CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 36)
Page 36 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-1493 | High | 8.5 | 2021-04-29 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2020-18032 | High | 7.8 | 2021-04-29 | Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial o… |
CVE-2021-0268 | High | 8.8 | 2021-04-22 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') weakness in J-web of Juniper Networks Junos OS leads to buffer overflo… |
CVE-2021-0249 | High | 8.1 | 2021-04-22 | On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS may allow… |
CVE-2021-31255 | High | 7.8 | 2021-04-19 | Buffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted fil… |
CVE-2021-28549 | High | 7.8 | 2021-04-15 | Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file… |
CVE-2021-28548 | High | 7.8 | 2021-04-15 | Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file… |
CVE-2020-28592 | Critical | 9.8 | 2021-04-15 | A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially… |
CVE-2021-27707 | Critical | 9.8 | 2021-04-14 | Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappi… |
CVE-2021-27706 | Critical | 9.8 | 2021-04-14 | Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"I… |
CVE-2021-27705 | Critical | 9.8 | 2021-04-14 | Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex… |
CVE-2021-26827 | High | 7.5 | 2021-04-14 | Buffer Overflow in TP-Link WR2041 v1 firmware for the TL-WR2041+ router allows remote attackers to cause a Denial-of-Service (DoS) by sending an HTTP request w… |
CVE-2021-26805 | Medium | 5.5 | 2021-04-14 | Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a malicious WAV file. |
CVE-2020-36120 | High | 7.5 | 2021-04-14 | Buffer Overflow in the "sixel_encoder_encode_bytes" function of Libsixel v1.8.6 allows attackers to cause a Denial of Service (DoS). |
CVE-2021-29302 | High | 8.1 | 2021-04-12 | TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attack vector i… |
CVE-2021-30481 | High | 8.0 | 2021-04-10 | Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow… |
CVE-2021-25328 | High | 8.8 | 2021-04-09 | Skyworth Digital Technology RN510 V.3.1.0.4 RN510 V.3.1.0.4 contains a buffer overflow vulnerability in /cgi-bin/app-staticIP.asp. An authenticated attacker ca… |
CVE-2021-1405 | High | 7.5 | 2021-04-08 | A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote a… |
CVE-2020-36316 | Medium | 5.5 | 2021-04-07 | In RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification because garbage bytes can be present. |
CVE-2021-30123 | High | 8.8 | 2021-04-07 | FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution. |
CVE-2021-30184 | High | 7.8 | 2021-04-07 | GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is related to a buffer overflow in the use of a… |
CVE-2021-30045 | Critical | 9.1 | 2021-04-06 | SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read() function. |
CVE-2021-28874 | High | 7.8 | 2021-04-06 | SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode through opening a crafted file. |
CVE-2021-27698 | Critical | 9.8 | 2021-04-06 | RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c through the _parse_options() function. |
CVE-2021-27697 | Critical | 9.8 | 2021-04-06 | RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c through the gnrc_rpl_validation_options() function. |
CVE-2021-27357 | Critical | 9.8 | 2021-04-06 | RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c. |
CVE-2021-27343 | High | 7.5 | 2021-04-06 | SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information (context-dependent). The component is: /Userland/Libraries/… |
CVE-2021-28202 | Medium | 4.9 | 2021-04-06 | The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overf… |
CVE-2021-28201 | Medium | 4.9 | 2021-04-06 | The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overf… |
CVE-2021-28200 | Medium | 4.9 | 2021-04-06 | The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overfl… |
CVE-2021-28199 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resul… |
CVE-2021-28198 | Medium | 4.9 | 2021-04-06 | The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buff… |
CVE-2021-28197 | Medium | 4.9 | 2021-04-06 | The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffe… |
CVE-2021-28196 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, result… |
CVE-2021-28195 | Medium | 4.9 | 2021-04-06 | The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow… |
CVE-2021-28194 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resul… |
CVE-2021-28193 | Medium | 4.9 | 2021-04-06 | The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28192 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting… |
CVE-2021-28191 | Medium | 4.9 | 2021-04-06 | The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vuln… |
CVE-2021-28190 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, result… |
CVE-2021-28189 | Medium | 4.9 | 2021-04-06 | The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28188 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resul… |
CVE-2021-28187 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Generate new SSL certificate) does not verify the string length entered by users, resulting i… |
CVE-2021-28186 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resu… |
CVE-2021-28185 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-1 acquisition) does not verify the string length entered by users, resu… |
CVE-2021-28184 | Medium | 4.9 | 2021-04-06 | The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffe… |
CVE-2021-28183 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Web License configuration setting) does not verify the string length entered by users, result… |
CVE-2021-28182 | Medium | 4.9 | 2021-04-06 | The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer ove… |
CVE-2021-28181 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Remote video configuration setting) does not verify the string length entered by users, resul… |
CVE-2021-28180 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the string length entered by users, resultin… |
CVE-2021-28179 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resu… |
CVE-2021-28178 | Medium | 4.9 | 2021-04-06 | The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28177 | Medium | 4.9 | 2021-04-06 | The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28176 | Medium | 4.9 | 2021-04-06 | The DNS configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vu… |
CVE-2021-28175 | Medium | 4.9 | 2021-04-06 | The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow… |
CVE-2020-19596 | Critical | 9.8 | 2021-04-05 | Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username. |
CVE-2020-19595 | High | 7.5 | 2021-04-05 | Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username. |
CVE-2020-21588 | Medium | 5.5 | 2021-04-02 | Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in the Setup->Users->Username editbox. |
CVE-2021-1763 | High | 7.8 | 2021-04-02 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 20… |
CVE-2020-9962 | High | 7.8 | 2021-04-02 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020… |
CVE-2021-20235 | High | 8.1 | 2021-04-01 | There's a flaw in the zeromq server in versions before 4.3.3 in src/decoder_allocators.hpp. The decoder static allocator could have its sized changed, but the… |
CVE-2021-22992 | Critical | 9.8 | 2021-03-31 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6… |
CVE-2020-24995 | High | 7.8 | 2021-03-30 | Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local). |
CVE-2019-5319 | Critical | 9.8 | 2021-03-30 | A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 an… |
CVE-2021-25149 | Critical | 9.8 | 2021-03-30 | A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 an… |
CVE-2021-28672 | Critical | 9.8 | 2021-03-29 | Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Br… |
CVE-2021-25144 | High | 8.8 | 2021-03-29 | A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 an… |
CVE-2020-25583 | Critical | 9.8 | 2021-03-29 | In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 when processing a… |
CVE-2020-25577 | Critical | 9.8 | 2021-03-29 | In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 rtsold(8) does no… |
CVE-2021-29094 | Medium | 6.8 | 2021-03-25 | Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with… |
CVE-2021-3466 | Critical | 9.8 | 2021-03-25 | A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to wri… |
CVE-2021-22659 | High | 8.6 | 2021-03-25 | Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the a… |
CVE-2021-1439 | High | 7.4 | 2021-03-24 | A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to… |
CVE-2021-29068 | Critical | 9.9 | 2021-03-23 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98, R6400v2 before 1.0.4.98, R7000 before… |
CVE-2021-28972 | Medium | 6.7 | 2021-03-22 | In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new… |
CVE-2021-28952 | High | 7.8 | 2021-03-20 | An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port I… |
CVE-2020-11299 | Critical | 9.8 | 2021-03-17 | Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2021-27208 | Medium | 6.8 | 2021-03-15 | When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’… |
CVE-2020-5025 | High | 7.8 | 2021-03-11 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper… |
CVE-2020-35227 | High | 7.2 | 2021-03-10 | A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web panel) allows an attack… |
CVE-2020-35225 | Medium | 6.8 | 2021-03-10 | The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length of string parameters sent in write reque… |
CVE-2020-35224 | Medium | 6.5 | 2021-03-10 | A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attacke… |
CVE-2021-27965 | Critical | 9.8 | 2021-03-05 | The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040… |
CVE-2021-25306 | High | 7.5 | 2021-03-02 | A buffer overflow vulnerability in the AT command interface of Gigaset DX600A v41.00-175 devices allows remote attackers to force a device reboot by sending re… |
CVE-2020-7120 | Medium | 5.3 | 2021-02-23 | A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulne… |
CVE-2020-11223 | High | 7.8 | 2021-02-22 | Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2020-11170 | Critical | 9.8 | 2021-02-22 | Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon… |
CVE-2020-12374 | Medium | 6.7 | 2021-02-19 | Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow a privileged user to pote… |
CVE-2020-35776 | Medium | 6.5 | 2021-02-18 | A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remote attacker to crash Asterisk by delibe… |
CVE-2020-8625 | High | 8.1 | 2021-02-17 | BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default s… |
CVE-2020-24501 | Medium | 6.5 | 2021-02-17 | Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthenticated user to potentially enable denial o… |
CVE-2020-24500 | Medium | 4.4 | 2021-02-17 | Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable a denial of se… |
CVE-2020-24498 | Medium | 4.4 | 2021-02-17 | Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of serv… |
CVE-2021-22982 | High | 7.2 | 2021-02-12 | On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resultin… |
CVE-2021-20640 | Medium | 6.8 | 2021-02-12 | Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vec… |
CVE-2021-21051 | High | 7.8 | 2021-02-11 | Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted javascr… |
CVE-2020-36152 | High | 8.8 | 2021-02-08 | Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA. |
CVE-2021-26577 | High | 7.8 | 2021-02-08 | The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey func… |
CVE-2021-26573 | High | 7.8 | 2021-02-08 | The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg… |
CVE-2021-26572 | High | 7.8 | 2021-02-08 | The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg… |