Skip to main content

Buffer Overflow

39269 CVEs technique

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2022-24027 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24026 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24025 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24024 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24023 Aug 05, 22:15 HIGH POC This Week

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2022-24022 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24021 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24020 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24019 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24018 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24017 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24016 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24015 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24014 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24013 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24012 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24011 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24010 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24009 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24008 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24007 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24006 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-24005 Aug 05, 22:15 CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-23919 Aug 05, 22:15 CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-23918 Aug 05, 22:15 CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-23399 Aug 05, 22:15 CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-23103 Aug 05, 22:15 CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-21201 Aug 05, 22:15 HIGH POC This Week

A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVSS 3.1
8.8
EPSS
0.9%
CVE-2022-37398 Aug 05, 17:15 HIGH This Week

A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow Adm Asustor
NVD
CVSS 3.1
8.8
EPSS
0.6%
CVE-2022-33730 Aug 05, 16:15 MEDIUM This Month

Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Google Memory Corruption Samsung +1
NVD
CVSS 3.1
6.8
EPSS
0.2%
CVE-2022-33719 Aug 05, 16:15 CRITICAL Act Now

Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Google Android
NVD
CVSS 3.1
9.8
EPSS
0.3%
CVE-2022-33717 Aug 05, 16:15 MEDIUM This Month

A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
4.4
EPSS
0.1%
CVE-2022-37434 Aug 05, 07:15 CRITICAL POC PATCH THREAT CISA Act Now

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Apple Debian Active Iq Unified Manager +19
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
16.0%
CVE-2022-37415 Aug 05, 04:15 HIGH POC This Week

The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Sparkio Sys
NVD GitHub
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-35927 Aug 04, 21:15 CRITICAL PATCH Act Now

Contiki-NG is an open-source, cross-platform operating system for IoT devices. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Contiki Ng
NVD GitHub
CVSS 3.1
9.8
EPSS
1.7%
CVE-2022-35926 Aug 04, 21:15 HIGH PATCH This Week

Contiki-NG is an open-source, cross-platform operating system for IoT devices. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Contiki Ng
NVD GitHub
CVSS 3.1
7.5
EPSS
1.0%
CVE-2022-34970 Aug 04, 19:15 CRITICAL POC PATCH Act Now

Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Crow Crowcpp
NVD GitHub
CVSS 3.1
9.8
EPSS
2.9%
CVE-2022-33968 Aug 04, 18:15 MEDIUM This Month

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, when an LTM monitor or APM SSO is configured on a. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Big Ip Application Security Manager Big Ip Access Policy Manager Big Ip Advanced Firewall Manager +9
NVD
CVSS 3.1
4.9
EPSS
0.5%
CVE-2022-32455 Aug 04, 18:15 HIGH This Week

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when a BIG-IP LTM Client SSL profile is configured on a virtual server to perform. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Big Ip Application Security Manager Big Ip Access Policy Manager Big Ip Advanced Firewall Manager Big Ip Analytics +8
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2022-35506 Aug 03, 21:15 HIGH POC This Week

TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Triplecross
NVD GitHub
CVSS 3.1
7.5
EPSS
0.8%
CVE-2022-35161 Aug 03, 21:15 CRITICAL POC Act Now

GVRET Stable Release as of Aug 15, 2015 was discovered to contain a buffer overflow via the handleConfigCmd function at SerialConsole.cpp. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Generalized Electric Vehicle Reverse Engineering Tool
NVD GitHub
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-35928 Aug 03, 20:15 MEDIUM PATCH This Month

AES Crypt is a file encryption software for multiple platforms. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Aescrypt Aes Crypt
NVD GitHub
CVSS 3.1
5.5
EPSS
0.2%
CVE-2022-34992 Aug 03, 18:15 HIGH POC This Week

Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Luadec
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-35867 Aug 03, 16:15 MEDIUM This Month

This vulnerability allows local attackers to escalate privileges on affected installations of xhyve. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow Xhyve Xhyve Project
NVD
CVSS 3.1
6.7
EPSS
0.3%
CVE-2022-28668 Aug 03, 16:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Dicom Viewer Pro Santesoft
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-34973 Aug 03, 15:15 HIGH POC THREAT This Week

D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dir 820L Firmware
NVD GitHub
CVSS 3.1
7.5
EPSS
14.8%
CVE-2022-32292 Aug 03, 14:15 CRITICAL PATCH Act Now

In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Debian Intel Debian Linux +1
NVD
CVSS 3.1
9.8
EPSS
2.4%
CVE-2022-35737 Aug 03, 06:15 Cargo HIGH POC PATCH THREAT This Week

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Splunk Sqlite Universal Forwarder Ontap Select Deploy Administration Utility +1
NVD
CVSS 3.1
7.5
EPSS
18.0%
CVE-2022-34927 Aug 03, 01:15 HIGH POC PATCH This Week

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Milkytracker Milkytracker Project
NVD GitHub
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-35222 Aug 02, 16:15 MEDIUM This Month

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Hicos Natural Person Credential Component Client Hinet
NVD
CVSS 3.1
6.8
EPSS
0.4%
CVE-2022-35219 Aug 02, 16:15 MEDIUM This Month

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Health Insurance Web Service Component Nhi
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2022-35218 Aug 02, 16:15 MEDIUM This Month

The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Health Insurance Web Service Component Nhi
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2022-35217 Aug 02, 16:15 HIGH This Week

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Health Insurance Web Service Component Nhi
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-2598 Aug 01, 15:15 MEDIUM POC PATCH This Month

Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Debian Debian Linux Vim
NVD GitHub
CVSS 3.1
5.5
EPSS
0.9%
CVE-2022-2581 Aug 01, 15:15 HIGH POC PATCH This Week

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Information Disclosure Vim
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-2580 Aug 01, 15:15 HIGH POC PATCH This Week

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Heap Overflow Vim
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-2571 Aug 01, 15:15 HIGH POC PATCH This Week

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Heap Overflow Vim
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-26445 Aug 01, 14:15 MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Mediatek Mt7612 Firmware +12
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-26444 Aug 01, 14:15 MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Mediatek Mt7612 Firmware +12
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-26443 Aug 01, 14:15 MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Mediatek Mt7612 Firmware +12
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-26442 Aug 01, 14:15 MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Mediatek Mt7612 Firmware +12
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-26441 Aug 01, 14:15 MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Mediatek Mt7612 Firmware +12
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-26440 Aug 01, 14:15 MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Mediatek Mt7612 Firmware +12
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-26439 Aug 01, 14:15 MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Mediatek Mt7612 Firmware +12
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-26438 Aug 01, 14:15 MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Mediatek Mt7612 Firmware +12
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-26437 Aug 01, 14:15 CRITICAL Act Now

In httpclient, there is a possible out of bounds write due to uninitialized data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Mediatek Nbiot Sdk
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2022-26436 Aug 01, 14:15 MEDIUM This Month

In emi mpu, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
4.4
EPSS
0.1%
CVE-2022-26435 Aug 01, 14:15 MEDIUM This Month

In mailbox, there is a possible out of bounds write due to type confusion. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android +2
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-26434 Aug 01, 14:15 MEDIUM This Month

In mailbox, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android +2
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-26433 Aug 01, 14:15 MEDIUM This Month

In mailbox, there is a possible out of bounds write due to type confusion. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android +2
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-26432 Aug 01, 14:15 MEDIUM This Month

In mailbox, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android +2
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-26431 Aug 01, 14:15 MEDIUM This Month

In mailbox, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android +2
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-26430 Aug 01, 14:15 MEDIUM This Month

In mailbox, there is a possible out of bounds write due to type confusion. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android +2
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-26428 Aug 01, 14:15 MEDIUM This Month

In video codec, there is a possible memory corruption due to a race condition. Rated medium severity (CVSS 6.4). No vendor patch available.

Privilege Escalation Buffer Overflow Google Race Condition Android
NVD
CVSS 3.1
6.4
EPSS
0.1%
CVE-2022-26427 Aug 01, 14:15 MEDIUM This Month

In camera isp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-26426 Aug 01, 14:15 MEDIUM This Month

In camera isp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-21792 Aug 01, 14:15 MEDIUM This Month

In camera isp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-21791 Aug 01, 14:15 MEDIUM This Month

In camera isp, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
4.4
EPSS
0.1%
CVE-2022-21790 Aug 01, 14:15 MEDIUM This Month

In camera isp, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
4.4
EPSS
0.1%
CVE-2022-21789 Aug 01, 14:15 MEDIUM This Month

In audio ipi, there is a possible memory corruption due to a race condition. Rated medium severity (CVSS 6.4). No vendor patch available.

Privilege Escalation Buffer Overflow Google Race Condition Android
NVD
CVSS 3.1
6.4
EPSS
0.1%
CVE-2022-27255 Aug 01, 12:15 CRITICAL Act Now

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Ecos Rsdk Firmware Ecos Msdk Firmware Realtek
NVD
CVSS 3.1
9.8
EPSS
37.1%
CVE-2022-35234 Jul 30, 00:15 HIGH PATCH This Week

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity.

Buffer Overflow Information Disclosure Trend Micro Security
NVD
CVSS 3.1
7.1
EPSS
0.3%
CVE-2022-34528 Jul 29, 23:15 HIGH POC This Week

D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption D-Link Dsl 3782 Firmware
NVD GitHub
CVSS 3.1
8.8
EPSS
1.3%
CVE-2022-34526 Jul 29, 23:15 MEDIUM POC This Month

A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Debian Active Iq Unified Manager +6
NVD
CVSS 3.1
6.5
EPSS
1.4%
CVE-2022-27866 Jul 29, 20:15 HIGH This Week

A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Design Review Autodesk
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-27865 Jul 29, 20:15 HIGH PATCH This Week

A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Design Review Autodesk
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-33881 Jul 29, 16:15 HIGH This Week

Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +9
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-36752 Jul 28, 23:15 MEDIUM POC PATCH This Month

png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Png2Webp
NVD GitHub
CVSS 3.1
5.5
EPSS
0.4%
CVE-2021-41556 Jul 28, 21:15 CRITICAL POC PATCH Act Now

sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Information Disclosure Fedora Squirrel +2
NVD GitHub VulDB
CVSS 3.1
10.0
EPSS
2.4%
CVE-2022-27612 Jul 28, 07:15 CRITICAL Act Now

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Synology Audio Station
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2022-24027
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24026
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24025
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24024
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24023
EPSS 1% CVSS 8.8
HIGH POC This Week

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24022
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24021
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24020
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24019
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24018
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24017
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24016
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24015
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24014
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24013
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24012
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24011
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24010
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24009
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24008
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24007
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24006
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-24005
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tcl Linkhub Mesh Wifi Ac1200
NVD
CVE-2022-23919
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tcl +1
NVD
CVE-2022-23918
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tcl +1
NVD
CVE-2022-23399
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tcl +1
NVD
CVE-2022-23103
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tcl +1
NVD
CVE-2022-21201
EPSS 1% CVSS 8.8
HIGH POC This Week

A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Tcl +1
NVD
CVE-2022-37398
EPSS 1% CVSS 8.8
HIGH This Week

A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow +2
NVD
CVE-2022-33730
EPSS 0% CVSS 6.8
MEDIUM This Month

Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Google +3
NVD
CVE-2022-33719
EPSS 0% CVSS 9.8
CRITICAL Act Now

Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Google Android
NVD
CVE-2022-33717
EPSS 0% CVSS 4.4
MEDIUM This Month

A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-37434
EPSS 16% CVSS 9.8
CRITICAL POC PATCH THREAT Act Now

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Apple +21
NVD GitHub VulDB
CVE-2022-37415
EPSS 0% CVSS 7.8
HIGH POC This Week

The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Sparkio Sys
NVD GitHub
CVE-2022-35927
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Contiki-NG is an open-source, cross-platform operating system for IoT devices. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Contiki Ng
NVD GitHub
CVE-2022-35926
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Contiki-NG is an open-source, cross-platform operating system for IoT devices. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Contiki Ng
NVD GitHub
CVE-2022-34970
EPSS 3% CVSS 9.8
CRITICAL POC PATCH Act Now

Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Crow +1
NVD GitHub
CVE-2022-33968
EPSS 0% CVSS 4.9
MEDIUM This Month

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, when an LTM monitor or APM SSO is configured on a. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Big Ip Application Security Manager +11
NVD
CVE-2022-32455
EPSS 0% CVSS 7.5
HIGH This Week

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when a BIG-IP LTM Client SSL profile is configured on a virtual server to perform. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Big Ip Application Security Manager Big Ip Access Policy Manager +10
NVD
CVE-2022-35506
EPSS 1% CVSS 7.5
HIGH POC This Week

TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Triplecross
NVD GitHub
CVE-2022-35161
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

GVRET Stable Release as of Aug 15, 2015 was discovered to contain a buffer overflow via the handleConfigCmd function at SerialConsole.cpp. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Generalized Electric Vehicle Reverse Engineering Tool
NVD GitHub
CVE-2022-35928
EPSS 0% CVSS 5.5
MEDIUM PATCH This Month

AES Crypt is a file encryption software for multiple platforms. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Aescrypt Aes Crypt
NVD GitHub
CVE-2022-34992
EPSS 0% CVSS 7.8
HIGH POC This Week

Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Luadec
NVD GitHub
CVE-2022-35867
EPSS 0% CVSS 6.7
MEDIUM This Month

This vulnerability allows local attackers to escalate privileges on affected installations of xhyve. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow +2
NVD
CVE-2022-28668
EPSS 1% CVSS 7.8
HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +2
NVD
CVE-2022-34973
EPSS 15% CVSS 7.5
HIGH POC THREAT This Week

D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dir 820L Firmware
NVD GitHub
CVE-2022-32292
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Debian +3
NVD
CVE-2022-35737 Cargo
EPSS 18% CVSS 7.5
HIGH POC PATCH THREAT This Week

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Splunk Sqlite +3
NVD
CVE-2022-34927
EPSS 0% CVSS 7.8
HIGH POC PATCH This Week

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Milkytracker +1
NVD GitHub
CVE-2022-35222
EPSS 0% CVSS 6.8
MEDIUM This Month

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +2
NVD
CVE-2022-35219
EPSS 0% CVSS 5.5
MEDIUM This Month

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Health Insurance Web Service Component +1
NVD
CVE-2022-35218
EPSS 0% CVSS 5.5
MEDIUM This Month

The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Health Insurance Web Service Component +1
NVD
CVE-2022-35217
EPSS 0% CVSS 7.8
HIGH This Week

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +2
NVD
CVE-2022-2598
EPSS 1% CVSS 5.5
MEDIUM POC PATCH This Month

Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Debian +2
NVD GitHub
CVE-2022-2581
EPSS 0% CVSS 7.8
HIGH POC PATCH This Week

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Information Disclosure Vim
NVD GitHub
CVE-2022-2580
EPSS 1% CVSS 7.8
HIGH POC PATCH This Week

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Heap Overflow Vim
NVD GitHub
CVE-2022-2571
EPSS 0% CVSS 7.8
HIGH POC PATCH This Week

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Heap Overflow Vim
NVD GitHub
CVE-2022-26445
EPSS 0% CVSS 6.7
MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption +14
NVD
CVE-2022-26444
EPSS 0% CVSS 6.7
MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption +14
NVD
CVE-2022-26443
EPSS 0% CVSS 6.7
MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption +14
NVD
CVE-2022-26442
EPSS 0% CVSS 6.7
MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption +14
NVD
CVE-2022-26441
EPSS 0% CVSS 6.7
MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption +14
NVD
CVE-2022-26440
EPSS 0% CVSS 6.7
MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption +14
NVD
CVE-2022-26439
EPSS 0% CVSS 6.7
MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption +14
NVD
CVE-2022-26438
EPSS 0% CVSS 6.7
MEDIUM This Month

In wifi driver, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption +14
NVD
CVE-2022-26437
EPSS 1% CVSS 9.8
CRITICAL Act Now

In httpclient, there is a possible out of bounds write due to uninitialized data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Mediatek +1
NVD
CVE-2022-26436
EPSS 0% CVSS 4.4
MEDIUM This Month

In emi mpu, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-26435
EPSS 0% CVSS 6.7
MEDIUM This Month

In mailbox, there is a possible out of bounds write due to type confusion. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +4
NVD
CVE-2022-26434
EPSS 0% CVSS 6.7
MEDIUM This Month

In mailbox, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +4
NVD
CVE-2022-26433
EPSS 0% CVSS 6.7
MEDIUM This Month

In mailbox, there is a possible out of bounds write due to type confusion. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +4
NVD
CVE-2022-26432
EPSS 0% CVSS 6.7
MEDIUM This Month

In mailbox, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +4
NVD
CVE-2022-26431
EPSS 0% CVSS 6.7
MEDIUM This Month

In mailbox, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +4
NVD
CVE-2022-26430
EPSS 0% CVSS 6.7
MEDIUM This Month

In mailbox, there is a possible out of bounds write due to type confusion. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +4
NVD
CVE-2022-26428
EPSS 0% CVSS 6.4
MEDIUM This Month

In video codec, there is a possible memory corruption due to a race condition. Rated medium severity (CVSS 6.4). No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-26427
EPSS 0% CVSS 6.7
MEDIUM This Month

In camera isp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-26426
EPSS 0% CVSS 6.7
MEDIUM This Month

In camera isp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-21792
EPSS 0% CVSS 6.7
MEDIUM This Month

In camera isp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-21791
EPSS 0% CVSS 4.4
MEDIUM This Month

In camera isp, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-21790
EPSS 0% CVSS 4.4
MEDIUM This Month

In camera isp, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-21789
EPSS 0% CVSS 6.4
MEDIUM This Month

In audio ipi, there is a possible memory corruption due to a race condition. Rated medium severity (CVSS 6.4). No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-27255
EPSS 37% CVSS 9.8
CRITICAL Act Now

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Ecos Rsdk Firmware Ecos Msdk Firmware +1
NVD
CVE-2022-35234
EPSS 0% CVSS 7.1
HIGH PATCH This Week

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity.

Buffer Overflow Information Disclosure Trend Micro +1
NVD
CVE-2022-34528
EPSS 1% CVSS 8.8
HIGH POC This Week

D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption D-Link +1
NVD GitHub
CVE-2022-34526
EPSS 1% CVSS 6.5
MEDIUM POC This Month

A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption +8
NVD
CVE-2022-27866
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +2
NVD
CVE-2022-27865
EPSS 0% CVSS 7.8
HIGH PATCH This Week

A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +2
NVD
CVE-2022-33881
EPSS 0% CVSS 7.8
HIGH This Week

Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +11
NVD
CVE-2022-36752
EPSS 0% CVSS 5.5
MEDIUM POC PATCH This Month

png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Png2Webp
NVD GitHub
CVE-2021-41556
EPSS 2% CVSS 10.0
CRITICAL POC PATCH Act Now

sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Information Disclosure +4
NVD GitHub VulDB
CVE-2022-27612
EPSS 1% CVSS 9.8
CRITICAL Act Now

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Synology Audio Station
NVD
Prev Page 229 of 437 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy