Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,087)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-4502 2Bfgminer Sgminer Project 2Bfgminer Sgminer May 6, 2026 Jul 23, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negat...Show more Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request.Show less
CVE-2014-4501 3Bfgminer Cgminer ProjectSgminer Project 3Bfgminer CgminerSgminer May 6, 2026 Jul 23, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to...Show more Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.Show less
CVE-2014-3939 1Autodesk 1Sketchbook Pro May 6, 2026 Jul 23, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file.
CVE-2014-1549 1Mozilla 2Firefox Thunderbird May 6, 2026 Jul 23, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to...Show more The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted audio content that is improperly handled during playback buffering.Show less
CVE-2014-4947 1Citrix 1Xenserver May 6, 2026 Jul 22, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and attack vectors.
CVE-2014-4342 3Debian MitRedhat 7Debian Linux Enterprise Linux DesktopEnterprise Linux Hpc Node+4 more May 6, 2026 Jul 20, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a G...Show more MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session.Show less
CVE-2014-2364 1Advantech 1Advantech Webaccess May 6, 2026 Jul 19, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) Set...Show more Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx.Show less
CVE-2014-3953 1Freebsd 1Freebsd May 6, 2026 Jul 15, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via a (1) SCTP_...Show more FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via a (1) SCTP_SNDRCV, (2) SCTP_EXTRCV, or (3) SCTP_RCVINFO SCTP cmsg or a (4) SCTP_PEER_ADDR_CHANGE, (5) SCTP_REMOTE_ERROR, or (6) SCTP_AUTHENTICATION_EVENT notification.Show less
CVE-2014-3952 1Freebsd 1Freebsd May 6, 2026 Jul 15, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize the buffer between the header and data of a control message, which allows local users to obtain sensitive informatio...Show more FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize the buffer between the header and data of a control message, which allows local users to obtain sensitive information from kernel memory via unspecified vectors.Show less
CVE-2013-6691 1Cisco 1Adaptive Security Appliance Software May 6, 2026 Jul 14, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The WebVPN CIFS implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0(.4.1) and earlier allows remote CIFS servers to cause a denial of service (device reload) via a long share list, aka Bug ID CSCuj8334...Show more The WebVPN CIFS implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0(.4.1) and earlier allows remote CIFS servers to cause a denial of service (device reload) via a long share list, aka Bug ID CSCuj83344.Show less
CVE-2014-3888 1Yokogawa 15B/m9000 Vp B/m9000 Vp SoftwareB/m9000cs+12 more May 6, 2026 Jul 10, 2014 N/A· v4 N/A· v3 8.3 HIGH· v2 Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP...Show more Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.Show less
CVE-2014-3311 1Cisco 2Webex Meeting Center Webex Meetings Server May 6, 2026 Jul 10, 2014 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCu...Show more Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467.Show less
CVE-2012-4988 1Xnview 1Xnview May 6, 2026 Jul 9, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file.
CVE-2014-3891 1Rimarts 1Becky! Internet Mail May 6, 2026 Jul 9, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Buffer overflow in RimArts Becky! Internet Mail before 2.68 allows remote POP3 servers to execute arbitrary code via a crafted response.
CVE-2014-3478 2Christos Zoulas Php 2File Php May 6, 2026 Jul 9, 2014 N/A· v4 6.5 MEDIUM· v3 5.0 MEDIUM· v2 Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (applicati...Show more Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.Show less
CVE-2014-0207 5Christos Zoulas DebianOpensuse+2 more 5Debian Linux FileLinux+2 more May 6, 2026 Jul 9, 2014 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and...Show more The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.Show less
CVE-2014-2813 1Microsoft 1Internet Explorer May 6, 2026 Jul 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability,"...Show more Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2786 and CVE-2014-2792.Show less
CVE-2014-2809 1Microsoft 1Internet Explorer May 6, 2026 Jul 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability,"...Show more Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2800 and CVE-2014-2807.Show less
CVE-2014-2807 1Microsoft 1Internet Explorer May 6, 2026 Jul 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability,"...Show more Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2800 and CVE-2014-2809.Show less
CVE-2014-2806 1Microsoft 1Internet Explorer May 6, 2026 Jul 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a differe...Show more Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2787, CVE-2014-2790, and CVE-2014-2802.Show less

Previous 1...463464465...705 Next