Vulnerabilities > Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

DATE CVE VULNERABILITY TITLE RISK
2023-07-18 CVE-2023-37758 Classic Buffer Overflow vulnerability in Dlink Dir-815 Firmware 1.0.1
D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi.
network
low complexity
dlink CWE-120
7.5
2023-07-18 CVE-2021-43072 Classic Buffer Overflow vulnerability in Fortinet products
A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiAnalyzer version 7.0.2 and below, version 6.4.7 and below, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiManager version 7.0.2 and below, version 6.4.7 and below, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiOS version 7.0.0 through 7.0.4, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x and FortiProxy version 7.0.0 through 7.0.3, 2.0.0 through 2.0.8, 1.2.x, 1.1.x and 1.0.x allows attacker to execute unauthorized code or commands via crafted CLI `execute restore image` and `execute certificate remote` operations with the tFTP protocol.
local
low complexity
fortinet CWE-120
6.7
2023-07-15 CVE-2023-35802 Classic Buffer Overflow vulnerability in Extremenetworks IQ Engine 10.6R1/10.6R2
IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution.
network
low complexity
extremenetworks CWE-120
critical
9.8
2023-07-14 CVE-2023-37793 Classic Buffer Overflow vulnerability in Wayos Fbm-291W Firmware 19.09.11V
WAYOS FBM-291W 19.09.11V was discovered to contain a buffer overflow via the component /upgrade_filter.asp.
network
low complexity
wayos CWE-120
critical
9.8
2023-07-13 CVE-2023-21243 Classic Buffer Overflow vulnerability in Google Android
In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buffer overflow.
local
low complexity
google CWE-120
5.5
2023-07-12 CVE-2023-3618 Classic Buffer Overflow vulnerability in multiple products
A flaw was found in libtiff.
network
low complexity
libtiff debian redhat CWE-120
6.5
2023-07-11 CVE-2020-20118 Classic Buffer Overflow vulnerability in Avast Antivirus
Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to the aswSnx.sys driver.
local
low complexity
avast CWE-120
5.5
2023-07-11 CVE-2023-34561 Classic Buffer Overflow vulnerability in Robtopgames Geometry Dash 2.113
A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash level.
network
low complexity
robtopgames CWE-120
critical
9.8
2023-07-06 CVE-2021-46896 Classic Buffer Overflow vulnerability in Dronecode PX4 Drone Autopilot
Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332.
network
low complexity
dronecode CWE-120
7.5
2023-07-06 CVE-2023-37245 Classic Buffer Overflow vulnerability in Huawei Emui and Harmonyos
Buffer overflow vulnerability in the modem pinctrl module.
network
low complexity
huawei CWE-120
critical
9.1