Vulnerabilities > Out-of-bounds Write

DATE CVE VULNERABILITY TITLE RISK
2018-03-20 CVE-2018-5717 Out-of-bounds Write vulnerability in NCR S2 Dispenser Controller Firmware
Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
network
low complexity
ncr CWE-787
7.5
2018-03-19 CVE-2018-1171 Out-of-bounds Write vulnerability in multiple products
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z.
local
high complexity
joyent oracle CWE-787
7.0
2018-03-16 CVE-2018-1068 Out-of-bounds Write vulnerability in multiple products
A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging.
local
low complexity
linux canonical debian redhat CWE-787
6.7
2018-03-15 CVE-2018-5476 Out-of-bounds Write vulnerability in Deltaww Delta Industrial Automation Dopsoft
A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior.
local
low complexity
deltaww CWE-787
7.8
2018-03-15 CVE-2017-16747 Out-of-bounds Write vulnerability in Deltaww Delta Industrial Automation Screen Editor 2.00.23.00
An Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior.
local
low complexity
deltaww CWE-787
7.8
2018-03-14 CVE-2018-1000120 Out-of-bounds Write vulnerability in multiple products
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
network
low complexity
debian canonical haxx redhat oracle CWE-787
critical
9.8
2018-03-14 CVE-2018-0939 Out-of-bounds Write vulnerability in Microsoft Edge
ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability".
network
low complexity
microsoft CWE-787
4.3
2018-03-14 CVE-2018-0937 Out-of-bounds Write vulnerability in Microsoft Edge
ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability".
network
high complexity
microsoft CWE-787
7.5
2018-03-14 CVE-2018-0936 Out-of-bounds Write vulnerability in Microsoft Edge
ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability".
network
high complexity
microsoft CWE-787
7.5
2018-03-14 CVE-2018-0933 Out-of-bounds Write vulnerability in Microsoft Chakracore and Edge
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability".
network
high complexity
microsoft CWE-787
7.5