Vulnerabilities > Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

DATE CVE VULNERABILITY TITLE RISK
2023-08-07 CVE-2023-38925 Classic Buffer Overflow vulnerability in Netgear Dc112A Firmware, Ex6200 Firmware and R6300V2 Firmware
Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.cgi.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-38926 Classic Buffer Overflow vulnerability in Netgear Ex6200 Firmware 1.0.3.94
Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set.
network
low complexity
netgear CWE-120
8.8
2023-08-07 CVE-2023-39550 Classic Buffer Overflow vulnerability in Netgear products
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the check_auth function.
network
low complexity
netgear CWE-120
8.8
2023-08-03 CVE-2023-3766 Classic Buffer Overflow vulnerability in Cloudflare Odoh-Rs
A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries.
network
high complexity
cloudflare CWE-120
5.9
2023-08-03 CVE-2023-3346 Classic Buffer Overflow vulnerability in Mitsubishielectric products
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets.
network
low complexity
mitsubishielectric CWE-120
critical
9.8
2023-08-02 CVE-2023-31430 Classic Buffer Overflow vulnerability in Broadcom Brocade Fabric Operating System 9.2.0
A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric OS switch leading to a denial of service.
local
low complexity
broadcom CWE-120
5.5
2023-08-02 CVE-2023-31431 Classic Buffer Overflow vulnerability in Broadcom Brocade Fabric Operating System 9.2.0
A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to crash the Brocade Fabric OS switch leading to a denial of service.
local
low complexity
broadcom CWE-120
5.5
2023-08-01 CVE-2023-3494 Classic Buffer Overflow vulnerability in Freebsd 13.1/13.2
The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports.
local
low complexity
freebsd CWE-120
8.8
2023-08-01 CVE-2023-38559 Classic Buffer Overflow vulnerability in multiple products
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript.
local
low complexity
artifex redhat fedoraproject debian CWE-120
5.5
2023-07-28 CVE-2023-38590 Classic Buffer Overflow vulnerability in Apple products
A buffer overflow issue was addressed with improved memory handling.
network
low complexity
apple CWE-120
8.8