Vulnerabilities > Out-of-bounds Write

DATE CVE VULNERABILITY TITLE RISK
2019-09-24 CVE-2019-5094 Out-of-bounds Write vulnerability in multiple products
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3.
6.7
2019-09-23 CVE-2019-1367 Out-of-bounds Write vulnerability in Microsoft Internet Explorer 10/11/9
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.
network
high complexity
microsoft CWE-787
7.5
2019-09-19 CVE-2019-9720 Out-of-bounds Write vulnerability in Libav
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.
network
low complexity
libav CWE-787
6.5
2019-09-19 CVE-2019-9719 Out-of-bounds Write vulnerability in Libav
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.
network
low complexity
libav CWE-787
8.8
2019-09-19 CVE-2019-15943 Out-of-bounds Write vulnerability in Valvesoftware Counter-Strike: Global Offensive
vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a memset call.
network
low complexity
valvesoftware CWE-787
8.8
2019-09-18 CVE-2019-13556 Out-of-bounds Write vulnerability in Advantech Webaccess
In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data.
network
low complexity
advantech CWE-787
8.8
2019-09-17 CVE-2019-16395 Out-of-bounds Write vulnerability in Gnucobol Project Gnucobol 2.2
GnuCOBOL 2.2 has a stack-based buffer overflow in the cb_name() function in cobc/tree.c via crafted COBOL source code.
local
low complexity
gnucobol-project CWE-787
7.8
2019-09-16 CVE-2019-5482 Out-of-bounds Write vulnerability in multiple products
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
network
low complexity
haxx fedoraproject opensuse netapp oracle debian CWE-787
critical
9.8
2019-09-16 CVE-2019-16366 Out-of-bounds Write vulnerability in Moddable and XS
In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst.
network
low complexity
moddable CWE-787
critical
9.8
2019-09-16 CVE-2019-16352 Out-of-bounds Write vulnerability in Rockcarry Ffjpeg
ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c.
network
low complexity
rockcarry CWE-787
6.5