← Back
CWE-120

4,417 CVEs • Abstraction: Base • Likelihood of Exploit: High

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

JSON object

Loading...

CVEs (4,417)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-41206
1Justdan96
1Tsmuxer
Jun 17, 2026
Nov 14, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A stack-based buffer over-read in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Information Disclosure via a crafted TS video file.
CVE-2024-50838
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the d and pi parameters.Show less
CVE-2024-50840
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the class...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the class_name parameter.Show less
CVE-2024-50839
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the subject_code and title parameters.Show less
CVE-2024-50305
1Apache
1Traffic Server
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the...Show more
Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.Show less
CVE-2024-50956
-
-
Jun 17, 2026
Nov 13, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A buffer overflow in the RecvSocketData function of Inovance HCPLC_AM401-CPU1608TPTN 21.38.0.0, HCPLC_AM402-CPU1608TPTN 41.38.0.0, and HCPLC_AM403-CPU1608TN 81.38.0.0 allows attackers to cause a Denial of Service (DoS) o...Show more
A buffer overflow in the RecvSocketData function of Inovance HCPLC_AM401-CPU1608TPTN 21.38.0.0, HCPLC_AM402-CPU1608TPTN 41.38.0.0, and HCPLC_AM403-CPU1608TN 81.38.0.0 allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted Modbus message.Show less
CVE-2024-8882
1Zyxel
10Gs1900 10hp Firmware
Gs1900 16 FirmwareGs1900 24 Firmware+7 more
Jun 17, 2026
Nov 12, 2024
N/A· v4
4.5 MEDIUM· v3
N/A· v2
A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to cause denial...Show more
A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to cause denial of service (DoS) conditions via a crafted URL.Show less
CVE-2024-52533
3Debian
GnomeNetapp
4Active Iq Unified Manager
Debian LinuxGlib+1 more
Jun 17, 2026
Nov 11, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
CVE-2024-25254
1Mcafee
1Superscan
Jun 17, 2026
Nov 11, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter.
CVE-2024-25253
-
-
Jun 17, 2026
Nov 11, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module.
CVE-2024-50667
1Trendnet
1Tew 820ap Firmware
Jun 17, 2026
Nov 11, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6. The reason is that the check of ipv6 address is not sufficient, which all...Show more
The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6. The reason is that the check of ipv6 address is not sufficient, which allows attackers to construct payloads for attacks.Show less
CVE-2024-46952
2Artifex
Debian
2Debian Linux
Ghostscript
Jun 17, 2026
Nov 10, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).
CVE-2024-35426
1Lonelycoder
1Vmir
Jun 17, 2026
Nov 8, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
vmir e8117 was discovered to contain a stack overflow via the init_local_vars function at /src/vmir_wasm_parser.c.
CVE-2024-35422
1Lonelycoder
1Vmir
Jun 17, 2026
Nov 8, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
vmir e8117 was discovered to contain a heap buffer overflow via the wasm_call function at /src/vmir_wasm_parser.c.
CVE-2024-35420
1Kanaka
1Wac
Jun 17, 2026
Nov 8, 2024
N/A· v4
6.2 MEDIUM· v3
N/A· v2
wac commit 385e1 was discovered to contain a heap overflow.
CVE-2024-35419
1Kanaka
1Wac
Jun 17, 2026
Nov 8, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted wasm file.
CVE-2024-35418
1Kanaka
1Wac
Jun 17, 2026
Nov 8, 2024
N/A· v4
6.2 MEDIUM· v3
N/A· v2
wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted wasm file.
CVE-2024-35410
1Kanaka
1Wac
Jun 17, 2026
Nov 8, 2024
N/A· v4
6.2 MEDIUM· v3
N/A· v2
wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted wasm file.
CVE-2024-10964
1Emqx
1Neuron
Jun 17, 2026
Nov 7, 2024
5.3 MEDIUM· v4
9.8 CRITICAL· v3
6.5 MEDIUM· v2
A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handle_add_plugin in the library cmd.library of the file plugins/restful/plugin_handle.c. The manipulation leads...Show more
A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handle_add_plugin in the library cmd.library of the file plugins/restful/plugin_handle.c. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.Show less
CVE-2024-51409
1Tenda
1O3 Firmware
Jun 17, 2026
Nov 6, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in Tenda O3 v.1.0.0.5 allows a remote attacker to cause a denial of service via a network packet in a fixed format to a router running the corresponding version of the firmware.