VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (14,531)

page 55 of 727
  • CVE-2022-43764CriFeb 8, 2023
    risk 0.64cvss 9.8epss 0.01

    Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code.

  • CVE-2021-31578CriFeb 6, 2023
    risk 0.64cvss 9.8epss 0.01

    In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008;…

  • CVE-2022-48078CriFeb 6, 2023
    risk 0.64cvss 9.8epss 0.01

    pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTree.cpp:BuildFromCode.

  • CVE-2023-23088CriFeb 3, 2023
    risk 0.64cvss 9.8epss 0.01

    Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the json_value_parse function.

  • CVE-2023-23086CriFeb 3, 2023
    risk 0.64cvss 9.8epss 0.01

    Buffer OverFlow Vulnerability in MojoJson v1.2.3 allows an attacker to execute arbitrary code via the SkipString function.

  • CVE-2023-25139CriFeb 3, 2023
    risk 0.64cvss 9.8epss 0.01

    sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated…

  • CVE-2022-48130CriFeb 2, 2023
    risk 0.64cvss 9.8epss 0.01

    Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN.

  • CVE-2022-41991CriJan 26, 2023
    risk 0.64cvss 9.8epss 0.01

    A heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger this vulnerability.

  • CVE-2022-41019CriJan 26, 2023
    risk 0.64cvss 9.8epss 0.02

    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to…

  • CVE-2023-24170CriJan 26, 2023
    risk 0.64cvss 9.8epss 0.01

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat.

  • CVE-2023-24169CriJan 26, 2023
    risk 0.64cvss 9.8epss 0.01

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_0007343c.

  • CVE-2023-24167CriJan 26, 2023
    risk 0.64cvss 9.8epss 0.01

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add_white_node.

  • CVE-2023-24166CriJan 26, 2023
    risk 0.64cvss 9.8epss 0.01

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet.

  • CVE-2023-24165CriJan 26, 2023
    risk 0.64cvss 9.8epss 0.01

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo.

  • CVE-2023-24164CriJan 26, 2023
    risk 0.64cvss 9.8epss 0.01

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318.

  • CVE-2022-46475CriJan 17, 2023
    risk 0.64cvss 9.8epss 0.10

    D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.

  • CVE-2017-16329CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…

  • CVE-2017-16326CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…

  • CVE-2017-16318CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…

  • CVE-2017-16302CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…