Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CVEs (4,443)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-27518 1Contec 2Sv Cpt Mc310 Firmware Sv Cpt Mc310f Firmware Jun 17, 2026 May 23, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute arbi...Show more Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute arbitrary code.Show less
CVE-2023-2597 1Eclipse 1Openj9 Jun 17, 2026 May 22, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not properly checked against the size of the buffer.
CVE-2023-20189 1Cisco 229Business 250 16p 2g Firmware Business 250 16t 2g FirmwareBusiness 250 24fp 4g Firmware+226 more Jun 17, 2026 May 18, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c...Show more Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2023-20162 1Cisco 229Business 250 16p 2g Firmware Business 250 16t 2g FirmwareBusiness 250 24fp 4g Firmware+226 more Jun 17, 2026 May 18, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c...Show more Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2023-20161 1Cisco 229Business 250 16p 2g Firmware Business 250 16t 2g FirmwareBusiness 250 24fp 4g Firmware+226 more Jun 17, 2026 May 18, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c...Show more Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2023-20160 1Cisco 229Business 250 16p 2g Firmware Business 250 16t 2g FirmwareBusiness 250 24fp 4g Firmware+226 more Jun 17, 2026 May 18, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c...Show more Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2023-20159 1Cisco 229Business 250 16p 2g Firmware Business 250 16t 2g FirmwareBusiness 250 24fp 4g Firmware+226 more Jun 17, 2026 May 18, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c...Show more Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2023-20158 1Cisco 229Business 250 16p 2g Firmware Business 250 16t 2g FirmwareBusiness 250 24fp 4g Firmware+226 more Jun 17, 2026 May 18, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c...Show more Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2023-20157 1Cisco 229Business 250 16p 2g Firmware Business 250 16t 2g FirmwareBusiness 250 24fp 4g Firmware+226 more Jun 17, 2026 May 18, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c...Show more Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2023-20156 1Cisco 229Business 250 16p 2g Firmware Business 250 16t 2g FirmwareBusiness 250 24fp 4g Firmware+226 more Jun 17, 2026 May 18, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c...Show more Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2023-20024 1Cisco 229Business 250 16p 2g Firmware Business 250 16t 2g FirmwareBusiness 250 24fp 4g Firmware+226 more Jun 17, 2026 May 18, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c...Show more Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2023-31475 1Gl Inet 32Gl A1300 Firmware Gl Ap1300 FirmwareGl Ap1300lte Firmware+29 more Jun 17, 2026 May 11, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a...Show more An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a buffer without checking the size of the buffer.Show less
CVE-2021-45345 1Webcamserver Project 1Webcamserver Jun 17, 2026 May 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Buffer Overflow vulnerability found in En3rgy WebcamServer v.0.5.2 allows a remote attacker to cause a denial of service via the WebcamServer.exe file.
CVE-2023-22661 1Intel 10Server System D50tnp1mhcpac Firmware Server System D50tnp1mhcrac FirmwareServer System D50tnp1mhcrlc Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Buffer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.
CVE-2022-43507 1Intel 1Quickassist Technology Engine Jun 17, 2026 May 10, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access.
CVE-2022-36330 1Westerndigital 3My Cloud Home Duo Firmware My Cloud Home FirmwareSandisk Ibi Firmware Jun 17, 2026 May 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An at...Show more A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An attacker would require exploitation of another vulnerability to raise their privileges in order to exploit this buffer overflow vulnerability. This issue affects My Cloud Home and My Cloud Home Duo: before 9.4.0-191; ibi: before 9.4.0-191. Show less
CVE-2021-26354 1Amd 152Amd 3015ce Firmware Amd 3015e FirmwareEpyc 7002 Firmware+149 more Jun 17, 2026 May 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity.
CVE-2023-30085 1Libming 1Libming Jun 17, 2026 May 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws function in util/decompile.c.
CVE-2023-30083 1Libming 1Libming Jun 17, 2026 May 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVar_N in util/decompile.c.
CVE-2023-31979 2Catdoc Project Fossies 2Catdoc Catdoc Jun 17, 2026 May 9, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c.

Previous 1...130131132...223 Next