Vulnerabilities > Out-of-bounds Write

DATE CVE VULNERABILITY TITLE RISK
2023-09-11 CVE-2023-4584 Out-of-bounds Write vulnerability in Mozilla Thunderbird
Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1.
network
low complexity
mozilla CWE-787
8.8
2023-09-11 CVE-2023-4585 Out-of-bounds Write vulnerability in Mozilla Thunderbird
Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1.
network
low complexity
mozilla CWE-787
8.8
2023-09-08 CVE-2021-33834 Out-of-bounds Write vulnerability in Insyde H2Offt and Iscflashx64.Sys
An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00.
local
low complexity
insyde CWE-787
7.1
2023-09-08 CVE-2023-36184 Out-of-bounds Write vulnerability in multiple products
CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json.
7.5
2023-09-07 CVE-2023-30800 Out-of-bounds Write vulnerability in Mikrotik Routeros
The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue.
network
low complexity
mikrotik CWE-787
7.5
2023-09-07 CVE-2023-40942 Out-of-bounds Write vulnerability in Tendacn AC9 Firmware 15.03.06.42Multitd0
Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg.
network
low complexity
tendacn CWE-787
critical
9.8
2023-09-06 CVE-2023-38485 Out-of-bounds Write vulnerability in Arubanetworks Arubaos
Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code early in the boot sequence.
local
high complexity
arubanetworks CWE-787
6.4
2023-09-06 CVE-2023-20250 Out-of-bounds Write vulnerability in Cisco products
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the web-based management interface.
network
low complexity
cisco CWE-787
7.2
2023-09-05 CVE-2023-21654 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in Audio during playback session with audio effects enabled.
local
low complexity
qualcomm CWE-787
7.8
2023-09-05 CVE-2023-21663 Out-of-bounds Write vulnerability in Qualcomm products
Memory Corruption while accessing metadata in Display.
local
low complexity
qualcomm CWE-787
7.8