Lucene search
K

905 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 6:41 p.m.7 views

CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

7.5CVSS6.9AI score0.14241EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.4 views

The vulnerability of the formSetWizard2 function in the D-Link DIR-619L router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetWizard2 function in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

9CVSS7.6AI score0.02335EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.6 views

The vulnerability of the formSetLog function in the D-Link DIR-600L router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetLog function in the D-Link DIR-600L router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code by using the host...

10CVSS8.1AI score0.00981EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.5 views

The vulnerability of the formSetWAN_Wizard534 function in the microprogramming software for D-Link DIR-600L router allows a hacker to execute arbitrary code.

The vulnerability of the formSetWANWizard534 function in the microprogramming software of the D-Link DIR-600L router is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code b...

10CVSS8.1AI score0.00981EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.8 views

The vulnerability of the formEasySetupWizard function in the D-Link DIR-600L router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formEasySetupWizard function in the D-Link DIR-600L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by using the host...

10CVSS8.1AI score0.00973EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.5 views

The vulnerability of the formEasySetupWizard3 function in D-Link DIR-619L router microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formEasySetupWizard3 function in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

9CVSS7.6AI score0.02335EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.6 views

The vulnerability of the formSetWAN_Wizard534 function in D-Link DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetWANWizard534 function in the microprogramming software for D-Link DIR-605L routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using the...

9CVSS8.1AI score0.0209EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:0 a.m.7 views

The vulnerability of the Access profile component of the access control and remote authentication solution BIG-IP Access Policy Manager allows a perpetrator to trigger a service failure.

The vulnerability of the Access profile component of the BIG-IP Access Policy Manager access control and remote authentication system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service...

7.8CVSS6.2AI score0.00377EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:0 a.m.5 views

The vulnerability of the Linux operating system’s kernel, related to copying buffers without checking the size of the input data, allows attackers to exploit their privileges.

The vulnerability of the Linux operating system’s kernel is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

5.5CVSS6.5AI score0.00157EPSS
Exploits0References7Affected Software4
Positive Technologies
Positive Technologies
added 2025/05/05 12:0 a.m.3 views

PT-2025-24450

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in the Android operating system's Framework component related to a buffer copy operation without proper input validation. Exploitation of this issue may allow an attacker to...

7.8CVSS6.5AI score0.00083EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/05/05 12:0 a.m.3 views

PT-2025-24451

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in the LockTaskController.java component within the Android operating system. A logic error in the startLockTaskMode function may allow a bypass of the lock screen, potentiall...

6.2CVSS6.6AI score0.00101EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2025/04/28 12:0 a.m.7 views

The vulnerability of TOTOLINK N150RT router microprogramming software, related to copying buffers without checking the size of input data, allows a hacker to execute arbitrary code.

The vulnerability of TOTOLINK N150RT router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST request...

9CVSS8.2AI score0.01108EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.5 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to copying buffers without checking the size of the input data, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

10CVSS7.3AI score0.0079EPSS
Exploits0References15Affected Software16
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.6 views

The vulnerability of function SUB_0046AC38 in Tenda AC8V4 microprogrammed router software allows a attacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of SUB0046AC38 in Tenda AC8V4 microprogrammed router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to influence the confidentiality, integrity, and accessibility of the protected...

10CVSS5.5AI score0.00511EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/02 12:0 a.m.6 views

The vulnerability of the Type 4 function in the PDF processing, conversion, and generation software for Ghostscript allows a hacker to execute arbitrary code.

The vulnerability of Type 4 function in the software suite for processing, converting, and generating Ghostscript documents is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a speciall...

7.8CVSS7.1AI score0.00255EPSS
Exploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.9 views

The vulnerability of the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode() function in the Open Asset Import Library (Assimp) import library allows a malicious actor to trigger a denial-of-service attack.

The vulnerability of the OpenDDLParser::parseStructure function in the Open Asset Import Library Assimp import library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00239EPSS
Exploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/07 12:0 a.m.4 views

The vulnerability in Mozilla Firefox, Firefox ESR, and email clients Thunderbird, Thunderbird ESR, arises from copying buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created website...

7.6CVSS7.2AI score0.00247EPSS
Exploits0References22Affected Software13
Cvelist
Cvelist
added 2025/03/03 10:7 a.m.14 views

CVE-2024-53027 Buffer Copy Without Checking Size of Input in WLAN Host

Transient DOS may occur while processing the country IE...

7.5CVSS0.00276EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/03/03 10:7 a.m.13 views

CVE-2024-53027 Buffer Copy Without Checking Size of Input in WLAN Host

Transient DOS may occur while processing the country IE...

7.5CVSS7.6AI score0.00276EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2025/02/28 2:21 a.m.3 views

SUSE CVE-2025-21734

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix copy buffer page size For non-registered buffer, fastrpc driver copies the buffer and pass it to the remote subsystem. There is a problem with current implementation of page size calculation which is not...

5.5CVSS7.9AI score0.00188EPSS
Exploits0References13
Rows per page
Query Builder