CWE-787 · Out-of-bounds Write (page 50)
Page 50 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-46539 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function registerRequestHandle. |
CVE-2023-46538 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function chkResetVeriRegister. |
CVE-2023-46537 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getRegVeriRegister. |
CVE-2023-46536 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function chkRegVeriRegister. |
CVE-2023-46535 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getResetVeriRegister. |
CVE-2023-46534 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function modifyAccPwdRegister. |
CVE-2023-46527 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin and TL-WDR7660 2.0.30 was discovered to contain a stack overflow via the function bindRequestHandle. |
CVE-2023-46526 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function resetCloudPwdRegister. |
CVE-2023-46525 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function loginRegister. |
CVE-2023-46523 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function upgradeInfoRegister. |
CVE-2023-46522 | Critical | 9.8 | 2023-10-25 | TP-LINK device TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin and TL-WDR7660 2.0.30 were discovered to contain a stack overflow via the function deviceInfoR… |
CVE-2023-46521 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function RegisterRegister. |
CVE-2023-46520 | Critical | 9.8 | 2023-10-25 | TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function uninstallPluginReqHandle. |
CVE-2023-46518 | Critical | 9.8 | 2023-10-25 | Mercury A15 V1.0 20230818_1.0.3 was discovered to contain a command execution vulnerability via the component cloudDeviceTokenSuccCB. |
CVE-2023-46373 | Critical | 9.8 | 2023-10-25 | TP-Link TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function deviceInfoJsonToBincauses. |
CVE-2023-46371 | Critical | 9.8 | 2023-10-25 | TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJsonToBin. |
CVE-2023-46369 | Critical | 9.8 | 2023-10-25 | Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetCheckTools function. |
CVE-2023-46136 | High | 8.0 | 2023-10-25 | Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a… |
CVE-2023-34048 | Critical | 9.8 | 2023-10-25 | vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Ser… |
CVE-2022-3699 | High | 7.8 | 2023-10-25 | A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45 t… |
CVE-2023-46602 | High | 8.8 | 2023-10-23 | In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in lib… |
CVE-2023-46332 | Medium | 5.5 | 2023-10-23 | WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault. |
CVE-2023-28793 | High | 7.8 | 2023-10-23 | Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connect… |
CVE-2023-45681 | High | 7.3 | 2023-10-21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in `sta… |
CVE-2023-45678 | Medium | 6.5 | 2023-10-21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in `start_decoder` because at… |
CVE-2023-45677 | High | 7.3 | 2023-10-21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] = (char)'\0… |
CVE-2023-45676 | High | 7.3 | 2023-10-21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[i] = get8_packet… |
CVE-2023-45675 | Medium | 6.5 | 2023-10-21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] = (char)'\0… |
CVE-2023-5686 | High | 8.8 | 2023-10-20 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. |
CVE-2023-3487 | High | 7.7 | 2023-10-20 | An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots. |
CVE-2023-43492 | Critical | 9.8 | 2023-10-19 | In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hi… |
CVE-2023-38584 | Critical | 9.8 | 2023-10-19 | In Weintek's cMT3000 HMI Web CGI device, the cgi-bin command_wb.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to h… |
CVE-2023-39431 | High | 7.8 | 2023-10-19 | Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds write. An attacker could… |
CVE-2023-38128 | High | 7.8 | 2023-10-19 | An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause a type c… |
CVE-2023-35986 | High | 7.8 | 2023-10-19 | Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to a stack-based buffer overflow. An attacker c… |
CVE-2023-35126 | High | 7.8 | 2023-10-19 | An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles" and "DocumentEditStyles" streams of Ichitaro 2023 1.0.1.59372… |
CVE-2023-43252 | High | 7.8 | 2023-10-19 | XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file. |
CVE-2022-25334 | High | 8.2 | 2023-10-19 | The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD module lo… |
CVE-2023-4601 | High | 8.1 | 2023-10-18 | A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Succ… |
CVE-2023-38545 | Critical | 9.8 | 2023-10-18 | This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow t… |
CVE-2023-42507 | High | 7.8 | 2023-10-17 | Stack-based buffer overflow vulnerability exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability is exploited, information may be disclosed or… |
CVE-2023-41712 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash. |
CVE-2023-41711 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash. |
CVE-2023-39280 | Medium | 6.5 | 2023-10-17 | SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash. |
CVE-2023-39279 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash. |
CVE-2023-39278 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash. |
CVE-2023-39277 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash. |
CVE-2023-39276 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash. |
CVE-2023-45985 | High | 7.5 | 2023-10-16 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules… |
CVE-2023-45984 | Critical | 9.8 | 2023-10-16 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the func… |
CVE-2023-45580 | Critical | 9.8 | 2023-10-16 | Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-72… |
CVE-2023-45579 | Critical | 9.8 | 2023-10-16 | Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-72… |
CVE-2023-45578 | Critical | 9.8 | 2023-10-16 | Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-72… |
CVE-2023-45577 | Critical | 9.8 | 2023-10-16 | Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-720… |
CVE-2023-45576 | Critical | 9.8 | 2023-10-16 | Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-72… |
CVE-2023-45575 | Critical | 9.8 | 2023-10-16 | Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-720… |
CVE-2023-45574 | Critical | 9.8 | 2023-10-16 | Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-72… |
CVE-2023-45573 | Critical | 9.8 | 2023-10-16 | Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-72… |
CVE-2023-45572 | Critical | 9.8 | 2023-10-16 | Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-72… |
CVE-2023-44808 | Critical | 9.8 | 2023-10-16 | D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function. |
CVE-2023-36955 | Critical | 9.8 | 2023-10-16 | TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule. |
CVE-2023-36950 | Critical | 9.8 | 2023-10-16 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the… |
CVE-2023-36952 | Critical | 9.8 | 2023-10-16 | TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg. |
CVE-2023-36947 | Critical | 9.8 | 2023-10-16 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the func… |
CVE-2023-36340 | Critical | 9.8 | 2023-10-16 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth. |
CVE-2023-45863 | Medium | 6.4 | 2023-10-14 | An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_ko… |
CVE-2023-32973 | Low | 3.8 | 2023-10-13 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-29464 | High | 8.2 | 2023-10-13 | FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from memory via crafted malicious packets. Se… |
CVE-2023-44197 | High | 7.5 | 2023-10-13 | An Out-of-Bounds Write vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network… |
CVE-2023-44178 | Medium | 5.5 | 2023-10-13 | A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI command… |
CVE-2023-44177 | Medium | 5.5 | 2023-10-13 | A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a specific… |
CVE-2023-44176 | Medium | 5.5 | 2023-10-13 | A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI command… |
CVE-2023-27395 | Critical | 9.0 | 2023-10-12 | A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specia… |
CVE-2023-32722 | Critical | 9.6 | 2023-10-12 | The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbx_json_open. |
CVE-2023-5474 | High | 8.8 | 2023-10-11 | Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to engage in specific user interactions to p… |
CVE-2023-40141 | High | 7.8 | 2023-10-11 | In temp_residency_name_store of thermal_metrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… |
CVE-2023-35662 | Critical | 9.8 | 2023-10-11 | there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User i… |
CVE-2023-35649 | High | 7.2 | 2023-10-11 | In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution wit… |
CVE-2023-35646 | Critical | 9.8 | 2023-10-11 | In TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution p… |
CVE-2023-35645 | Medium | 6.4 | 2023-10-11 | In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-35968 | Critical | 9.8 | 2023-10-11 | Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted netw… |
CVE-2023-35967 | Critical | 9.8 | 2023-10-11 | Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted netw… |
CVE-2023-35966 | Critical | 9.8 | 2023-10-11 | Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request c… |
CVE-2023-35965 | Critical | 9.8 | 2023-10-11 | Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request c… |
CVE-2023-34426 | Critical | 9.8 | 2023-10-11 | A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108. A specially crafted network request… |
CVE-2023-34365 | Critical | 9.8 | 2023-10-11 | A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108. A specially crafted network req… |
CVE-2023-34346 | Critical | 9.8 | 2023-10-11 | A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108. A specially crafted network packet ca… |
CVE-2023-31272 | High | 8.8 | 2023-10-11 | A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead… |
CVE-2023-31096 | High | 7.8 | 2023-10-10 | An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There is Local Privilege Escalation to SYSTEM… |
CVE-2023-43785 | Medium | 6.5 | 2023-10-10 | A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bound… |
CVE-2023-45601 | High | 7.8 | 2023-10-10 | A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.1.250), Parasolid V36.0 (All versions <… |
CVE-2023-44083 | High | 7.8 | 2023-10-10 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-44082 | High | 7.8 | 2023-10-10 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-44081 | High | 7.8 | 2023-10-10 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-43641 | High | 8.8 | 2023-10-09 | libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GN… |
CVE-2023-40652 | Medium | 4.4 | 2023-10-08 | In jpg driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution privi… |
CVE-2023-40651 | Medium | 4.4 | 2023-10-08 | In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2023-3725 | High | 7.6 | 2023-10-06 | Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem |
CVE-2023-44807 | Critical | 9.8 | 2023-10-06 | D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function. |
CVE-2023-32972 | Low | 3.8 | 2023-10-06 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |