Vulnerabilities (CVE)

Filtered by CWE-787
Total 10985 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-34884 1 Lenovo 196 Thinkagile Hx1021, Thinkagile Hx1021 Firmware, Thinkagile Hx1320 and 193 more 2024-11-21 N/A 7.2 HIGH
A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service.
CVE-2022-34835 1 Denx 1 U-boot 2024-11-21 7.5 HIGH 9.8 CRITICAL
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
CVE-2022-34759 1 Schneider-electric 4 Opc Ua Module For M580, Opc Ua Module For M580 Firmware, X80 Advanced Rtu Module and 1 more 2024-11-21 N/A 7.5 HIGH
A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improper parsing of the HTTP Headers. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V1.0), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior)
CVE-2022-34748 1 Siemens 1 Simcenter Femap 2024-11-21 6.8 MEDIUM 7.8 HIGH
A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17293)
CVE-2022-34742 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-11-21 5.0 MEDIUM 7.5 HIGH
The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-34671 1 Nvidia 7 Geforce, Gpu Display Driver, Nvs and 4 more 2024-11-21 N/A 8.5 HIGH
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of service.
CVE-2022-34667 3 Linux, Microsoft, Nvidia 3 Linux Kernel, Windows, Cuda Toolkit 2024-11-21 N/A 4.4 MEDIUM
NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally, which may lead to a limited denial of service and some loss of data integrity for the local user.
CVE-2022-34610 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app.
CVE-2022-34609 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp.
CVE-2022-34608 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ajaxmsg parameter at /AJAX/ajaxget.
CVE-2022-34607 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp.
CVE-2022-34606 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditvsList parameter at /dotrace.asp.
CVE-2022-34605 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /dotrace.asp.
CVE-2022-34604 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp.
CVE-2022-34603 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm.
CVE-2022-34602 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm.
CVE-2022-34601 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm.
CVE-2022-34600 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm.
CVE-2022-34599 1 H3c 2 Magic R200, Magic R200 Firmware 2024-11-21 N/A 9.8 CRITICAL
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm.
CVE-2022-34528 1 Dlink 2 Dsl-3782, Dsl-3782 Firmware 2024-11-21 N/A 8.8 HIGH
D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue.