Vulnerabilities > Improper Restriction of Operations within the Bounds of a Memory Buffer

DATE CVE VULNERABILITY TITLE RISK
2018-07-05 CVE-2018-12113 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Coreftp Core FTP 2.2
Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response.
network
low complexity
coreftp CWE-119
critical
9.8
2018-07-03 CVE-2018-13121 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Realnetworks Realone Player 2.0
RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service (array out-of-bounds access and application crash) via a crafted .aiff file.
local
low complexity
realnetworks CWE-119
5.5
2018-07-03 CVE-2018-7780 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Schneider-Electric products
In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set".
network
low complexity
schneider-electric CWE-119
critical
9.8
2018-07-02 CVE-2017-17317 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Huawei products
Common Open Policy Service Protocol (COPS) module in Huawei USG6300 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6500 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6600 V100R001C00; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00 has a buffer overflow vulnerability.
network
high complexity
huawei CWE-119
3.7
2018-06-29 CVE-2018-12982 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Podofo Project Podofo 0.9.6
Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad() function in PdfVariant.h in PoDoFo 0.9.6-rc1 allows remote attackers to have denial-of-service impact via a crafted file.
local
low complexity
podofo-project CWE-119
5.5
2018-06-27 CVE-2018-12918 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in PBC Project PBC
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcB_register_fields in bootstrap.c.
network
low complexity
pbc-project CWE-119
critical
9.8
2018-06-27 CVE-2018-12916 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in PBC Project PBC
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcP_message_default in proto.c.
network
low complexity
pbc-project CWE-119
critical
9.8
2018-06-26 CVE-2018-10594 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Deltaww Commgr 1.08
Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network packets via a specific network port, causing the buffer to be overwritten.
network
low complexity
deltaww CWE-119
critical
9.8
2018-06-26 CVE-2018-10664 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Axis products
An issue was discovered in the httpd process in multiple models of Axis IP Cameras.
network
low complexity
axis CWE-119
7.5
2018-06-26 CVE-2018-10659 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Axis products
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction.
network
low complexity
axis CWE-119
7.5