CWE-120 · Buffer Copy without Checking Size of Input (Classic Buffer Overflow) (page 41)
Page 41 of 44 — CVEs classified under CWE-120, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-4207 | Critical | 9.8 | 2020-01-28 | IBM Watson IoT Message Gateway 2.0.0.x, 5.0.0.0, 5.0.0.1, and 5.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking when handling a fa… |
CVE-2015-8011 | Critical | 9.8 | 2020-01-28 | Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash… |
CVE-2020-5214 | Medium | 5.0 | 2020-01-28 | In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege esc… |
CVE-2020-5213 | Medium | 5.0 | 2020-01-28 | In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution… |
CVE-2020-5212 | Medium | 5.0 | 2020-01-28 | In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code ex… |
CVE-2020-5210 | Medium | 5.0 | 2020-01-28 | In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege… |
CVE-2020-5209 | Medium | 5.0 | 2020-01-28 | In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalatio… |
CVE-2015-0243 | High | 8.8 | 2020-01-27 | Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1… |
CVE-2015-0241 | High | 8.8 | 2020-01-27 | The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authentica… |
CVE-2019-20427 | Critical | 9.8 | 2020-01-27 | In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation f… |
CVE-2019-20423 | High | 7.5 | 2020-01-27 | In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by… |
CVE-2014-9629 | High | 7.8 | 2020-01-24 | Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attacker… |
CVE-2014-9628 | High | 7.8 | 2020-01-24 | The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-s… |
CVE-2014-9625 | High | 7.8 | 2020-01-24 | The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer… |
CVE-2013-1595 | Critical | 9.8 | 2020-01-24 | A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the… |
CVE-2015-5745 | Medium | 6.5 | 2020-01-23 | Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU proc… |
CVE-2013-1592 | Critical | 9.8 | 2020-01-23 | A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets… |
CVE-2019-14014 | Critical | 9.8 | 2020-01-21 | Possible buffer overflow when byte array receives incorrect input from reading source as array is not null terminated in Snapdragon Consumer IOT, Snapdragon In… |
CVE-2019-14013 | Critical | 9.8 | 2020-01-21 | While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Au… |
CVE-2019-14005 | Critical | 9.8 | 2020-01-21 | Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2019-10606 | High | 7.8 | 2020-01-21 | Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdragon Auto, Snapdragon Consumer Electronics… |
CVE-2015-7874 | Critical | 9.8 | 2020-01-15 | Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname. |
CVE-2019-19494 | High | 8.8 | 2020-01-09 | Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel… |
CVE-2019-11759 | High | 8.8 | 2020-01-08 | An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an attacker to execute a… |
CVE-2019-17147 | High | 8.8 | 2020-01-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to… |
CVE-2020-5204 | Medium | 6.5 | 2020-01-06 | In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sp… |
CVE-2019-5064 | High | 8.8 | 2020-01-03 | An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted J… |
CVE-2019-5063 | High | 8.8 | 2020-01-03 | An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can caus… |
CVE-2019-5304 | High | 7.5 | 2020-01-03 | Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target produc… |
CVE-2020-5312 | Critical | 9.8 | 2020-01-03 | libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. |
CVE-2020-5311 | Critical | 9.8 | 2020-01-03 | libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow. |
CVE-2013-4357 | High | 7.5 | 2019-12-31 | The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service. |
CVE-2013-4743 | Critical | 9.8 | 2019-12-27 | Static HTTP Server 1.0 has a Local Overflow |
CVE-2019-5273 | High | 7.5 | 2019-12-26 | USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products whi… |
CVE-2019-5276 | High | 8.8 | 2019-12-23 | Huawei smart phones with earlier versions than ELLE-AL00B 9.1.0.222(C00E220R2P1) have a buffer overflow vulnerability. An attacker may intercept and tamper wit… |
CVE-2019-19917 | High | 7.8 | 2019-12-20 | Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c. |
CVE-2019-19907 | Critical | 9.8 | 2019-12-19 | HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy… |
CVE-2019-19905 | Critical | 9.8 | 2019-12-19 | NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have Ne… |
CVE-2019-7485 | High | 8.8 | 2019-12-19 | Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 versio… |
CVE-2019-8542 | High | 7.8 | 2019-12-18 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2, iTunes 12.9.4 for… |
CVE-2019-8527 | Critical | 9.1 | 2019-12-18 | A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A remote attacker… |
CVE-2019-8511 | High | 7.8 | 2019-12-18 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A malicious applicatio… |
CVE-2019-8508 | High | 7.8 | 2019-12-18 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. Mounting a maliciously crafted NFS network share ma… |
CVE-2019-10607 | High | 7.8 | 2019-12-18 | Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdragon Auto, Snapdragon… |
CVE-2019-10605 | High | 7.8 | 2019-12-18 | Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdragon Auto, Snapdragon… |
CVE-2019-10598 | High | 7.8 | 2019-12-18 | Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop further will not cau… |
CVE-2018-11980 | High | 7.8 | 2019-12-18 | When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both cds_is_mmie… |
CVE-2019-5258 | Medium | 5.5 | 2019-12-13 | Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG630… |
CVE-2019-5257 | Medium | 5.5 | 2019-12-13 | Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a resource management v… |
CVE-2019-19782 | Critical | 9.8 | 2019-12-13 | The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server. |
CVE-2019-2321 | High | 7.8 | 2019-12-12 | Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2019-2288 | High | 7.8 | 2019-12-12 | Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2019-10571 | High | 7.8 | 2019-12-12 | Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-10555 | High | 7.8 | 2019-12-12 | Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2019-10493 | Critical | 9.8 | 2019-12-12 | Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2019-18960 | Critical | 9.8 | 2019-12-11 | Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes. |
CVE-2019-6192 | Medium | 4.4 | 2019-12-10 | A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a den… |
CVE-2019-11935 | Critical | 9.8 | 2019-12-04 | Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bounds memory. This issue affects HHVM versions prior to 3.30… |
CVE-2019-9689 | High | 7.5 | 2019-12-03 | process_certificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake message with zero cert… |
CVE-2019-19383 | High | 8.8 | 2019-12-03 | freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if logging is disabled). |
CVE-2019-10013 | High | 7.5 | 2019-12-03 | The asn1_signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of serv… |
CVE-2019-7366 | High | 7.8 | 2019-12-03 | Buffer overflow vulnerability in Autodesk FBX Software Development Kit version 2019.5. A user may be tricked into opening a malicious FBX file which may exploi… |
CVE-2019-12518 | Critical | 9.8 | 2019-12-02 | Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability. |
CVE-2019-19489 | Medium | 5.5 | 2019-12-02 | SMPlayer 19.5.0 has a buffer overflow via a long .m3u file. |
CVE-2019-5247 | Medium | 5.5 | 2019-11-29 | Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerability. A local, authenticated attacker may craft specific parameter and send to the process to explo… |
CVE-2019-5225 | High | 7.8 | 2019-11-29 | P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200… |
CVE-2019-13566 | Critical | 9.8 | 2019-11-22 | An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. A buffer overflow allows attackers to… |
CVE-2014-6310 | Critical | 9.8 | 2019-11-22 | Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function. |
CVE-2012-3407 | High | 7.8 | 2019-11-22 | plow has local buffer overflow vulnerability |
CVE-2019-10566 | High | 7.8 | 2019-11-21 | Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdragon Auto, Snapdragon… |
CVE-2018-13916 | High | 7.8 | 2019-11-21 | Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data. in Snapdragon Auto, Snapdra… |
CVE-2019-18858 | Critical | 9.8 | 2019-11-20 | CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow. |
CVE-2013-7088 | Critical | 9.8 | 2019-11-15 | ClamAV before 0.97.7 has buffer overflow in the libclamav component |
CVE-2019-0145 | High | 7.8 | 2019-11-14 | Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escala… |
CVE-2019-0140 | High | 8.8 | 2019-11-14 | Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalati… |
CVE-2019-11178 | High | 8.1 | 2019-11-14 | Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure and/or denial… |
CVE-2011-1145 | High | 7.8 | 2019-11-14 | The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in t… |
CVE-2019-18931 | High | 8.8 | 2019-11-13 | Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters. |
CVE-2019-15948 | High | 8.8 | 2019-11-13 | Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via… |
CVE-2019-18397 | High | 7.8 | 2019-11-13 | A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial… |
CVE-2010-3844 | High | 8.8 | 2019-11-12 | An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack. |
CVE-2019-10531 | Critical | 9.8 | 2019-11-06 | Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearabl… |
CVE-2019-10522 | Critical | 9.8 | 2019-11-06 | While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2019-10496 | High | 7.8 | 2019-11-06 | Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2019-10491 | High | 7.8 | 2019-11-06 | ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2006-3100 | Critical | 9.8 | 2019-11-06 | termpkg 3.3 suffers from buffer overflow. |
CVE-2013-2075 | High | 8.8 | 2019-10-31 | Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause… |
CVE-2012-6122 | High | 7.5 | 2019-10-31 | Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash) by opening a file descriptor with a lar… |
CVE-2009-5041 | Critical | 9.8 | 2019-10-31 | overkill has buffer overflow via long player names that can corrupt data on the server machine |
CVE-2019-8287 | Critical | 9.8 | 2019-10-29 | TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear… |
CVE-2019-17181 | Critical | 9.8 | 2019-10-28 | A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET or HEAD request that can result in a com… |
CVE-2019-11043 | High | 8.7 | 2019-10-28 | In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to writ… |
CVE-2016-2356 | Critical | 9.8 | 2019-10-25 | Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password. |
CVE-2019-4523 | High | 7.8 | 2019-10-22 | IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attac… |
CVE-2019-17666 | High | 8.8 | 2019-10-17 | rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow. |
CVE-2017-14948 | Critical | 9.8 | 2019-10-14 | Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote)… |
CVE-2019-17320 | Critical | 9.8 | 2019-10-10 | NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an att… |
CVE-2019-17415 | Critical | 9.8 | 2019-10-09 | A Structured Exception Handler (SEH) based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthenticated attackers to execute arbitrary… |
CVE-2019-17402 | Medium | 6.5 | 2019-10-09 | Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int… |
CVE-2019-17247 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEG_LS+0x0000000000007da8. |