CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,105 vulnerabilities with CWE-120
CVE-2020-10188 CRITICAL
Juniper Junos < 0.17 - Buffer Overflow
CVSS 9.8
CVE-2020-4204 HIGH
IBM Db2 - Buffer Overflow
CVSS 7.8
CVE-2020-8012 CRITICAL
Broadcom Unified Infrastructure Management < 9.20 - Buffer Overflow
CVSS 9.8
CVE-2020-8955 CRITICAL
Weechat < 2.7 - Buffer Overflow
CVSS 9.8
CVE-2020-8608 MEDIUM
libslirp 4.1.0 - Buffer Overflow
CVSS 5.6
CVE-2020-5208 HIGH
Ipmitool - Buffer Overflow
CVSS 7.7
CVE-2020-8597 CRITICAL
ppp <2.4.8 - Buffer Overflow
CVSS 9.8
CVE-2020-5211 MEDIUM
Nethack < 3.6.5 - Buffer Overflow
CVSS 5.0
CVE-2020-4207 CRITICAL
IBM Iot Messagesight < 2.0.0.2 - Buffer Overflow
CVSS 9.8
CVE-2020-5214 MEDIUM
Nethack < 3.6.5 - Buffer Overflow
CVSS 5.0
CVE-2020-5213 MEDIUM
Nethack < 3.6.5 - Buffer Overflow
CVSS 5.0
CVE-2020-5212 MEDIUM
Nethack < 3.6.5 - Buffer Overflow
CVSS 5.0
CVE-2020-5210 MEDIUM
Nethack < 3.6.5 - Buffer Overflow
CVSS 5.0
CVE-2020-5209 MEDIUM
Nethack < 3.6.5 - Buffer Overflow
CVSS 5.0
CVE-2020-5204 MEDIUM
Troglobit Uftpd < 2.11 - Buffer Overflow
CVSS 6.5
CVE-2020-5312 CRITICAL
Python Pillow < 6.2.2 - Buffer Overflow
CVSS 9.8
CVE-2020-5311 CRITICAL
Python Pillow < 6.2.2 - Buffer Overflow
CVSS 9.8
CVE-2019-25354 HIGH
iSmartViewPro 1.3.34 - DoS
CVSS 7.5
CVE-2019-25353 HIGH
Foscam VMS 1.1.4.9 - DoS
CVSS 7.5
CVE-2019-25349 HIGH
ScadaApp iOS 1.1.4.0 - DoS
CVSS 7.5
CVE-2019-25326 MEDIUM
ipPulse 1.92 - DoS
CVSS 6.2
CVE-2019-25232 CRITICAL
NetPCLinker 1.0.0.0 - Buffer Overflow
CVSS 9.8
CVE-2019-16536 HIGH
Clickhouse <19.14.3.3 - DoS
CVSS 8.8
CVE-2019-11851 CRITICAL
Sierra Wireless ALEOS <4.14.0 - RCE
CVSS 9.8
CVE-2019-25078 MEDIUM
Pacparser <1.4.0 - Buffer Overflow
CVSS 5.3
Details
Vulnerabilities 4,105
Exploit Likelihood High