Vulnerabilities (CVE)

Filtered by CWE-120
Total 2290 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-39749 1 Dlink 2 Dap-2660, Dap-2660 Firmware 2023-08-24 N/A 9.8 CRITICAL
D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource. This vulnerability is exploited via a crafted GET request.
CVE-2023-39750 1 Dlink 2 Dap-2660, Dap-2660 Firmware 2023-08-24 N/A 9.8 CRITICAL
D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability is exploited via a crafted POST request.
CVE-2023-4029 1 Lenovo 52 K14 Type 21cu, K14 Type 21cu Firmware, K14 Type 21cv and 49 more 2023-08-24 N/A 6.7 MEDIUM
A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2023-4028 1 Lenovo 58 13w Yoga, 13w Yoga Firmware, 13w Yoga Gen 2 and 55 more 2023-08-24 N/A 6.7 MEDIUM
A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2023-34419 1 Lenovo 60 Legion 5-15ach6, Legion 5-15ach6 Firmware, Legion 5-15ach6a and 57 more 2023-08-24 N/A 6.7 MEDIUM
A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2023-39673 1 Tenda 2 Ac15, Ac15 Firmware 2023-08-23 N/A 9.8 CRITICAL
Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34().
CVE-2023-39670 1 Tenda 2 Ac6, Ac6 Firmware 2023-08-23 N/A 9.8 CRITICAL
Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets.
CVE-2023-39672 1 Tenda 2 Wh450a, Wh450a Firmware 2023-08-23 N/A 9.8 CRITICAL
Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets.
CVE-2023-39454 1 Elecom 6 Wrc-x1800gs-b, Wrc-x1800gs-b Firmware, Wrc-x1800gsa-b and 3 more 2023-08-23 N/A 9.8 CRITICAL
Buffer overflow vulnerability in WRC-X1800GS-B v1.13 and earlier, WRC-X1800GSA-B v1.13 and earlier, and WRC-X1800GSH-B v1.13 and earlier allows an unauthenticated attacker to execute arbitrary code.
CVE-2023-29468 1 Ti 1 Wilink8-wifi-mcp8 2023-08-22 N/A 9.8 CRITICAL
The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID that can be parsed in a management frame. Using a specially crafted frame, a buffer overflow can be triggered that can potentially lead to remote code execution. This affects WILINK8-WIFI-MCP8 version 8.5_SP3 and earlier.
CVE-2023-38850 1 Msweet 1 Codedoc 2023-08-22 N/A 5.5 MEDIUM
Buffer Overflow vulnerability in Michaelrsweet codedoc v.3.7 allows an attacker to cause a denial of service via the codedoc.c:1742 comppnent.
CVE-2020-28840 1 Matthiaswandel 1 Jhead 2023-08-21 N/A 7.8 HIGH
Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service (DoS).
CVE-2023-39386 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 7.5 HIGH
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.
CVE-2021-28835 1 Xnview 1 Xnview 2023-08-17 N/A 7.8 HIGH
Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.
CVE-2023-39388 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 7.5 HIGH
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.
CVE-2023-39389 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 7.5 HIGH
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.
CVE-2020-23705 1 Rockcarry 1 Ffjpeg 2023-08-17 4.3 MEDIUM 6.5 MEDIUM
A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file.
CVE-2021-44957 1 Rockcarry 1 Ffjpeg 2023-08-17 4.3 MEDIUM 6.5 MEDIUM
Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfif_encode function at ffjpeg/src/jfif.c (line 708) could cause a Denial of Service by using a crafted jpeg file.
CVE-2020-24222 1 Rockcarry 1 Ffjpeg 2023-08-17 N/A 7.8 HIGH
Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code due to an issue with ALIGN.
CVE-2021-28427 1 Xnview 1 Xnview 2023-08-17 N/A 7.8 HIGH
Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.