Vulnerabilities > Improper Restriction of Operations within the Bounds of a Memory Buffer

DATE CVE VULNERABILITY TITLE RISK
2018-08-28 CVE-2018-15839 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Dlink Dir-615 Firmware
D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.
network
low complexity
dlink CWE-119
critical
9.8
2018-08-25 CVE-2018-15871 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libming
An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12.
network
low complexity
libming CWE-119
6.5
2018-08-25 CVE-2018-15870 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libming
An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12.
network
low complexity
libming CWE-119
6.5
2018-08-24 CVE-2018-15120 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences.
network
low complexity
gnome canonical CWE-119
6.5
2018-08-24 CVE-2017-11563 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Dlink Eyeon Baby Monitor Firmware 1.08.1
D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability.
network
low complexity
dlink CWE-119
critical
9.8
2018-08-23 CVE-2018-3872 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Samsung Sth-Eth-250 Firmware 0.20.17
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.
network
low complexity
samsung CWE-119
critical
9.9
2018-08-23 CVE-2018-1159 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Mikrotik Routeros
Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability.
network
low complexity
mikrotik CWE-119
6.5
2018-08-23 CVE-2017-14452 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Insteon HUB Firmware 1012
An exploitable buffer overflow vulnerability exists in the PubNub message handler for the "control" channel of Insteon Hub running firmware version 1012.
network
low complexity
insteon CWE-119
8.8
2018-08-23 CVE-2018-3925 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Samsung Sth-Eth-250 Firmware 0.20.17
An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17.
network
low complexity
samsung CWE-119
critical
9.9
2018-08-23 CVE-2018-3917 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Samsung Sth-Eth-250 Firmware 0.20.17
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of its SQLite database, leading to a buffer overflow on the stack.
network
low complexity
samsung CWE-119
critical
9.9