CWE-121 · Stack-based Buffer Overflow (page 32)
Page 32 of 39 — CVEs classified under CWE-121, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-28703 | High | 7.2 | 2023-06-02 | ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A remote… |
CVE-2023-2923 | Medium | 6.3 | 2023-05-27 | A vulnerability classified as critical was found in Tenda AC6 US_AC6V1.0BR_V15.03.05.19. Affected by this vulnerability is the function fromDhcpListClient. The… |
CVE-2023-2837 | Medium | 5.5 | 2023-05-22 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-2676 | Medium | 5.5 | 2023-05-12 | A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goFor… |
CVE-2023-29284 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2023-0856 | Critical | 9.8 | 2023-05-11 | Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network… |
CVE-2023-0855 | Critical | 9.8 | 2023-05-11 | Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the net… |
CVE-2023-0853 | Critical | 9.8 | 2023-05-11 | Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on th… |
CVE-2023-0852 | Critical | 9.8 | 2023-05-11 | Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker… |
CVE-2023-23580 | Medium | 4.8 | 2023-05-10 | Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user… |
CVE-2023-23569 | High | 7.8 | 2023-05-10 | Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user… |
CVE-2023-2575 | High | 8.8 | 2023-05-08 | Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticate… |
CVE-2023-29583 | Medium | 5.5 | 2023-04-24 | yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parti… |
CVE-2023-27355 | High | 8.8 | 2023-04-20 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not… |
CVE-2023-27910 | High | 7.8 | 2023-04-17 | A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may le… |
CVE-2023-27914 | High | 7.8 | 2023-04-14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A… |
CVE-2023-26412 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executi… |
CVE-2023-26390 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-26383 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2022-43630 | High | 8.8 | 2023-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not… |
CVE-2022-43625 | Medium | 6.8 | 2023-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authenticati… |
CVE-2022-43622 | High | 8.8 | 2023-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not… |
CVE-2022-43613 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction i… |
CVE-2022-2825 | Critical | 9.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not require… |
CVE-2022-28315 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is… |
CVE-2022-28306 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction i… |
CVE-2022-28305 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction i… |
CVE-2022-28304 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction i… |
CVE-2022-27648 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interaction is required to… |
CVE-2022-27646 | High | 8.8 | 2023-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although… |
CVE-2023-26337 | High | 7.8 | 2023-03-28 | Adobe Dimension versions 3.4.7 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co… |
CVE-2022-24973 | High | 8.0 | 2023-03-28 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5… |
CVE-2022-24674 | High | 8.8 | 2023-03-28 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentic… |
CVE-2022-24673 | Critical | 9.8 | 2023-03-28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is n… |
CVE-2022-23125 | Critical | 9.8 | 2023-03-28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vuln… |
CVE-2022-23122 | Critical | 9.8 | 2023-03-28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vuln… |
CVE-2022-0650 | High | 8.0 | 2023-03-28 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5… |
CVE-2022-0194 | Critical | 9.8 | 2023-03-28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vuln… |
CVE-2023-1646 | Medium | 5.3 | 2023-03-26 | A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 i… |
CVE-2023-27590 | High | 7.8 | 2023-03-14 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into a Rizin r… |
CVE-2023-27406 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer wh… |
CVE-2023-27404 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer wh… |
CVE-2023-27498 | High | 7.2 | 2023-03-14 | SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a… |
CVE-2022-33260 | Medium | 5.9 | 2023-03-10 | Memory corruption due to stack based buffer overflow in core while sending command from USB of large size. |
CVE-2022-33213 | High | 7.5 | 2023-03-10 | Memory corruption in modem due to buffer overflow while processing a PPP packet |
CVE-2023-0330 | Medium | 5.3 | 2023-03-06 | A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overfl… |
CVE-2023-20079 | Critical | 9.8 | 2023-03-03 | Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary… |
CVE-2023-20078 | Critical | 9.8 | 2023-03-03 | Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary… |
CVE-2023-0656 | High | 7.5 | 2023-03-02 | A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impa… |
CVE-2023-22243 | High | 7.8 | 2023-02-17 | Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2023-22234 | High | 7.8 | 2023-02-17 | Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the c… |
CVE-2023-22226 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2023-25602 | High | 7.8 | 2023-02-16 | A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb versions 6.2.6 and earlier, FortiWeb versio… |
CVE-2023-23781 | Medium | 6.4 | 2023-02-16 | A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below SAML server configuration… |
CVE-2023-23780 | High | 8.0 | 2023-02-16 | A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet FortiWeb 6.4 all versi… |
CVE-2022-33871 | Medium | 6.6 | 2023-02-16 | A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privilege… |
CVE-2022-30306 | Medium | 6.6 | 2023-02-16 | A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and be… |
CVE-2021-42756 | Critical | 9.8 | 2023-02-16 | Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and be… |
CVE-2023-24566 | Low | 3.3 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223… |
CVE-2023-24549 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2022-47936 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252)… |
CVE-2022-44448 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-42444 | Medium | 4.9 | 2023-02-12 | IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow… |
CVE-2022-33279 | Critical | 9.8 | 2023-02-12 | Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length. |
CVE-2023-24348 | Critical | 9.8 | 2023-02-10 | D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetACLFilter. |
CVE-2023-24347 | High | 8.8 | 2023-02-10 | D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcpplus. |
CVE-2023-24346 | High | 8.8 | 2023-02-10 | D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan_connected parameter at /goform/formEasySetupWizard3. |
CVE-2023-24345 | High | 8.8 | 2023-02-10 | D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetWanDhcpplus. |
CVE-2023-24344 | High | 8.8 | 2023-02-10 | D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWlanGuestSetup. |
CVE-2023-24343 | High | 8.8 | 2023-02-10 | D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSchedule. |
CVE-2023-0770 | High | 7.8 | 2023-02-09 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2. |
CVE-2023-0250 | High | 7.8 | 2023-02-08 | Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbi… |
CVE-2022-43764 | Critical | 9.8 | 2023-02-08 | Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This… |
CVE-2023-0123 | High | 7.8 | 2023-02-03 | Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbi… |
CVE-2022-4634 | High | 7.8 | 2023-02-03 | All versions prior to Delta Electronic’s CNCSoft version 1.01.34 (running ScreenEditor versions 1.01.5 and prior) are vulnerable to a stack-based buffer overfl… |
CVE-2023-22842 | High | 7.5 | 2023-02-01 | On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Me… |
CVE-2022-34403 | High | 7.5 | 2023-02-01 | Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to… |
CVE-2023-0341 | High | 7.8 | 2023-02-01 | A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and po… |
CVE-2022-34884 | High | 7.2 | 2023-01-30 | A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of ser… |
CVE-2022-41140 | High | 8.8 | 2023-01-26 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authentication is not requ… |
CVE-2022-40718 | High | 8.8 | 2023-01-26 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exp… |
CVE-2022-40717 | High | 8.8 | 2023-01-26 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exp… |
CVE-2023-24096 | High | 8.8 | 2023-01-23 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the newpass parameter at /formPass… |
CVE-2022-47065 | High | 8.8 | 2023-01-23 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formN… |
CVE-2022-3085 | High | 7.8 | 2023-01-19 | Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based buffer overflow which may allow an attacker to execute arbit… |
CVE-2023-21610 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Stack-based Buffer Overfl… |
CVE-2023-21604 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Stack-based Buffer Overfl… |
CVE-2022-34401 | High | 7.5 | 2023-01-18 | Dell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SM… |
CVE-2022-3159 | High | 7.8 | 2023-01-13 | The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an att… |
CVE-2017-16336 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16335 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16334 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16333 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16332 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16331 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16330 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16329 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16328 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16327 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16326 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |