Vulnerabilities > Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

DATE CVE VULNERABILITY TITLE RISK
2022-09-07 CVE-2022-31414 Classic Buffer Overflow vulnerability in Dlink Dir-1960 Firmware 1.11
D-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi.
network
low complexity
dlink CWE-120
7.5
2022-09-07 CVE-2022-36587 Classic Buffer Overflow vulnerability in Tenda G3 Firmware 15.11.0.6(7663)
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.
network
low complexity
tenda CWE-120
critical
9.8
2022-09-06 CVE-2022-36584 Classic Buffer Overflow vulnerability in Tenda G3 Firmware 15.11.0.6(7663)
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.
network
low complexity
tenda CWE-120
critical
9.8
2022-09-06 CVE-2022-37839 Classic Buffer Overflow vulnerability in Totolink A860R Firmware 4.1.2Cu.5182B20201027
TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi.
network
low complexity
totolink CWE-120
critical
9.8
2022-09-06 CVE-2022-37840 Classic Buffer Overflow vulnerability in Totolink A860R Firmware 4.1.2Cu.5182B20201027
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.
network
low complexity
totolink CWE-120
critical
9.8
2022-09-06 CVE-2022-37842 Classic Buffer Overflow vulnerability in Totolink A860R Firmware 4.1.2Cu.5182B20201027
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability.
network
low complexity
totolink CWE-120
critical
9.8
2022-09-06 CVE-2022-40110 Classic Buffer Overflow vulnerability in Totolink A3002R Firmware 1.1.1B20200824.0128
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa.
network
low complexity
totolink CWE-120
7.5
2022-09-06 CVE-2022-40112 Classic Buffer Overflow vulnerability in Totolink A3002R Firmware 1.1.1B20200824.0128
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa.
network
low complexity
totolink CWE-120
7.5
2022-09-02 CVE-2022-36647 Classic Buffer Overflow vulnerability in Davs2 Project Davs2 1.6.205
PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse_sequence_header() at source/common/header.cc:269.
local
low complexity
davs2-project CWE-120
5.5
2022-09-02 CVE-2022-25657 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
network
low complexity
qualcomm CWE-120
critical
9.8