Vulnerabilities > Out-of-bounds Write

DATE CVE VULNERABILITY TITLE RISK
2019-04-01 CVE-2019-5518 Out-of-bounds Write vulnerability in VMWare Esxi, Fusion and Workstation
VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10.1.6) contain an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI (Universal Host Controller Interface).
low complexity
vmware CWE-787
6.8
2019-03-29 CVE-2019-10269 Out-of-bounds Write vulnerability in multiple products
BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name in a .alt file.
network
low complexity
burrow-wheeler-aligner-project canonical CWE-787
critical
9.8
2019-03-27 CVE-2019-0161 Out-of-bounds Write vulnerability in Tianocore EDK II
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.
local
low complexity
tianocore CWE-787
5.5
2019-03-27 CVE-2019-0160 Out-of-bounds Write vulnerability in multiple products
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.
network
low complexity
tianocore opensuse fedoraproject redhat CWE-787
critical
9.8
2019-03-27 CVE-2018-12183 Out-of-bounds Write vulnerability in Tianocore EDK II
Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
low complexity
tianocore CWE-787
6.8
2019-03-27 CVE-2018-12181 Out-of-bounds Write vulnerability in Tianocore EDK II
Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access.
local
low complexity
tianocore CWE-787
6.0
2019-03-27 CVE-2018-12180 Out-of-bounds Write vulnerability in multiple products
Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access.
network
low complexity
tianocore opensuse CWE-787
8.8
2019-03-27 CVE-2019-6536 Out-of-bounds Write vulnerability in Lcds Laquis Scada 4.1.0.4150
Opening a specially crafted LCDS LAquis SCADA before 4.3.1.71 ELS file may result in a write past the end of an allocated buffer, which may allow an attacker to execute remote code in the context of the current process.
local
low complexity
lcds CWE-787
7.8
2019-03-26 CVE-2019-8981 Out-of-bounds Write vulnerability in Axtls Project Axtls
tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value is mismanaged.
network
low complexity
axtls-project CWE-787
critical
9.8
2019-03-26 CVE-2019-7714 Out-of-bounds Write vulnerability in GHS Integrity Rtos 5.0.4
An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4.
network
low complexity
ghs CWE-787
critical
9.8