CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 27)
Page 27 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0977 | Medium | 6.7 | 2023-04-03 | A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsv… |
CVE-2023-25076 | Critical | 9.8 | 2023-03-30 | A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345cc9eba55df7… |
CVE-2023-28508 | High | 8.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based overf… |
CVE-2023-28506 | High | 8.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buff… |
CVE-2023-28505 | High | 8.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a buffer overflow… |
CVE-2023-28504 | Critical | 9.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buff… |
CVE-2023-28502 | Critical | 9.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buff… |
CVE-2022-42431 | High | 7.8 | 2023-03-29 | This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged co… |
CVE-2022-27643 | High | 8.8 | 2023-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authenti… |
CVE-2023-26924 | Medium | 5.5 | 2023-03-27 | LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language… |
CVE-2023-25664 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A fix is incl… |
CVE-2023-28772 | Medium | 6.7 | 2023-03-23 | An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow. |
CVE-2023-1560 | Low | 2.8 | 2023-03-22 | A vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0. This issue affects some unknown processing of the file tinytiffreader… |
CVE-2023-28116 | High | 8.1 | 2023-03-17 | Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write can occur… |
CVE-2023-1452 | Medium | 5.3 | 2023-03-17 | A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2023-26769 | High | 7.5 | 2023-03-16 | Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at co… |
CVE-2023-26768 | High | 7.5 | 2023-03-16 | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDat… |
CVE-2023-26767 | High | 7.5 | 2023-03-16 | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoi… |
CVE-2020-27507 | Critical | 9.8 | 2023-03-15 | The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server… |
CVE-2023-27590 | High | 7.8 | 2023-03-14 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into a Rizin r… |
CVE-2023-27585 | High | 7.5 | 2023-03-14 | PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications… |
CVE-2021-45423 | Critical | 9.8 | 2023-03-13 | A Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe_exports function from exports.c.. The array offsets_to_Names is dynamically allocated on the stack… |
CVE-2023-26076 | High | 7.6 | 2023-03-13 | An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Aut… |
CVE-2023-27065 | High | 7.5 | 2023-03-13 | Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelWewifiPi function… |
CVE-2023-27064 | High | 7.5 | 2023-03-13 | Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function… |
CVE-2023-27063 | Critical | 9.8 | 2023-03-13 | Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the formModifyDnsForward… |
CVE-2023-27062 | High | 7.5 | 2023-03-13 | Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulnerability allows att… |
CVE-2023-27061 | Critical | 9.8 | 2023-03-13 | Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the modifyWifiFil… |
CVE-2022-40540 | High | 8.4 | 2023-03-10 | Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel. |
CVE-2022-33278 | High | 7.8 | 2023-03-10 | Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity. |
CVE-2022-33213 | High | 7.5 | 2023-03-10 | Memory corruption in modem due to buffer overflow while processing a PPP packet |
CVE-2022-25655 | High | 8.4 | 2023-03-10 | Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload. |
CVE-2023-27853 | Critical | 9.8 | 2023-03-10 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary c… |
CVE-2023-27852 | Critical | 9.8 | 2023-03-10 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute a… |
CVE-2023-26075 | High | 7.6 | 2023-03-10 | An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 51… |
CVE-2023-26110 | High | 7.3 | 2023-03-09 | All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation… |
CVE-2023-26109 | High | 7.3 | 2023-03-09 | All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length… |
CVE-2023-20624 | Medium | 6.7 | 2023-03-07 | In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-1161 | Medium | 6.3 | 2023-03-06 | ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file |
CVE-2023-1190 | Medium | 4.8 | 2023-03-06 | A vulnerability was found in xiaozhuai imageinfo up to 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the fil… |
CVE-2022-47664 | High | 7.8 | 2023-03-03 | Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse |
CVE-2023-22757 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22756 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22755 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22754 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-22753 | High | 8.1 | 2023-03-01 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending… |
CVE-2023-20032 | Critical | 9.8 | 2023-03-01 | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV ver… |
CVE-2023-23513 | Critical | 9.8 | 2023-02-27 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. Mo… |
CVE-2022-48260 | High | 7.5 | 2023-02-27 | There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions. |
CVE-2023-0996 | High | 7.8 | 2023-02-24 | There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image… |
CVE-2023-24809 | Medium | 5.5 | 2023-02-17 | NetHack is a single player dungeon exploration game. Starting with version 3.6.2 and prior to version 3.6.7, illegal input to the "C" (call) command can cause… |
CVE-2021-33983 | High | 7.8 | 2023-02-17 | Buffer Overflow vulnerability in Dvidelabs flatcc v.0.6.0 allows local attacker to execute arbitrary code via the fltacc execution of the error_ref_sym functio… |
CVE-2021-33226 | Critical | 9.8 | 2023-02-17 | Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py fil… |
CVE-2023-24482 | Critical | 10.0 | 2023-02-14 | A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33)… |
CVE-2022-42444 | Medium | 4.9 | 2023-02-12 | IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow… |
CVE-2022-40514 | Critical | 9.8 | 2023-02-12 | Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. |
CVE-2022-33277 | High | 8.4 | 2023-02-12 | Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command. |
CVE-2022-33232 | Critical | 9.3 | 2023-02-12 | Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory. |
CVE-2023-0687 | Medium | 4.6 | 2023-02-06 | A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of t… |
CVE-2021-37311 | High | 7.5 | 2023-02-03 | Buffer Overflow vulnerability in fcitx5 5.0.8 allows attackers to cause a denial of service via crafted message to the application's listening port. |
CVE-2023-22422 | High | 7.5 | 2023-02-01 | On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance a… |
CVE-2023-0617 | High | 7.5 | 2023-02-01 | A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. It has been classified as critical. This affects an unknown part of the file /wireless/guestnetwork… |
CVE-2023-0612 | High | 7.5 | 2023-02-01 | A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Affected is an unknown function of the file /wireless/basic.asp o… |
CVE-2022-24324 | Critical | 9.8 | 2023-02-01 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code ex… |
CVE-2022-47035 | Critical | 9.8 | 2023-01-31 | Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /C… |
CVE-2022-32529 | Critical | 9.8 | 2023-01-30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code e… |
CVE-2022-32527 | Critical | 9.8 | 2023-01-30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code e… |
CVE-2022-32526 | Critical | 9.8 | 2023-01-30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code e… |
CVE-2022-32525 | Critical | 9.8 | 2023-01-30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code e… |
CVE-2022-32524 | Critical | 9.8 | 2023-01-30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code e… |
CVE-2022-32523 | Critical | 9.8 | 2023-01-30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code e… |
CVE-2022-32522 | Critical | 9.8 | 2023-01-30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code e… |
CVE-2022-40137 | Medium | 6.7 | 2023-01-30 | A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code. |
CVE-2022-41030 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41029 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41028 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41027 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41026 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41025 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41024 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41023 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41022 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41021 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41020 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41019 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41018 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41017 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41016 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41015 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41014 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41013 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41012 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41011 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41010 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41009 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41008 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41007 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41006 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41005 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41004 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |