CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (15,182)
page 502 of 760| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-40296 | Hig | 0.49 | 7.5 | 0.01 | Aug 14, 2023 | async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP packets. | ||
| CVE-2023-30699 | Hig | 0.49 | 7.5 | 0.01 | Aug 10, 2023 | Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers. | ||
| CVE-2023-3825 | Hig | 0.49 | 7.5 | 0.01 | Jul 31, 2023 | PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled resource consumption. KEPServerEX uses OPC UA, a protocol which defines various object types that can be nested to create complex arrays. It… | ||
| CVE-2022-4608 | Hig | 0.49 | 7.5 | 0.01 | Jul 26, 2023 | A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500… | ||
| CVE-2023-35077 | Hig | 0.49 | 7.5 | 0.02 | Jul 21, 2023 | An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above. | ||
| CVE-2023-31998 | Hig | 0.49 | 7.5 | 0.01 | Jul 18, 2023 | A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices. | ||
| CVE-2023-26597 | Hig | 0.49 | 7.5 | 0.01 | Jul 13, 2023 | Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. See Honeywell Security Notification for recommendations on upgrading and… | ||
| CVE-2023-24474 | Hig | 0.49 | 7.5 | 0.01 | Jul 13, 2023 | Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message | ||
| CVE-2023-22435 | Hig | 0.49 | 7.5 | 0.01 | Jul 13, 2023 | Experion server may experience a DoS due to a stack overflow when handling a specially crafted message. | ||
| CVE-2023-3596 | Hig | 0.49 | 7.5 | 0.04 | Jul 12, 2023 | Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages. | ||
| CVE-2022-31810 | Hig | 0.49 | 7.5 | 0.01 | Jul 11, 2023 | A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-based buffer overflow. This could allow an unauthenticated… | ||
| CVE-2023-34937 | — | Hig | 0.49 | 7.5 | 0.01 | Jun 28, 2023 | A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |
| CVE-2023-34936 | — | Hig | 0.49 | 7.5 | 0.01 | Jun 28, 2023 | A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |
| CVE-2023-34935 | — | Hig | 0.49 | 7.5 | 0.01 | Jun 28, 2023 | A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |
| CVE-2023-34934 | — | Hig | 0.49 | 7.5 | 0.01 | Jun 28, 2023 | A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |
| CVE-2023-34933 | — | Hig | 0.49 | 7.5 | 0.01 | Jun 28, 2023 | A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |
| CVE-2023-34932 | — | Hig | 0.49 | 7.5 | 0.01 | Jun 28, 2023 | A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |
| CVE-2023-34931 | — | Hig | 0.49 | 7.5 | 0.01 | Jun 28, 2023 | A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |
| CVE-2023-34930 | — | Hig | 0.49 | 7.5 | 0.01 | Jun 28, 2023 | A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |
| CVE-2023-34929 | — | Hig | 0.49 | 7.5 | 0.01 | Jun 28, 2023 | A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
- risk 0.49cvss 7.5epss 0.01
async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP packets.
- risk 0.49cvss 7.5epss 0.01
Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers.
- risk 0.49cvss 7.5epss 0.01
PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled resource consumption. KEPServerEX uses OPC UA, a protocol which defines various object types that can be nested to create complex arrays. It…
- risk 0.49cvss 7.5epss 0.01
A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500…
- risk 0.49cvss 7.5epss 0.02
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above.
- risk 0.49cvss 7.5epss 0.01
A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices.
- risk 0.49cvss 7.5epss 0.01
Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. See Honeywell Security Notification for recommendations on upgrading and…
- risk 0.49cvss 7.5epss 0.01
Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message
- risk 0.49cvss 7.5epss 0.01
Experion server may experience a DoS due to a stack overflow when handling a specially crafted message.
- risk 0.49cvss 7.5epss 0.04
Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.
- risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-based buffer overflow. This could allow an unauthenticated…
- risk 0.49cvss 7.5epss 0.01
A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
- risk 0.49cvss 7.5epss 0.01
A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
- risk 0.49cvss 7.5epss 0.01
A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
- risk 0.49cvss 7.5epss 0.01
A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
- risk 0.49cvss 7.5epss 0.01
A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
- risk 0.49cvss 7.5epss 0.01
A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
- risk 0.49cvss 7.5epss 0.01
A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
- risk 0.49cvss 7.5epss 0.01
A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
- risk 0.49cvss 7.5epss 0.01
A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.