CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (15,182)
page 506 of 760| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-22415 | Hig | 0.49 | 7.5 | 0.01 | Jan 13, 2023 | An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On all MX Series and SRX Series platform, when H.323 ALG is enabled and specific H.323 packets are received… | ||
| CVE-2023-22411 | Hig | 0.49 | 7.5 | 0.01 | Jan 13, 2023 | An Out-of-Bounds Write vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On SRX Series devices using Unified Policies with IPv6, when a specific IPv6 packet goes… | ||
| CVE-2022-46449 | Hig | 0.49 | 7.5 | 0.01 | Jan 10, 2023 | An issue in MPD (Music Player Daemon) v0.23.10 allows attackers to cause a Denial of Service (DoS) via a crafted input. | ||
| CVE-2022-33286 | Hig | 0.49 | 7.5 | 0.00 | Jan 9, 2023 | Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames. | ||
| CVE-2022-33285 | Hig | 0.49 | 7.5 | 0.00 | Jan 9, 2023 | Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames. | ||
| CVE-2022-47116 | Hig | 0.49 | 7.5 | 0.01 | Dec 30, 2022 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the SYSPS parameter at /goform/SysToolChangePwd. | ||
| CVE-2022-46322 | Hig | 0.49 | 7.5 | 0.00 | Dec 20, 2022 | Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions. | ||
| CVE-2022-46109 | Hig | 0.49 | 7.5 | 0.01 | Dec 16, 2022 | Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState. | ||
| CVE-2022-45693 | Hig | 0.49 | 7.5 | 0.01 | Dec 13, 2022 | Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. | ||
| CVE-2022-45689 | Hig | 0.49 | 7.5 | 0.01 | Dec 13, 2022 | hutool-json v5.8.10 was discovered to contain an out of memory error. | ||
| CVE-2022-45685 | Hig | 0.49 | 7.5 | 0.01 | Dec 13, 2022 | A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data. | ||
| CVE-2022-45979 | Hig | 0.49 | 7.5 | 0.01 | Dec 12, 2022 | Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid parameter at /goform/fast_setting_wifi_set . | ||
| CVE-2022-45525 | Hig | 0.49 | 7.5 | 0.01 | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo. | ||
| CVE-2022-45524 | Hig | 0.49 | 7.5 | 0.01 | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave. | ||
| CVE-2022-45523 | Hig | 0.49 | 7.5 | 0.01 | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im. | ||
| CVE-2022-45522 | Hig | 0.49 | 7.5 | 0.01 | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter. | ||
| CVE-2022-45521 | Hig | 0.49 | 7.5 | 0.01 | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter. | ||
| CVE-2022-45520 | Hig | 0.49 | 7.5 | 0.01 | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/qossetting. | ||
| CVE-2022-45519 | Hig | 0.49 | 7.5 | 0.01 | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter. | ||
| CVE-2022-45518 | Hig | 0.49 | 7.5 | 0.01 | Dec 8, 2022 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind. |
- risk 0.49cvss 7.5epss 0.01
An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On all MX Series and SRX Series platform, when H.323 ALG is enabled and specific H.323 packets are received…
- risk 0.49cvss 7.5epss 0.01
An Out-of-Bounds Write vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On SRX Series devices using Unified Policies with IPv6, when a specific IPv6 packet goes…
- risk 0.49cvss 7.5epss 0.01
An issue in MPD (Music Player Daemon) v0.23.10 allows attackers to cause a Denial of Service (DoS) via a crafted input.
- risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
- risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
- risk 0.49cvss 7.5epss 0.01
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the SYSPS parameter at /goform/SysToolChangePwd.
- risk 0.49cvss 7.5epss 0.00
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.
- risk 0.49cvss 7.5epss 0.01
Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.
- risk 0.49cvss 7.5epss 0.01
Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
- risk 0.49cvss 7.5epss 0.01
hutool-json v5.8.10 was discovered to contain an out of memory error.
- risk 0.49cvss 7.5epss 0.01
A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.
- risk 0.49cvss 7.5epss 0.01
Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid parameter at /goform/fast_setting_wifi_set .
- risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo.
- risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave.
- risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im.
- risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter.
- risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter.
- risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/qossetting.
- risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter.
- risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind.