… |
CVE-2024-4020 | High | 8.8 | 2024-04-20 | A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromAddressNat of the file /goform/addressN… |
CVE-2024-22905 | High | 7.0 | 2024-04-19 | Buffer Overflow vulnerability in ARM mbed-os v.6.17.0 allows a remote attacker to execute arbitrary code via a crafted script to the hciTrSerialRxIncoming func… |
CVE-2023-51798 | High | 7.8 | 2024-04-19 | Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via a floating point exception (FPE) error at l… |
CVE-2023-51796 | Low | 3.6 | 2024-04-19 | Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/f_reverse.c:269:26 in areve… |
CVE-2023-51793 | High | 7.8 | 2024-04-19 | Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in image_cop… |
CVE-2023-50010 | High | 7.8 | 2024-04-19 | FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff_gradfun_blur_line_movdqa_sse2, as demonstrated by a call to the set_encoder_id function in /fftools… |
CVE-2023-50008 | High | 7.8 | 2024-04-19 | FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the av_malloc function in libavutil/mem.c:105:9 component. |
CVE-2023-49502 | High | 8.8 | 2024-04-19 | Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in the… |
CVE-2024-31040 | Low | 2.7 | 2024-04-17 | Buffer Overflow vulnerability in the get_var_integer function in mqtt_parser.c in NanoMQ 0.21.7 allows remote attackers to cause a denial of service via a seri… |
CVE-2024-26915 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reset IH OVERFLOW_CLEAR bit Allows us to detect subsequent IH ring buffer ove… |
CVE-2023-46060 | High | 7.5 | 2024-04-17 | A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo… |
CVE-2024-26889 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size na… |
CVE-2022-24807 | Medium | 6.5 | 2024-04-16 | net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to `SNMP-VIEW-BASE… |
CVE-2022-24805 | Medium | 6.5 | 2024-04-16 | net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the `INDEX` of… |