CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 21)
Page 21 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-3871 | Critical | 9.8 | 2024-04-16 | The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements multiple features that are affected by com… |
CVE-2024-1755 | High | 8.8 | 2024-04-15 | The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted a… |
CVE-2024-22526 | Medium | 5.5 | 2024-04-12 | Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service (DoS) via exr image file. |
CVE-2024-23077 | High | 7.5 | 2024-04-10 | JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the component /chart/plot/CompassPlot.java. NOTE: this is disputed by multiple t… |
CVE-2024-3120 | Critical | 9.0 | 2024-04-10 | A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length… |
CVE-2024-3119 | Critical | 9.0 | 2024-04-10 | A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions… |
CVE-2024-25115 | High | 7.0 | 2024-04-09 | RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, specially crafted `CF.LOADCHU… |
CVE-2023-50821 | Medium | 6.2 | 2024-04-09 | A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8)… |
CVE-2024-23079 | Medium | 6.2 | 2024-04-08 | JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double)… |
CVE-2023-52364 | Medium | 6.3 | 2024-04-08 | Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may cause out-of-bounds… |
CVE-2023-52551 | Medium | 5.3 | 2024-04-08 | Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52550 | High | 7.5 | 2024-04-08 | Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52549 | High | 7.5 | 2024-04-08 | Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52346 | Medium | 4.4 | 2024-04-08 | In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privi… |
CVE-2024-31951 | Medium | 6.5 | 2024-04-07 | In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA p… |
CVE-2024-31950 | Medium | 6.5 | 2024-04-07 | In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Rout… |
CVE-2024-27908 | Medium | 4.9 | 2024-04-05 | A buffer overflow vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in denial of service. |
CVE-2024-26797 | High | 7.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Prevent potential buffer overflow in map_hw_resources Adds a check in th… |
CVE-2024-26785 | Medium | 5.5 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix protection fault in iommufd_test_syz_conv_iova Syzkaller reported the follow… |
CVE-2024-26768 | High | 7.2 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Change acpi_core_pic[NR_CPUS] to acpi_core_pic[MAX_CORE_PIC] With default conf… |
CVE-2024-30620 | Critical | 9.8 | 2024-04-02 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan. |
CVE-2023-6948 | Low | 3.0 | 2024-04-02 | A Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker… |
CVE-2024-21463 | High | 7.3 | 2024-04-01 | Memory corruption while processing Codec2 during v13k decoder pitch synthesis. |
CVE-2023-43515 | Medium | 6.6 | 2024-04-01 | Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled. |
CVE-2023-33023 | High | 8.4 | 2024-04-01 | Memory corruption while processing finish_sign command to pass a rsp buffer. |
CVE-2023-28547 | High | 8.4 | 2024-04-01 | Memory corruption in SPS Application while requesting for public key in sorter TA. |
CVE-2024-27619 | High | 7.3 | 2024-03-29 | Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer… |
CVE-2024-30635 | Critical | 9.8 | 2024-03-29 | Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability located in the funcpara1 parameter in the formSetCfm function. |
CVE-2024-30602 | Critical | 9.8 | 2024-03-28 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function. |
CVE-2024-30584 | Critical | 9.8 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function. |
CVE-2024-30593 | Critical | 9.8 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function. |
CVE-2023-45929 | Critical | 9.1 | 2024-03-27 | S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr(). |
CVE-2024-25580 | Medium | 6.2 | 2024-03-27 | An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer… |
CVE-2024-25395 | High | 8.8 | 2024-03-27 | A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2. |
CVE-2024-25394 | Medium | 4.3 | 2024-03-27 | A buffer overflow occurs in utilities/ymodem/ry_sy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character. |
CVE-2024-2452 | High | 7.0 | 2024-03-26 | In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cause an integer wrap-around and an alloc… |
CVE-2023-6175 | High | 7.8 | 2024-03-26 | NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file |
CVE-2024-29195 | Medium | 6.0 | 2024-03-26 | The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communicatio… |
CVE-2023-47430 | High | 7.5 | 2024-03-25 | Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to cause a denial of service via via the SendContainer() function at tivo_… |
CVE-2021-47172 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers Channel nu… |
CVE-2024-29244 | Medium | 5.3 | 2024-03-21 | Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the pin_code_3g parameter at /apply.cgi. |
CVE-2024-29243 | Critical | 9.8 | 2024-03-21 | Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the vpn_client_ip parameter at /apply.cgi. |
CVE-2024-28583 | High | 7.8 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the readLine() function when read… |
CVE-2024-28576 | Medium | 5.5 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_tcp_destroy(… |
CVE-2024-28570 | Medium | 5.5 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the processMakerNote() f… |
CVE-2024-28569 | High | 7.8 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::Xdr::read() function… |
CVE-2024-28565 | Medium | 5.5 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the psdParser::ReadImage… |
CVE-2024-28564 | Medium | 6.2 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::CharPtrIO… |
CVE-2023-52614 | High | 7.8 | 2024-03-18 | In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix buffer overflow in trans_stat_show Fix buffer overflow in trans_stat_sh… |
CVE-2023-52612 | High | 7.8 | 2024-03-18 | In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req->dst buffer overflow The req->dst buffer size should be checked b… |
CVE-2024-28639 | Critical | 9.8 | 2024-03-16 | Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and… |
CVE-2024-25139 | Critical | 10.0 | 2024-03-14 | In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffer overflow. After h… |
CVE-2015-10123 | High | 8.8 | 2024-03-13 | An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific pag… |
CVE-2024-22039 | Critical | 10.0 | 2024-03-12 | A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP6 SR3), Ce… |
CVE-2024-27225 | Medium | 4.4 | 2024-03-11 | In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure wi… |
CVE-2024-25984 | Medium | 6.2 | 2024-03-11 | In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure w… |
CVE-2024-2331 | Medium | 6.3 | 2024-03-09 | A vulnerability was found in SourceCodester Tourist Reservation System 1.0. It has been declared as critical. This vulnerability affects the function ad_writed… |
CVE-2024-23286 | High | 7.8 | 2024-03-08 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monte… |
CVE-2024-25817 | High | 7.8 | 2024-03-06 | Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .git/HEAD, .git/refs, and .git/objects com… |
CVE-2023-32331 | High | 7.5 | 2024-03-04 | IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI… |
CVE-2021-47107 | Critical | 9.8 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too… |
CVE-2024-0156 | High | 7.0 | 2024-03-04 | Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attacker could potentially exploit this vulne… |
CVE-2023-43548 | High | 7.3 | 2024-03-04 | Memory corruption while parsing qcp clip with invalid chunk data size. |
CVE-2023-43540 | High | 8.4 | 2024-03-04 | Memory corruption while processing the IOCTL FM HCI WRITE request. |
CVE-2023-28582 | Critical | 9.8 | 2024-03-04 | Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. |
CVE-2024-27572 | High | 7.5 | 2024-03-01 | LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the updateCurAPlist function. This vulnerability allows attac… |
CVE-2024-20267 | High | 8.6 | 2024-02-29 | A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to une… |
CVE-2023-6881 | High | 7.3 | 2024-02-29 | Possible buffer overflow in is_mount_point |
CVE-2021-47040 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix overflows checks in provide buffers Colin reported before possible overflow… |
CVE-2024-1786 | High | 7.5 | 2024-02-23 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DIR-600M C1 3.08. Affected by this issue is some un… |
CVE-2024-24479 | High | 7.5 | 2024-02-21 | A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs com… |
CVE-2024-24474 | High | 8.8 | 2024-02-20 | QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of… |
CVE-2024-25196 | Low | 3.3 | 2024-02-20 | Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process. This vu… |
CVE-2024-26134 | High | 7.5 | 2024-02-19 | cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior t… |
CVE-2023-52377 | High | 7.4 | 2024-02-18 | Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2023-52370 | Critical | 9.8 | 2024-02-18 | Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access. |
CVE-2023-52366 | High | 7.5 | 2024-02-18 | Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormall… |
CVE-2023-52365 | Medium | 5.3 | 2024-02-18 | Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormall… |
CVE-2024-25373 | Medium | 4.6 | 2024-02-15 | Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function. |
CVE-2024-20723 | High | 7.8 | 2024-02-15 | Substance3D - Painter versions 9.1.1 and earlier are affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context o… |
CVE-2022-23093 | Medium | 6.5 | 2024-02-15 | ping reads raw IP packets from the network to process responses in the pr_pack() function. As part of processing a response ping has to reconstruct the IP hea… |
CVE-2022-23085 | High | 8.2 | 2024-02-15 | A user-provided integer option was passed to nmreq_copyin() without checking if it would overflow. This insufficient bounds checking could lead to kernel memo… |
CVE-2024-25165 | High | 7.8 | 2024-02-14 | A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex. |
CVE-2023-43519 | High | 7.3 | 2024-02-06 | Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
CVE-2023-33077 | Medium | 6.7 | 2024-02-06 | Memory corruption in HLOS while converting from authorization token to HIDL vector. |
CVE-2023-33072 | Critical | 9.3 | 2024-02-06 | Memory corruption in Core while processing control functions. |
CVE-2023-33069 | Medium | 6.7 | 2024-02-06 | Memory corruption in Audio while processing the calibration data returned from ACDB loader. |
CVE-2023-33068 | Medium | 6.7 | 2024-02-06 | Memory corruption in Audio while processing IIR config data from AFE calibration block. |
CVE-2023-45037 | Low | 3.8 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-45036 | Low | 3.8 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-45035 | Low | 3.8 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41292 | Low | 3.8 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41280 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41279 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41278 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41277 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41276 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41275 | Medium | 5.5 | 2024-02-02 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-41273 | Medium | 5.5 | 2024-02-02 | A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow auth… |
CVE-2024-0338 | High | 7.3 | 2024-02-02 | A buffer overflow vulnerability has been found in XAMPP affecting version 8.2.4 and earlier. An attacker could execute arbitrary code through a long file debug… |