Vulnerabilities > Improper Restriction of Operations within the Bounds of a Memory Buffer

DATE CVE VULNERABILITY TITLE RISK
2017-04-28 CVE-2017-2113 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Iodata products
Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
low complexity
iodata CWE-119
8.8
2017-04-28 CVE-2017-7895 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
network
low complexity
linux debian CWE-119
critical
9.8
2017-04-27 CVE-2017-8305 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in 13Thmonkey Udfclient
The UDFclient (before 0.8.8) custom strlcpy implementation has a buffer overflow.
network
low complexity
13thmonkey CWE-119
critical
9.8
2017-04-27 CVE-2017-8289 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Riot Project Riot
Stack-based buffer overflow in the ipv6_addr_from_str function in sys/net/network_layer/ipv6/addr/ipv6_addr_from_str.c in RIOT prior to 2017-04-25 allows local attackers, and potentially remote attackers, to cause a denial of service or possibly have unspecified other impact via a malformed IPv6 address.
network
low complexity
riot-project CWE-119
critical
9.8
2017-04-27 CVE-2017-8287 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Freetype
FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c.
network
low complexity
freetype CWE-119
critical
9.8
2017-04-27 CVE-2017-6037 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in We-Con Levi Studio HMI Editor 1.8.0
A Heap-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1.
network
low complexity
we-con CWE-119
8.8
2017-04-27 CVE-2017-6035 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in We-Con Levi Studio HMI Editor 1.8.0
A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1.
network
low complexity
we-con CWE-119
8.8
2017-04-26 CVE-2017-7720 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Privatetunnel 2.7/2.8
Buffer overflow in PrivateTunnel 2.7 and 2.8 allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long password.
local
low complexity
privatetunnel CWE-119
7.8
2017-04-25 CVE-2017-1274 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in IBM Domino
IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker to execute arbitrary code by specifying a large mailbox name.
network
low complexity
ibm CWE-119
8.8
2017-04-25 CVE-2016-8030 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Mcafee Virusscan Enterprise 8.8/8.8.0
A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link.
network
low complexity
mcafee CWE-119
4.3