Vulnerabilities (CVE)

Filtered by CWE-119
Total 11928 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-1000100 2 Canonical, Gpac Project 2 Ubuntu Linux, Gpac 2024-11-21 6.8 MEDIUM 7.8 HIGH
GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avc_ext.c lines 2417 to 2420 that can result in Heap chunks being modified, this could lead to RCE. This attack appear to be exploitable via an attacker supplied MP4 file that when run by the victim may result in RCE.
CVE-2018-1000097 3 Canonical, Debian, Gnu 3 Ubuntu Linux, Debian Linux, Sharutils 2024-11-21 6.8 MEDIUM 7.8 HIGH
Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..
CVE-2018-1000091 1 Kadnode Project 1 Kadnode 2024-11-21 6.5 MEDIUM 8.8 HIGH
KadNode version version 2.2.0 contains a Buffer Overflow vulnerability in Arguments when starting up the binary that can result in Control of program execution flow, leading to remote code execution.
CVE-2018-1000050 1 Stb Vorbis Project 1 Stb Vorbis 2024-11-21 6.8 MEDIUM 8.8 HIGH
Sean Barrett stb_vorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg Vorbis file. This vulnerability appears to have been fixed in 1.13.
CVE-2018-0721 1 Qnap 1 Qts 2024-11-21 10.0 HIGH 7.7 HIGH
Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions on build 20180710.
CVE-2018-0684 1 Neo 2 Debun Imap, Debun Pop 2024-11-21 7.5 HIGH 9.8 CRITICAL
Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier) allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via multipart/form-data format data.
CVE-2018-0683 1 Neo 2 Debun Imap, Debun Pop 2024-11-21 7.5 HIGH 9.8 CRITICAL
Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via Cookie data.
CVE-2018-0678 1 Panasonic 2 Bn-sdwbp3, Bn-sdwbp3 Firmware 2024-11-21 5.2 MEDIUM 6.8 MEDIUM
Buffer overflow in BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to execute arbitrary code via unspecified vectors.
CVE-2018-0668 1 Mnc 1 Inplc-rt 2024-11-21 7.5 HIGH 9.8 CRITICAL
Buffer overflow in INplc-RT 3.08 and earlier allows remote attackers to cause denial-of-service (DoS) condition that may result in executing arbtrary code via unspecified vectors.
CVE-2018-0651 1 Yokogawa 8 Astplanner, Idefine For Prosafe-rs, Idefine For Prosafe-rs Firmware and 5 more 2024-11-21 7.5 HIGH 9.8 CRITICAL
Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier) allows remote attackers to stop the license management function or execute an arbitrary program via unspecified vectors.
CVE-2018-0644 1 Canonical 1 Ubuntu Linux 2024-11-21 4.0 MEDIUM 6.5 MEDIUM
Buffer overflow in Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u4jma1 and earlier, and Ubuntu16.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u5jma1 and earlier allows authenticated attackers to cause denial-of-service (DoS) condition via unspecified vectors.
CVE-2018-0641 1 Nec 2 Aterm Hc100rc, Aterm Hc100rc Firmware 2024-11-21 6.5 MEDIUM 7.2 HIGH
Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via tools_system.cgi date parameter, time parameter, and offset parameter.
CVE-2018-0640 1 Nec 2 Aterm Hc100rc, Aterm Hc100rc Firmware 2024-11-21 6.5 MEDIUM 7.2 HIGH
Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter.
CVE-2018-0633 1 Nec 2 Aterm W300p, Aterm W300p Firmware 2024-11-21 6.5 MEDIUM 7.2 HIGH
Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via submit-url parameter.
CVE-2018-0632 1 Nec 2 Aterm W300p, Aterm W300p Firmware 2024-11-21 6.5 MEDIUM 7.2 HIGH
Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via HTTP request and response.
CVE-2018-0608 1 Dena 1 H2o 2024-11-21 7.5 HIGH 9.8 CRITICAL
Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via unspecified vectors.
CVE-2018-0555 1 Buffalo 2 Wzr-1750dhp2, Wzr-1750dhp2 Firmware 2024-11-21 9.3 HIGH 7.8 HIGH
Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file.
CVE-2018-0541 1 Tinyftp Project 1 Tinyftp 2024-11-21 10.0 HIGH 9.8 CRITICAL
Buffer overflow in Tiny FTP Daemon Ver0.52d allows an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code via unspecified vectors.
CVE-2018-0522 1 Buffalo 2 Wxr-1900dhp2, Wxr-1900dhp2 Firmware 2024-11-21 6.8 MEDIUM 7.8 HIGH
Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file.
CVE-2018-0510 1 Kkcald Project 1 Kkcald 2024-11-21 7.5 HIGH 9.8 CRITICAL
Buffer overflow in epg search result viewer (kkcald) 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS (denial of service) attacks via unspecified vectors.