CWE-787 · Out-of-bounds Write (page 40)
Page 40 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-4248 | High | 8.8 | 2024-04-27 | A vulnerability was found in Tenda i21 1.0.0.14(4656) and classified as critical. This issue affects the function formQosManage_user. The manipulation of the a… |
CVE-2024-4247 | High | 8.8 | 2024-04-27 | A vulnerability has been found in Tenda i21 1.0.0.14(4656) and classified as critical. This vulnerability affects the function formQosManage_auto. The manipula… |
CVE-2024-4246 | High | 8.8 | 2024-04-27 | A vulnerability, which was classified as critical, was found in Tenda i21 1.0.0.14(4656). This affects the function formQosManageDouble_auto. The manipulation… |
CVE-2024-4245 | High | 8.8 | 2024-04-27 | A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.14(4656). Affected by this issue is the function formQosManageDouble_user… |
CVE-2024-4244 | High | 8.8 | 2024-04-26 | A vulnerability classified as critical was found in Tenda W9 1.0.0.7(4456). Affected by this vulnerability is the function fromDhcpSetSer of the file /goform/D… |
CVE-2024-4243 | High | 8.8 | 2024-04-26 | A vulnerability classified as critical has been found in Tenda W9 1.0.0.7(4456). Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The m… |
CVE-2024-4242 | High | 8.8 | 2024-04-26 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. This issue affects the function formwrlSSIDget of the file /goform/wifiSSID… |
CVE-2024-4241 | High | 8.8 | 2024-04-26 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. This vulnerability affects the function formQosManageDouble_auto. The ma… |
CVE-2024-4240 | High | 8.8 | 2024-04-26 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. This affects the function formQosManageDouble_user. The manipulation o… |
CVE-2024-4239 | High | 8.8 | 2024-04-26 | A vulnerability was found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this issue is the function formSetRebootTimer of the file /goform/Set… |
CVE-2024-4238 | High | 8.8 | 2024-04-26 | A vulnerability has been found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this vulnerability is the function formSetDeviceName of the file… |
CVE-2024-4237 | High | 8.8 | 2024-04-26 | A vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1. Affected is the function R7WebsSecurityHandler of the file /goform/execCo… |
CVE-2024-4236 | High | 8.8 | 2024-04-26 | A vulnerability, which was classified as critical, has been found in Tenda AX1803 1.0.0.1. This issue affects the function formSetSysToolDDNS of the file /gofo… |
CVE-2023-47252 | Medium | 6.3 | 2024-04-26 | An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a possible out-of-bounds access in the SMM communication buffer, le… |
CVE-2024-22391 | High | 7.7 | 2024-04-25 | A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted mal… |
CVE-2024-22373 | High | 8.1 | 2024-04-25 | An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially… |
CVE-2024-4170 | High | 8.8 | 2024-04-25 | A vulnerability was found in Tenda 4G300 1.01.42. It has been rated as critical. This issue affects the function sub_429A30. The manipulation of the argument l… |
CVE-2024-4169 | High | 8.8 | 2024-04-25 | A vulnerability was found in Tenda 4G300 1.01.42. It has been declared as critical. This vulnerability affects the function sub_42775C/sub_4279CC. The manipula… |
CVE-2024-4168 | High | 8.8 | 2024-04-25 | A vulnerability was found in Tenda 4G300 1.01.42. It has been classified as critical. This affects the function sub_4260F0. The manipulation of the argument up… |
CVE-2024-4167 | High | 8.8 | 2024-04-25 | A vulnerability was found in Tenda 4G300 1.01.42 and classified as critical. Affected by this issue is the function sub_422AA4. The manipulation of the argumen… |
CVE-2024-4166 | High | 8.8 | 2024-04-25 | A vulnerability has been found in Tenda 4G300 1.01.42 and classified as critical. Affected by this vulnerability is the function sub_41E858. The manipulation o… |
CVE-2024-4165 | High | 8.8 | 2024-04-25 | A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502). Affected is the function modifyDhcpRule of the file /goform/modifyDh… |
CVE-2024-4164 | High | 8.8 | 2024-04-25 | A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(9502). This issue affects the function formModifyPppAuthWhiteMac of th… |
CVE-2024-4127 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. Affected is the function guestWifiRuleRefresh. The manipulation of the… |
CVE-2024-4126 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function formSetSysTime of the file /goform/SetSysTimeCfg… |
CVE-2024-4141 | Low | 2.9 | 2024-04-24 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being… |
CVE-2024-4125 | High | 8.8 | 2024-04-24 | A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. This vulnerability affects the function formSetStaticRoute of the file /gof… |
CVE-2024-4124 | High | 8.8 | 2024-04-24 | A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. This affects the function formSetRemoteWebManage of the file /goform/Set… |
CVE-2024-4123 | High | 8.8 | 2024-04-24 | A vulnerability, which was classified as critical, has been found in Tenda W15E 15.11.0.14. Affected by this issue is the function formSetPortMapping of the fi… |
CVE-2024-4122 | High | 8.8 | 2024-04-24 | A vulnerability classified as critical was found in Tenda W15E 15.11.0.14. Affected by this vulnerability is the function formSetDebugCfg of the file /goform/s… |
CVE-2024-4121 | High | 8.8 | 2024-04-24 | A vulnerability classified as critical has been found in Tenda W15E 15.11.0.14. Affected is the function formQOSRuleDel. The manipulation of the argument qosIn… |
CVE-2024-4120 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been rated as critical. This issue affects the function formIPMacBindModify of the file /goform/modi… |
CVE-2024-4119 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been declared as critical. This vulnerability affects the function formIPMacBindDel of the file /gof… |
CVE-2024-4118 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. This affects the function formIPMacBindAdd of the file /goform/addIpMac… |
CVE-2024-4117 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this issue is the function formDelPortMapping of the file /goform/De… |
CVE-2024-4116 | High | 8.8 | 2024-04-24 | A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this vulnerability is the function formDelDhcpRule of the file… |
CVE-2024-4115 | High | 8.8 | 2024-04-24 | A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Affected is the function formAddDnsForward of the file /goform/AddDnsFor… |
CVE-2024-4114 | High | 8.8 | 2024-04-24 | A vulnerability, which was classified as critical, has been found in Tenda TX9 22.03.02.10. This issue affects the function sub_42C014 of the file /goform/Powe… |
CVE-2024-4113 | High | 8.8 | 2024-04-24 | A vulnerability classified as critical was found in Tenda TX9 22.03.02.10. This vulnerability affects the function sub_42D4DC of the file /goform/SetSysTimeCfg… |
CVE-2024-4112 | High | 8.8 | 2024-04-24 | A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10. This affects the function sub_42CB94 of the file /goform/SetVirtualServerCfg. T… |
CVE-2024-4111 | High | 8.8 | 2024-04-24 | A vulnerability was found in Tenda TX9 22.03.02.10. It has been rated as critical. Affected by this issue is the function sub_42BD7C of the file /goform/SetLED… |
CVE-2024-4066 | High | 8.8 | 2024-04-23 | A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWa… |
CVE-2024-4065 | High | 8.8 | 2024-04-23 | A vulnerability was found in Tenda AC8 16.03.34.09. It has been rated as critical. This issue affects the function formSetRebootTimer of the file /goform/SetRe… |
CVE-2024-4064 | High | 8.8 | 2024-04-23 | A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. This vulnerability affects the function R7WebsSecurityHandler of the file… |
CVE-2024-21979 | Medium | 5.3 | 2024-04-23 | An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentia… |
CVE-2024-21972 | Medium | 5.3 | 2024-04-23 | An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentia… |
CVE-2024-32039 | Critical | 9.8 | 2024-04-22 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to in… |
CVE-2024-4020 | High | 8.8 | 2024-04-20 | A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromAddressNat of the file /goform/addressN… |
CVE-2024-32038 | Critical | 9.8 | 2024-04-19 | Wazuh is a free and open source platform used for threat prevention, detection, and response. There is a buffer overflow hazard in wazuh-analysisd when handlin… |
CVE-2024-3900 | Low | 2.9 | 2024-04-17 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText. |
CVE-2024-2961 | High | 7.3 | 2024-04-17 | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the I… |
CVE-2023-5406 | Medium | 5.9 | 2024-04-17 | Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. See Honeywell Security Notifica… |
CVE-2023-5405 | Medium | 5.9 | 2024-04-17 | Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. See Honeywell Securi… |
CVE-2024-32315 | Medium | 4.7 | 2024-04-17 | Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function. |
CVE-2024-32302 | Medium | 6.3 | 2024-04-17 | Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function. |
CVE-2024-3910 | High | 8.8 | 2024-04-17 | A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.9(1307). Affected by this issue is the function fromDhcpListClient of th… |
CVE-2024-3909 | High | 8.8 | 2024-04-17 | A vulnerability classified as critical was found in Tenda AC500 2.0.1.9(1307). Affected by this vulnerability is the function formexeCommand of the file /gofor… |
CVE-2024-3907 | High | 8.8 | 2024-04-17 | A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been rated as critical. This issue affects the function formSetCfm of the file /goform/setcfm. T… |
CVE-2024-3906 | High | 8.8 | 2024-04-17 | A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /g… |
CVE-2024-3905 | High | 8.8 | 2024-04-17 | A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been classified as critical. This affects the function R7WebsSecurityHandler of the file /goform… |
CVE-2024-26853 | Critical | 9.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: igc: avoid returning frame twice in XDP_REDIRECT When a frame can not be transmitted in X… |
CVE-2024-26851 | High | 7.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: Add protection for bmp length out of range UBSAN load repor… |
CVE-2024-26843 | Medium | 6.0 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size md_size will have been… |
CVE-2024-26842 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd() When task_tag >= 32 (in MCQ mode)… |
CVE-2024-3882 | High | 8.8 | 2024-04-16 | A vulnerability was found in Tenda W30E 1.0.1.25(633). It has been classified as critical. Affected is the function fromRouteStatic of the file /goform/fromRou… |
CVE-2024-3881 | High | 8.8 | 2024-04-16 | A vulnerability was found in Tenda W30E 1.0.1.25(633) and classified as critical. This issue affects the function frmL7PlotForm of the file /goform/frmL7ProtFo… |
CVE-2024-3879 | High | 8.8 | 2024-04-16 | A vulnerability, which was classified as critical, was found in Tenda W30E 1.0.1.25(633). This affects the function formSetCfm of the file /goform/setcfm. The… |
CVE-2024-3878 | High | 8.8 | 2024-04-16 | A vulnerability, which was classified as critical, has been found in Tenda F1202 1.2.0.20(408). Affected by this issue is the function fromwebExcptypemanFilter… |
CVE-2024-3877 | High | 8.8 | 2024-04-16 | A vulnerability classified as critical was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function fromqossetting of the file /gofor… |
CVE-2024-3876 | High | 8.8 | 2024-04-16 | A vulnerability classified as critical has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromVirtualSer of the file /goform/VirtualSer. The… |
CVE-2024-3875 | High | 8.8 | 2024-04-16 | A vulnerability was found in Tenda F1202 1.2.0.20(408). It has been rated as critical. This issue affects the function fromNatlimit of the file /goform/Natlimi… |
CVE-2024-3874 | High | 8.8 | 2024-04-16 | A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file… |
CVE-2024-29218 | High | 8.8 | 2024-04-15 | Out-of-bounds write vulnerability exists in KV STUDIO Ver.11.64 and earlier, KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, whi… |
CVE-2024-30394 | High | 7.5 | 2024-04-12 | A Stack-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) component of Junos OS and Junos OS Evolved allows an unauthenticated, network-… |
CVE-2024-30273 | High | 7.8 | 2024-04-11 | Illustrator versions 28.3, 27.9.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-30272 | High | 7.8 | 2024-04-11 | Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2024-30271 | High | 7.8 | 2024-04-11 | Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2024-3516 | Medium | 6.5 | 2024-04-10 | Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-3157 | Critical | 9.6 | 2024-04-10 | Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentiall… |
CVE-2021-47203 | High | 8.8 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() When parsing the txq list in lp… |
CVE-2024-20772 | High | 7.8 | 2024-04-10 | Media Encoder versions 24.2.1, 23.6.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in… |
CVE-2024-26815 | High | 7.8 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check taprio_parse_tc_entry() is not… |
CVE-2024-22448 | Medium | 4.7 | 2024-04-10 | Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerabilit… |
CVE-2024-3120 | Critical | 9.0 | 2024-04-10 | A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length… |
CVE-2024-3119 | Critical | 9.0 | 2024-04-10 | A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions… |
CVE-2024-29061 | High | 7.8 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26256 | High | 7.8 | 2024-04-09 | Libarchive Remote Code Execution Vulnerability |
CVE-2023-49913 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49912 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49911 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49910 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49909 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49908 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49907 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-49906 | High | 7.2 | 2024-04-09 | A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point… |
CVE-2023-48724 | High | 7.5 | 2024-04-09 | A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20… |
CVE-2024-26811 | Critical | 9.8 | 2024-04-08 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.m… |
CVE-2023-52386 | High | 7.5 | 2024-04-08 | Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52385 | Medium | 6.2 | 2024-04-08 | Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52364 | Medium | 6.3 | 2024-04-08 | Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may cause out-of-bounds… |