Vulnerabilities > Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

DATE CVE VULNERABILITY TITLE RISK
2023-08-11 CVE-2021-28835 Classic Buffer Overflow vulnerability in Xnview
Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.
local
low complexity
xnview CWE-120
7.8
2023-08-11 CVE-2023-28736 Classic Buffer Overflow vulnerability in Mdadm Project Mdadm
Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
mdadm-project CWE-120
6.7
2023-08-10 CVE-2023-37734 Classic Buffer Overflow vulnerability in Ezsoftmagic MP3 Audio Converter 2.7.3.700
EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow.
network
low complexity
ezsoftmagic CWE-120
critical
9.8
2023-08-08 CVE-2023-36482 Classic Buffer Overflow vulnerability in Samsung products
An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82.
low complexity
samsung CWE-120
4.3
2023-08-08 CVE-2023-39976 Classic Buffer Overflow vulnerability in Clusterlabs Libqb
log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
network
low complexity
clusterlabs CWE-120
critical
9.8
2023-08-07 CVE-2023-36499 Classic Buffer Overflow vulnerability in Netgear Xr300 Firmware 1.0.3.78
Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-38412 Classic Buffer Overflow vulnerability in Netgear R6900P Firmware 1.3.3.154
Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-38591 Classic Buffer Overflow vulnerability in Netgear Dg834Gv5 Firmware 1.6.01.34
Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wla_ssid and wla_temp_ssid parameters at bsw_ssid.cgi.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-38922 Classic Buffer Overflow vulnerability in Netgear products
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the update_auth function.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-38924 Classic Buffer Overflow vulnerability in Netgear Dgn3500 Firmware 1.1.00.37
Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi.
network
low complexity
netgear CWE-120
6.5