Vulnerabilities (CVE)

Filtered by CWE-119
Total 11925 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-8074 1 Foxitsoftware 1 Foxit Pdf Sdk Activex 2016-04-04 6.8 MEDIUM N/A
Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global variables.
CVE-2014-2282 1 Wireshark 1 Wireshark 2016-04-04 4.3 MEDIUM N/A
The dissect_protocol_data_parameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted SS7 MTP3 packet.
CVE-2015-0555 1 Samsung 1 Ipolis Device Manager 2016-04-01 6.8 MEDIUM N/A
Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigValue or (2) WriteConfigValue function.
CVE-2014-1635 1 Belkin 2 N750 Wireless Router, N750 Wireless Router Firmware 2016-03-31 10.0 HIGH N/A
Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter.
CVE-2016-0804 1 Google 1 Android 2016-03-14 10.0 HIGH 9.8 CRITICAL
The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 improperly manages mDrmManagerClient objects, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25070434.
CVE-2016-0803 1 Google 1 Android 2016-03-10 10.0 HIGH 9.8 CRITICAL
libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation in the (1) SoftMPEG4Encoder or (2) SoftVPXEncoder component, aka internal bug 25812794.
CVE-2016-0212 1 Ibm 1 Tivoli Storage Manager Fastback 2016-03-03 10.0 HIGH 9.8 CRITICAL
Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2016-0213 and CVE-2016-0216.
CVE-2016-0213 1 Ibm 1 Tivoli Storage Manager Fastback 2016-03-03 10.0 HIGH 9.8 CRITICAL
Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2016-0212 and CVE-2016-0216.
CVE-2016-0216 1 Ibm 1 Tivoli Storage Manager Fastback 2016-03-03 10.0 HIGH 9.8 CRITICAL
Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2016-0212 and CVE-2016-0213.
CVE-2015-8773 1 Mcafee 1 File Lock 2016-02-25 7.8 HIGH 7.5 HIGH
Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service (system crash) via a long vault GUID in an ioctl call.
CVE-2016-0869 1 Microsys 1 Promotic 2016-02-23 7.1 HIGH 5.0 MEDIUM
Heap-based buffer overflow in MICROSYS PROMOTIC before 8.3.11 allows remote authenticated users to cause a denial of service via a malformed HTML document.
CVE-2015-7909 1 Hospira 2 Communication Engine, Lifecare Pca Infusion System 2016-02-09 7.5 HIGH 7.3 HIGH
Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and Plum A+3 Infusion System 13.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via traffic on TCP port 5000.
CVE-2016-0851 1 Advantech 1 Webaccess 2016-01-20 7.8 HIGH 7.5 HIGH
Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service (out-of-bounds memory access) via unspecified vectors.
CVE-2015-8306 1 Huawei 2 P8, P8 Firmware 2016-01-20 9.3 HIGH 7.8 HIGH
Buffer overflow in the HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 allows attackers to cause a denial of service (system crash) or execute arbitrary code via an unspecified parameter.
CVE-2015-7939 1 Unitronics 1 Visilogic Oplc Ide 2016-01-18 9.3 HIGH 9.6 CRITICAL
Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.
CVE-2015-8098 1 F5 1 Big-ip Access Policy Manager 2016-01-15 10.0 HIGH 9.8 CRITICAL
F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors related to processing a Citrix Remote Desktop connection through a virtual server configured with a remote desktop profile, aka an "Out-of-bounds memory vulnerability."
CVE-2016-1131 1 Dx Library Project 1 Dx Library 2016-01-08 6.8 MEDIUM 7.8 HIGH
Buffer overflow in the CL_vsprintf function in Takumi Yamada DX Library before 3.16 allows remote attackers to execute arbitrary code via a crafted string.
CVE-2015-7422 2 Ibm, Microsoft 2 I Access, Windows 2016-01-07 2.1 LOW 5.5 MEDIUM
Buffer overflow in IBM i Access 7.1 on Windows allows local users to cause a denial of service (application crash) via unspecified vectors.
CVE-2015-2895 1 Idera 1 Uptime Infrastructure Monitor 2015-12-31 7.5 HIGH 7.3 HIGH
Buffer overflow in the up.time client in Idera Uptime Infrastructure Monitor 7.4 might allow remote attackers to execute arbitrary code via long command input.
CVE-2014-1371 1 Apple 2 Mac Os X, Mac Os X Server 2015-12-22 7.5 HIGH N/A
Array index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code or cause a denial of service (incorrect function-pointer dereference and application crash) by leveraging access to a sandboxed application for sending a message.