Vulnerabilities (CVE)

Filtered by CWE-787
Total 11736 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-9086 1 Huawei 2 B612, B612 Firmware 2025-01-13 N/A 4.3 MEDIUM
There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2017-08234) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9086.
CVE-2020-9211 1 Huawei 2 Mate 30, Mate 30 Firmware 2025-01-13 N/A 7.2 HIGH
There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can exploit this vulnerability by modifying some configuration to cause out-of-bound read and write, causing denial of service. (Vulnerability ID: HWPSIRT-2020-05103) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9211.
CVE-2023-52482 2 Debian, Linux 2 Debian Linux, Linux Kernel 2025-01-13 N/A 7.8 HIGH
In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too.
CVE-2023-43549 1 Qualcomm 278 Ar8035, Ar8035 Firmware, Csr8811 and 275 more 2025-01-10 N/A 7.8 HIGH
Memory corruption while processing TPC target power table in FTM TPC.
CVE-2017-17969 2 7-zip, Debian 3 7-zip, P7zip, Debian Linux 2025-01-10 6.8 MEDIUM 7.8 HIGH
Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.
CVE-2023-23605 1 Mozilla 3 Firefox, Firefox Esr, Thunderbird 2025-01-10 N/A 8.8 HIGH
Memory safety bugs present in Firefox 108 and Firefox ESR 102.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.
CVE-2023-23606 1 Mozilla 1 Firefox 2025-01-10 N/A 8.8 HIGH
Memory safety bugs present in Firefox 108. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 109.
CVE-2023-43540 1 Qualcomm 58 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 55 more 2025-01-10 N/A 7.8 HIGH
Memory corruption while processing the IOCTL FM HCI WRITE request.
CVE-2023-28582 1 Qualcomm 86 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 83 more 2025-01-10 N/A N/A
Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.
CVE-2023-33632 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 N/A 7.2 HIGH
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm.
CVE-2023-33631 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 N/A 7.2 HIGH
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelSTList interface at /goform/aspForm.
CVE-2023-33633 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 N/A 7.2 HIGH
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm.
CVE-2023-33485 1 Totolink 2 X5000r, X5000r Firmware 2025-01-10 N/A 8.8 HIGH
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the addEffect function.
CVE-2023-33628 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 N/A 7.2 HIGH
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm.
CVE-2023-33629 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 N/A 7.2 HIGH
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.
CVE-2023-33627 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 N/A 7.2 HIGH
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm.
CVE-2023-33640 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 N/A 7.2 HIGH
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm.
CVE-2023-33643 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 N/A 7.2 HIGH
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm.
CVE-2023-33638 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 N/A 7.2 HIGH
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm.
CVE-2023-33634 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 N/A 7.2 HIGH
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm.