CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 25)
Page 25 of 45 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-45468 | High | 7.5 | 2023-10-13 | Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service (DoS) v… |
CVE-2023-45464 | High | 7.5 | 2023-10-13 | Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Servi… |
CVE-2023-45463 | High | 7.5 | 2023-10-13 | Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function. This vulnerability allows attackers… |
CVE-2023-32722 | Critical | 9.6 | 2023-10-12 | The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbx_json_open. |
CVE-2023-35056 | High | 8.8 | 2023-10-11 | A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to comma… |
CVE-2023-35055 | High | 8.8 | 2023-10-11 | A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to comma… |
CVE-2023-26320 | High | 7.5 | 2023-10-11 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection. |
CVE-2023-26319 | Medium | 6.7 | 2023-10-11 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection. |
CVE-2023-26318 | Medium | 6.7 | 2023-10-11 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers. |
CVE-2023-43896 | High | 7.8 | 2023-10-10 | A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary code. |
CVE-2023-45199 | Critical | 9.8 | 2023-10-07 | Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution. |
CVE-2023-43615 | High | 7.5 | 2023-10-07 | Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow. |
CVE-2023-3725 | High | 7.6 | 2023-10-06 | Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem |
CVE-2023-32972 | Low | 3.8 | 2023-10-06 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-32971 | Low | 3.8 | 2023-10-06 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-44839 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Encryption parameter in the SetWLanRadioSecurity function. This vulnerability a… |
CVE-2023-44838 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the TXPower parameter in the SetWLanRadioSettings function. This vulnerability allo… |
CVE-2023-44837 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSettings function. This vulnerability allows at… |
CVE-2023-44836 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SSID parameter in the SetWLanRadioSettings function. This vulnerability allows… |
CVE-2023-44835 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in the SetParentsControlInfo function. This vulnerability allows… |
CVE-2023-44834 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime parameter in the SetParentsControlInfo function. This vulnerability a… |
CVE-2023-44833 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt parameter in the SetWLanRadioSettings function. This vulnerability all… |
CVE-2023-44832 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows… |
CVE-2023-44831 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettings function. This vulnerability allows… |
CVE-2023-44830 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the EndTime parameter in the SetParentsControlInfo function. This vulnerability all… |
CVE-2023-44829 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability a… |
CVE-2023-44828 | High | 7.5 | 2023-10-05 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the CurrentPassword parameter in the CheckPasswdSettings function. This vulnerabili… |
CVE-2023-35803 | Critical | 9.8 | 2023-10-04 | IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow. |
CVE-2023-40830 | Critical | 9.8 | 2023-10-03 | Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length. |
CVE-2023-33035 | High | 7.8 | 2023-10-03 | Memory corruption while invoking callback function of AFE from ADSP. |
CVE-2023-28539 | Medium | 6.6 | 2023-10-03 | Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command. |
CVE-2023-22384 | Medium | 6.7 | 2023-10-03 | Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ). |
CVE-2023-43907 | High | 7.8 | 2023-10-01 | OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c. |
CVE-2023-44466 | High | 8.8 | 2023-09-29 | An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and rem… |
CVE-2023-43314 | High | 7.5 | 2023-09-27 | ** UNSUPPORTED WHEN ASSIGNED **The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2)b11_C0 could allow an unauthenticated… |
CVE-2023-5184 | High | 7.0 | 2023-09-27 | Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers. |
CVE-2023-4264 | High | 7.1 | 2023-09-27 | Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem. |
CVE-2023-4260 | Medium | 6.3 | 2023-09-27 | Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system. |
CVE-2023-4259 | High | 7.1 | 2023-09-26 | Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code. |
CVE-2023-43131 | Critical | 9.8 | 2023-09-25 | General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow. |
CVE-2023-41299 | High | 7.5 | 2023-09-25 | DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-39409 | High | 7.5 | 2023-09-25 | DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-39408 | High | 7.5 | 2023-09-25 | DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2023-23364 | High | 8.1 | 2023-09-22 | A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows… |
CVE-2023-23363 | High | 8.1 | 2023-09-22 | A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibly allows r… |
CVE-2023-36109 | Critical | 9.8 | 2023-09-20 | Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jer… |
CVE-2023-42320 | Critical | 9.8 | 2023-09-18 | Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service via the mac parameter… |
CVE-2023-36659 | Critical | 9.8 | 2023-09-15 | An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of se… |
CVE-2022-48475 | High | 8.2 | 2023-09-12 | Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could cause a Buffer Over… |
CVE-2023-39068 | High | 7.5 | 2023-09-11 | Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM_NBD80N32RA-KL_V4.0… |
CVE-2023-39063 | High | 7.8 | 2023-09-11 | Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wiza… |
CVE-2020-19320 | Critical | 9.8 | 2023-09-11 | Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login. |
CVE-2020-19319 | Critical | 9.8 | 2023-09-11 | Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login. |
CVE-2023-4582 | High | 8.8 | 2023-09-11 | Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private shader memory… |
CVE-2023-42278 | High | 7.5 | 2023-09-08 | hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse(). |
CVE-2023-42277 | Critical | 9.8 | 2023-09-08 | hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath. |
CVE-2023-42276 | Critical | 9.8 | 2023-09-08 | hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray. |
CVE-2023-41064 | High | 7.8 | 2023-09-07 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura… |
CVE-2023-3471 | High | 8.6 | 2023-09-06 | Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code. |
CVE-2023-32379 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.4. An app may be able to execute arbitrary code wi… |
CVE-2023-32356 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28215 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28214 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28213 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28212 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28211 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28210 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28209 | High | 7.8 | 2023-09-06 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system t… |
CVE-2023-28562 | Critical | 9.8 | 2023-09-05 | Memory corruption while handling payloads from remote ESL. |
CVE-2023-28560 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. |
CVE-2023-28559 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. |
CVE-2023-28544 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers. |
CVE-2023-21664 | High | 7.8 | 2023-09-05 | Memory Corruption in Core Platform while printing the response buffer in log. |
CVE-2023-21662 | High | 7.8 | 2023-09-05 | Memory corruption in Core Platform while printing the response buffer in log. |
CVE-2023-40968 | High | 7.5 | 2023-09-01 | Buffer Overflow vulnerability in hzeller timg v.1.5.1 and before allows a remote attacker to cause a denial of service via the 0x61200000045c address. |
CVE-2023-36187 | Critical | 9.8 | 2023-09-01 | Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to… |
CVE-2022-46527 | High | 7.5 | 2023-09-01 | ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser. |
CVE-2023-40589 | Medium | 4.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflo… |
CVE-2023-4163 | Medium | 4.4 | 2023-08-31 | In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large inp… |
CVE-2023-38975 | High | 7.5 | 2023-08-29 | * Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of service via the chucnked_vectors.rs component. |
CVE-2023-24548 | Medium | 5.3 | 2023-08-29 | On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause… |
CVE-2023-41361 | Critical | 9.8 | 2023-08-29 | An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version. |
CVE-2023-40998 | High | 7.5 | 2023-08-28 | Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size com… |
CVE-2023-40997 | High | 7.5 | 2023-08-28 | Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via a crafted packet. |
CVE-2023-36481 | High | 7.5 | 2023-08-28 | An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W92… |
CVE-2023-40166 | Medium | 5.5 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFro… |
CVE-2023-40164 | Medium | 5.5 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextSt… |
CVE-2023-40036 | Medium | 5.5 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAnalysis::Ha… |
CVE-2023-40031 | High | 7.8 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This… |
CVE-2023-36198 | High | 7.5 | 2023-08-25 | Buffer Overflow vulnerability in skalenetwork sgxwallet v.1.9.0 allows an attacker to cause a denial of service via the trustedBlsSignMessage function. |
CVE-2023-39742 | Medium | 5.5 | 2023-08-25 | giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. |
CVE-2022-3742 | Medium | 6.7 | 2023-08-23 | A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to ex… |
CVE-2023-20168 | High | 7.1 | 2023-08-23 | A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected device… |
CVE-2023-4041 | Critical | 9.8 | 2023-08-23 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon… |
CVE-2022-29654 | Medium | 5.5 | 2023-08-22 | Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file. |
CVE-2021-32422 | High | 7.5 | 2023-08-22 | dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array. |
CVE-2020-35357 | Medium | 6.5 | 2023-08-22 | A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing… |
CVE-2020-25887 | High | 8.8 | 2023-08-22 | Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file. |
CVE-2020-24295 | High | 8.8 | 2023-08-22 | Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 [r1859] allows remote attackers to ru narbitrary code via use of crafted ps… |
CVE-2020-24294 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of servic… |