CWE-787 · Out-of-bounds Write (page 45)
Page 45 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-48355 | Medium | 4.4 | 2024-01-18 | In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2023-48352 | Medium | 5.5 | 2024-01-18 | In phasecheckserver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execu… |
CVE-2023-48351 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executio… |
CVE-2023-48350 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executio… |
CVE-2023-48349 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executio… |
CVE-2023-48348 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execu… |
CVE-2023-48343 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execu… |
CVE-2023-48342 | Medium | 4.4 | 2024-01-18 | In media service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2023-48340 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execu… |
CVE-2023-6340 | Medium | 5.5 | 2024-01-18 | SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has bee… |
CVE-2024-0646 | High | 7.0 | 2024-01-17 | An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls soc… |
CVE-2023-51743 | Medium | 6.5 | 2024-01-17 | This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Set Upstream Channel ID (UC… |
CVE-2023-51742 | Medium | 6.5 | 2024-01-17 | This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Add Downstream Frequency pa… |
CVE-2024-22916 | Critical | 9.8 | 2024-01-16 | In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stack overflow. |
CVE-2024-0519 | High | 8.8 | 2024-01-16 | Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-0517 | High | 8.8 | 2024-01-16 | Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2023-49351 | Critical | 9.8 | 2024-01-16 | A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows attackers to overwrite other values located… |
CVE-2023-52110 | High | 7.5 | 2024-01-16 | The sensor module has an out-of-bounds access vulnerability.Successful exploitation of this vulnerability may affect availability. |
CVE-2023-7206 | High | 7.8 | 2024-01-15 | In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which w… |
CVE-2024-0542 | High | 8.8 | 2024-01-15 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. Affected by this issue is the function formWifiMacFilterGet of the componen… |
CVE-2024-0541 | High | 8.8 | 2024-01-15 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. Affected by this vulnerability is the function formAddSysLogRule of the… |
CVE-2024-0540 | Medium | 6.3 | 2024-01-15 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. Affected is the function formOfflineSet of the component httpd. The ma… |
CVE-2024-0539 | High | 8.8 | 2024-01-15 | A vulnerability was found in Tenda W9 1.0.0.7(4456) and classified as critical. This issue affects the function formQosManage_user of the component httpd. The… |
CVE-2024-0538 | High | 8.8 | 2024-01-15 | A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical. This vulnerability affects the function formQosManage_auto of the componen… |
CVE-2024-0537 | High | 8.8 | 2024-01-15 | A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.7(4456). This affects the function setWrlBasicInfo of the component httpd. The m… |
CVE-2024-0536 | High | 8.8 | 2024-01-15 | A vulnerability, which was classified as critical, has been found in Tenda W9 1.0.0.7(4456). Affected by this issue is the function setWrlAccessList of the com… |
CVE-2024-0534 | High | 7.2 | 2024-01-15 | A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the file /goform/SetOnlineDevName of the com… |
CVE-2024-0533 | High | 7.2 | 2024-01-15 | A vulnerability was found in Tenda A15 15.13.07.13. It has been rated as critical. This issue affects some unknown processing of the file /goform/SetOnlineDevN… |
CVE-2024-0532 | High | 7.2 | 2024-01-15 | A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects the function set_repeat5 of the file /goform/W… |
CVE-2024-0531 | High | 7.2 | 2024-01-15 | A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/setBlackRule of the co… |
CVE-2023-31031 | Medium | 4.2 | 2024-01-12 | NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful e… |
CVE-2023-31030 | Critical | 9.3 | 2024-01-12 | NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafte… |
CVE-2023-31029 | Critical | 9.3 | 2024-01-12 | NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack over… |
CVE-2023-31024 | Critical | 9.0 | 2024-01-12 | NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially… |
CVE-2024-21596 | Medium | 5.3 | 2024-01-12 | A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, n… |
CVE-2024-21594 | Medium | 5.5 | 2024-01-12 | A Heap-based Buffer Overflow vulnerability in the Network Services Daemon (NSD) of Juniper Networks Junos OS allows authenticated, low privileged, local attac… |
CVE-2024-21591 | Critical | 9.8 | 2024-01-12 | An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to ca… |
CVE-2023-50671 | High | 7.8 | 2024-01-11 | In exiftags 1.01, nikon_prop1 in nikon.c has a heap-based buffer overflow (write of size 28) because snprintf can write to an unexpected address. |
CVE-2024-0429 | High | 7.3 | 2024-01-11 | A denial service vulnerability has been found on Hex Workshop affecting version 6.7, an attacker could send a command line file arguments and control the Stru… |
CVE-2023-37644 | Medium | 5.5 | 2024-01-11 | SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_rea… |
CVE-2023-42871 | High | 7.8 | 2024-01-10 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to execute arbitrary co… |
CVE-2023-42869 | High | 7.5 | 2024-01-10 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, iOS 16.5 and iPadOS 16.5. Multiple… |
CVE-2023-38610 | High | 7.1 | 2024-01-10 | A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to ca… |
CVE-2023-32366 | High | 7.8 | 2024-01-10 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS… |
CVE-2022-46721 | High | 7.8 | 2024-01-10 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privil… |
CVE-2023-31488 | Critical | 9.8 | 2024-01-10 | Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appliance Software, Cisco Secure Email Gatew… |
CVE-2023-51970 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv. |
CVE-2023-51969 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo. |
CVE-2023-51968 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo. |
CVE-2023-51967 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo. |
CVE-2023-51962 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo. |
CVE-2023-51965 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo. |
CVE-2023-51964 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo. |
CVE-2023-51963 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo. |
CVE-2023-51960 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv. |
CVE-2023-51959 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv. |
CVE-2023-51958 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv. |
CVE-2023-51957 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv. |
CVE-2023-51956 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv |
CVE-2023-51955 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv. |
CVE-2023-51954 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv. |
CVE-2023-51953 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv. |
CVE-2023-51952 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv. |
CVE-2023-51966 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo. |
CVE-2023-51961 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv. |
CVE-2023-51971 | Critical | 9.8 | 2024-01-10 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo. |
CVE-2023-48266 | High | 8.1 | 2024-01-10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a… |
CVE-2023-48265 | High | 8.1 | 2024-01-10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a… |
CVE-2023-48264 | High | 8.1 | 2024-01-10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a… |
CVE-2023-48263 | High | 8.1 | 2024-01-10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a… |
CVE-2023-48262 | High | 8.1 | 2024-01-10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a… |
CVE-2023-49427 | High | 7.5 | 2024-01-10 | Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via list parameter in SetNetControlList fu… |
CVE-2023-3043 | Critical | 9.6 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploita… |
CVE-2023-37297 | High | 8.3 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this… |
CVE-2023-37296 | High | 8.3 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network. A successful exploitation of th… |
CVE-2023-37295 | High | 8.3 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of t… |
CVE-2023-37294 | High | 8.3 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of… |
CVE-2023-37293 | Critical | 9.6 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of t… |
CVE-2023-6129 | Medium | 6.5 | 2024-01-09 | Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on Po… |
CVE-2023-7222 | High | 7.2 | 2024-01-09 | A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of th… |
CVE-2023-49129 | High | 7.8 | 2024-01-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain a stack overflow vulnerability wh… |
CVE-2023-49128 | High | 7.8 | 2024-01-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application contains an out of bounds write past the e… |
CVE-2023-49123 | High | 7.8 | 2024-01-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflo… |
CVE-2023-49122 | High | 7.8 | 2024-01-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflo… |
CVE-2023-49121 | High | 7.8 | 2024-01-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflo… |
CVE-2023-50585 | Critical | 9.8 | 2024-01-09 | Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function. |
CVE-2023-49236 | Critical | 9.8 | 2024-01-09 | A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack… |
CVE-2021-3600 | High | 7.8 | 2024-01-08 | It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod o… |
CVE-2023-38657 | High | 7.8 | 2024-01-08 | An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to a… |
CVE-2023-38649 | High | 7.8 | 2024-01-08 | Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file… |
CVE-2023-38648 | High | 7.8 | 2024-01-08 | Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file… |
CVE-2023-38583 | High | 7.8 | 2024-01-08 | A stack-based buffer overflow vulnerability exists in the LXT2 lxt2_rd_expand_integer_to_bits function of GTKWave 3.3.115. A specially crafted .lxt2 file can l… |
CVE-2023-37420 | High | 7.8 | 2024-01-08 | Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can le… |
CVE-2023-37419 | High | 7.8 | 2024-01-08 | Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can le… |
CVE-2023-37418 | High | 7.8 | 2024-01-08 | Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can le… |
CVE-2023-37417 | High | 7.8 | 2024-01-08 | Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can le… |
CVE-2023-37416 | High | 7.8 | 2024-01-08 | Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can le… |
CVE-2023-37282 | High | 7.8 | 2024-01-08 | An out-of-bounds write vulnerability exists in the VZT LZMA_Read dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to ar… |
CVE-2023-36861 | High | 7.8 | 2024-01-08 | An out-of-bounds write vulnerability exists in the VZT LZMA_read_varint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary c… |
CVE-2023-36747 | High | 7.0 | 2024-01-08 | Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst… |