CWE-787 · Out-of-bounds Write (page 63)
Page 63 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33632 | High | 7.2 | 2023-05-31 | H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm. |
CVE-2023-33631 | High | 7.2 | 2023-05-31 | H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelSTList interface at /goform/aspForm. |
CVE-2023-33630 | High | 7.2 | 2023-05-31 | H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditvsList interface at /goform/aspForm. |
CVE-2023-33629 | High | 7.2 | 2023-05-31 | H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. |
CVE-2023-33628 | High | 7.2 | 2023-05-31 | H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. |
CVE-2023-33627 | High | 7.2 | 2023-05-31 | H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm. |
CVE-2023-33485 | High | 8.8 | 2023-05-31 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the addEffect fun… |
CVE-2023-2934 | High | 8.8 | 2023-05-30 | Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2023-2929 | High | 8.8 | 2023-05-30 | Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2023-33975 | Critical | 9.8 | 2023-05-30 | RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In version 2023.01 and… |
CVE-2023-24817 | High | 7.5 | 2023-05-30 | RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.0… |
CVE-2023-2923 | Medium | 6.3 | 2023-05-27 | A vulnerability classified as critical was found in Tenda AC6 US_AC6V1.0BR_V15.03.05.19. Affected by this vulnerability is the function fromDhcpListClient. The… |
CVE-2023-32307 | High | 7.5 | 2023-05-26 | Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.com/freesw… |
CVE-2023-2858 | Medium | 5.3 | 2023-05-26 | NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file |
CVE-2023-2857 | Medium | 5.3 | 2023-05-26 | BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file |
CVE-2023-2856 | Medium | 5.3 | 2023-05-26 | VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file |
CVE-2023-2855 | Medium | 5.3 | 2023-05-26 | Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file |
CVE-2023-2854 | Medium | 5.3 | 2023-05-26 | BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file |
CVE-2023-31130 | Medium | 4.1 | 2023-05-25 | c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2"… |
CVE-2023-2804 | Medium | 6.5 | 2023-05-25 | A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only b… |
CVE-2023-2798 | High | 7.5 | 2023-05-25 | Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is running on user supplied web pages, an a… |
CVE-2023-2873 | Medium | 5.3 | 2023-05-24 | A vulnerability classified as critical was found in Twister Antivirus 8. This vulnerability affects the function 0x804f2143/0x804f217f/0x804f214b/0x80800043 in… |
CVE-2023-30382 | High | 7.3 | 2023-05-23 | A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supplying craf… |
CVE-2023-23306 | Critical | 9.8 | 2023-05-23 | The `Toybox.Ant.BurstPayload.add` API method in CIQ API version 2.2.0 through 4.1.7 suffers from a type confusion vulnreability, which can result in an out-of-… |
CVE-2023-25537 | Medium | 6.1 | 2023-05-22 | Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A loca… |
CVE-2023-30775 | Medium | 5.5 | 2023-05-19 | A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c. |
CVE-2023-30774 | Medium | 5.5 | 2023-05-19 | A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS values. |
CVE-2022-30114 | High | 7.5 | 2023-05-19 | A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firm… |
CVE-2023-28753 | Critical | 9.8 | 2023-05-18 | netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap m… |
CVE-2023-23556 | Critical | 9.8 | 2023-05-18 | An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to exec… |
CVE-2023-27217 | Critical | 9.8 | 2023-05-18 | A stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet V2 F7c063 firmware_2.00.11420.OWRT.PVT_SNSV2 allows attackers to caus… |
CVE-2023-1972 | Medium | 6.5 | 2023-05-17 | A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability. |
CVE-2023-31722 | High | 7.8 | 2023-05-17 | There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891). |
CVE-2023-32981 | High | 8.8 | 2023-05-16 | An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted archives as paramete… |
CVE-2023-29961 | Critical | 9.8 | 2023-05-16 | D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup, |
CVE-2023-2124 | High | 7.8 | 2023-05-15 | An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal… |
CVE-2023-20721 | Medium | 6.7 | 2023-05-15 | In isp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20720 | Medium | 6.7 | 2023-05-15 | In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20701 | Medium | 6.7 | 2023-05-15 | In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2023-20700 | Medium | 6.7 | 2023-05-15 | In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2023-20699 | Medium | 6.7 | 2023-05-15 | In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20696 | Medium | 6.7 | 2023-05-15 | In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-20695 | Medium | 6.7 | 2023-05-15 | In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-20694 | Medium | 6.7 | 2023-05-15 | In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-1729 | Medium | 6.5 | 2023-05-15 | A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash. |
CVE-2022-47390 | High | 8.8 | 2023-05-15 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple… |
CVE-2022-47389 | High | 8.8 | 2023-05-15 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple… |
CVE-2022-47388 | High | 8.8 | 2023-05-15 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple… |
CVE-2022-47387 | High | 8.8 | 2023-05-15 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple… |
CVE-2022-47386 | High | 8.8 | 2023-05-15 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple… |
CVE-2022-47385 | High | 8.8 | 2023-05-15 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple… |
CVE-2022-47384 | High | 8.8 | 2023-05-15 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple… |
CVE-2022-47383 | High | 8.8 | 2023-05-15 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple… |
CVE-2022-47382 | High | 8.8 | 2023-05-15 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple… |
CVE-2022-47381 | High | 8.8 | 2023-05-15 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into t… |
CVE-2022-47380 | High | 8.8 | 2023-05-15 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into… |
CVE-2022-47379 | High | 8.8 | 2023-05-15 | An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which… |
CVE-2023-25009 | High | 7.8 | 2023-05-12 | A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability which could result in code execution. |
CVE-2023-2457 | High | 8.8 | 2023-05-12 | Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corrupt… |
CVE-2023-30763 | High | 7.2 | 2023-05-12 | Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via lo… |
CVE-2023-31922 | High | 7.5 | 2023-05-12 | QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component js_proxy_isArray at quickjs.c. |
CVE-2023-29285 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2023-29284 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2023-29283 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-29282 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2023-29276 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2023-31146 | High | 7.5 | 2023-05-11 | Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray is written… |
CVE-2023-0856 | Critical | 9.8 | 2023-05-11 | Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network… |
CVE-2023-0855 | Critical | 9.8 | 2023-05-11 | Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the net… |
CVE-2023-0854 | Critical | 9.8 | 2023-05-11 | Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an… |
CVE-2023-0853 | Critical | 9.8 | 2023-05-11 | Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on th… |
CVE-2023-0852 | Critical | 9.8 | 2023-05-11 | Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker… |
CVE-2023-0851 | Critical | 9.8 | 2023-05-11 | Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the netw… |
CVE-2023-31568 | High | 8.8 | 2023-05-10 | Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4. |
CVE-2023-31567 | High | 8.8 | 2023-05-10 | Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3. |
CVE-2023-31556 | Medium | 6.5 | 2023-05-10 | podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent. |
CVE-2023-31910 | High | 7.8 | 2023-05-10 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component parser_parse_function_statement at /jerry-core/parser/js/js… |
CVE-2023-31908 | High | 7.8 | 2023-05-10 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component ecma_builtin_typedarray_prototype_sort. |
CVE-2023-31907 | High | 7.8 | 2023-05-10 | Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scanner_literal_is_created at /jerry-core/parser/js/js-scanner-util.c. |
CVE-2023-31906 | High | 7.8 | 2023-05-10 | Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /jerry-core/parser/js… |
CVE-2023-28410 | High | 8.8 | 2023-05-10 | Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux before kernel version 6.2.10 may allow… |
CVE-2023-23910 | Low | 3.9 | 2023-05-10 | Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to poten… |
CVE-2023-23580 | Medium | 4.8 | 2023-05-10 | Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user… |
CVE-2023-23569 | High | 7.8 | 2023-05-10 | Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user… |
CVE-2023-22442 | High | 7.9 | 2023-05-10 | Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local acce… |
CVE-2022-21804 | High | 8.4 | 2023-05-10 | Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable escalation… |
CVE-2023-27385 | High | 7.8 | 2023-05-10 | Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be… |
CVE-2021-46759 | Medium | 6.1 | 2023-05-09 | Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under t… |
CVE-2023-20524 | High | 7.5 | 2023-05-09 | An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially leading to… |
CVE-2023-20520 | Critical | 9.8 | 2023-05-09 | Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading… |
CVE-2021-46764 | High | 7.5 | 2023-05-09 | Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of… |
CVE-2021-46763 | High | 7.5 | 2023-05-09 | Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer potentially leading to… |
CVE-2023-30087 | Medium | 5.5 | 2023-05-09 | Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string function in mjs.c. |
CVE-2023-30086 | Medium | 5.5 | 2023-05-09 | Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c. |
CVE-2023-31982 | High | 7.8 | 2023-05-09 | Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_packet_reasm_ip at /src/capture.c. |
CVE-2023-31981 | High | 7.8 | 2023-05-09 | Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c. |
CVE-2023-31976 | High | 8.8 | 2023-05-09 | libming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswf_preprocess at /util/makeswf_utils.c. |
CVE-2023-29462 | High | 7.8 | 2023-05-09 | An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious us… |
CVE-2023-30986 | High | 7.8 | 2023-05-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applica… |
CVE-2023-32111 | High | 7.5 | 2023-05-09 | In SAP PowerDesigner (Proxy) - version 16.7, an attacker can send a crafted request from a remote host to the proxy machine and crash the proxy server, due to… |