Vulnerabilities > Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

DATE CVE VULNERABILITY TITLE RISK
2019-08-09 CVE-2019-12257 Classic Buffer Overflow vulnerability in multiple products
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component.
8.8
2019-08-09 CVE-2019-12256 Classic Buffer Overflow vulnerability in multiple products
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component.
network
low complexity
windriver netapp sonicwall siemens belden CWE-120
critical
9.8
2019-06-17 CVE-2019-6327 Classic Buffer Overflow vulnerability in HP products
HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v.
network
low complexity
hp CWE-120
critical
9.8
2019-04-03 CVE-2019-4014 Classic Buffer Overflow vulnerability in IBM DB2
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root.
local
low complexity
ibm CWE-120
7.8
2019-03-21 CVE-2017-16255 Classic Buffer Overflow vulnerability in Insteon HUB Firmware 1012
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012.
network
low complexity
insteon CWE-120
8.1
2019-03-11 CVE-2019-4016 Classic Buffer Overflow vulnerability in IBM DB2
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root.
local
low complexity
ibm CWE-120
7.8
2019-03-11 CVE-2019-4015 Classic Buffer Overflow vulnerability in IBM DB2
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root.
local
low complexity
ibm CWE-120
7.8
2019-03-05 CVE-2019-6557 Classic Buffer Overflow vulnerability in Moxa products
Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.
network
low complexity
moxa CWE-120
critical
9.8
2018-11-02 CVE-2018-3899 Classic Buffer Overflow vulnerability in Yitechnology YI Home Camera Firmware 1.8.7.0D
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.
network
high complexity
yitechnology CWE-120
7.5
2018-11-02 CVE-2018-3898 Classic Buffer Overflow vulnerability in Yitechnology YI Home Camera Firmware 1.8.7.0D
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D.
network
high complexity
yitechnology CWE-120
7.5