Lucene search
+L

1490 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:41 p.m.•19 views

CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

7.5CVSS6.9AI score0.14241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/21 12:00 a.m.•5 views

PT-2025-34088

Уязвимость функции gf cenc set pssh утилиты MP4Box мультимедийной платформы GPAC связана с копированием буфера без проверки размера входных данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...

4.6CVSS5.8AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•20 views

The vulnerability of the formSetWAN_Wizard534 function in D-Link DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetWANWizard534 function in the microprogramming software for D-Link DIR-605L routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using the...

9CVSS8.1AI score0.02722EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•27 views

The vulnerability of the formEasySetupWizard function in the D-Link DIR-600L router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formEasySetupWizard function in the D-Link DIR-600L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by using the host...

10CVSS8.1AI score0.01269EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•13 views

The vulnerability of the formSetLog function in the D-Link DIR-600L router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetLog function in the D-Link DIR-600L router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code by using the host...

10CVSS8.1AI score0.01563EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•18 views

The vulnerability of the formSetWAN_Wizard534 function in the microprogramming software for D-Link DIR-600L router allows a hacker to execute arbitrary code.

The vulnerability of the formSetWANWizard534 function in the microprogramming software of the D-Link DIR-600L router is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code b...

10CVSS8.1AI score0.01563EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•21 views

The vulnerability of the formEasySetupWizard3 function in D-Link DIR-619L router microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formEasySetupWizard3 function in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

9CVSS7.6AI score0.03041EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•17 views

The vulnerability of the formSetWizard2 function in the D-Link DIR-619L router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetWizard2 function in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

9CVSS7.6AI score0.03041EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/09 12:00 a.m.•17 views

The vulnerability of the Linux operating system’s kernel, related to copying buffers without checking the size of the input data, allows attackers to exploit their privileges.

The vulnerability of the Linux operating system’s kernel is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

5.5CVSS6.5AI score0.00199EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/05/09 12:00 a.m.•23 views

The vulnerability of the Access profile component of the access control and remote authentication solution BIG-IP Access Policy Manager allows a perpetrator to trigger a service failure.

The vulnerability of the Access profile component of the BIG-IP Access Policy Manager access control and remote authentication system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service...

7.8CVSS6.2AI score0.00408EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•3 views

CVE-2025-36525: Buffer Copy without Checking Size of Input

When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.7CVSS5.7AI score0.00438EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•5 views

CVE-2025-36557: Buffer Copy without Checking Size of Input

When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.7CVSS5.8AI score0.0043EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/06 12:00 a.m.•4 views

CVE-2024-49829: Buffer Copy without Checking Size of Input

Memory corruption can occur during context user dumps due to inadequate checks on buffer length...

7.8CVSS6.1AI score0.00114EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/01 12:00 a.m.•10 views

PT-2025-24450

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Android operating system's Framework component related to a buffer copy operation without proper input validation. Exploitation of this issue may allow an attacker to...

7.8CVSS6.5AI score0.00089EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2025/05/01 12:00 a.m.•22 views

PT-2025-24451

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the LockTaskController.java component within the Android operating system. A logic error in the startLockTaskMode function may allow a bypass of the lock screen, potentially...

6.2CVSS6.6AI score0.00105EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2025/04/28 12:00 a.m.•19 views

The vulnerability of TOTOLINK N150RT router microprogramming software, related to copying buffers without checking the size of input data, allows a hacker to execute arbitrary code.

The vulnerability of TOTOLINK N150RT router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST request...

9CVSS8.2AI score0.01435EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/23 12:00 a.m.•3 views

CVE-2025-28019: Buffer Copy without Checking Size of Input

TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component...

7.3CVSS7.4AI score0.00485EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/04/23 12:00 a.m.•13 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to copying buffers without checking the size of the input data, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

10CVSS7.3AI score0.00885EPSS
SaveExploits0References15Affected Software16
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•21 views

The vulnerability of function SUB_0046AC38 in Tenda AC8V4 microprogrammed router software allows a attacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of SUB0046AC38 in Tenda AC8V4 microprogrammed router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to influence the confidentiality, integrity, and accessibility of the protected...

10CVSS5.5AI score0.00553EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•6 views

CVE-2025-21443: Buffer Copy without Checking Size of Input

Memory corruption while processing message content in eAVB...

7.8CVSS7.5AI score0.00107EPSS
SaveExploits0References1
Rows per page
Query Builder