Vulnerabilities > Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

DATE CVE VULNERABILITY TITLE RISK
2023-08-07 CVE-2023-36499 Classic Buffer Overflow vulnerability in Netgear Xr300 Firmware 1.0.3.78
Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-38412 Classic Buffer Overflow vulnerability in Netgear R6900P Firmware 1.3.3.154
Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-38591 Classic Buffer Overflow vulnerability in Netgear Dg834Gv5 Firmware 1.6.01.34
Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wla_ssid and wla_temp_ssid parameters at bsw_ssid.cgi.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-38922 Classic Buffer Overflow vulnerability in Netgear products
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the update_auth function.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-38924 Classic Buffer Overflow vulnerability in Netgear Dgn3500 Firmware 1.1.00.37
Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi.
network
low complexity
netgear CWE-120
6.5
2023-08-07 CVE-2023-38925 Classic Buffer Overflow vulnerability in Netgear Dc112A Firmware, Ex6200 Firmware and R6300V2 Firmware
Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.cgi.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-38926 Classic Buffer Overflow vulnerability in Netgear Ex6200 Firmware 1.0.3.94
Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-39550 Classic Buffer Overflow vulnerability in Netgear products
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the check_auth function.
network
low complexity
netgear CWE-120
8.8
2023-08-03 CVE-2023-3766 Classic Buffer Overflow vulnerability in Cloudflare Odoh-Rs
A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries.
network
high complexity
cloudflare CWE-120
5.9
2023-08-03 CVE-2023-3346 Classic Buffer Overflow vulnerability in Mitsubishielectric products
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets.
network
low complexity
mitsubishielectric CWE-120
critical
9.8