CWE-121

High likelihood

Stack-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

3,424 vulnerabilities with CWE-121
CVE-2020-2006 HIGH
PAN-OS 7.1.0-7.1.25 and 8.0 - Authenticated Stack-based Buffer Overflow
CVSS 7.2
CVE-2020-12002 CRITICAL
Advantech WebAccess < 8.4.4 - Stack-based Buffer Overflow
CVSS 9.8
CVE-2020-6996 CRITICAL
Triangle MicroWorks DNP3 Source Code Library 3.16.00-3.25.01 - Unauthenticated Stack-based Buffer Overflow
CVSS 9.8
CVE-2020-10615 HIGH
Triangle MicroWorks SCADA Data Gateway <4.0.122 - DoS
CVSS 7.5
CVE-2020-10639 HIGH
Eaton HMiSoft VU3 <3.00.23 - Buffer Overflow
CVSS 7.8
CVE-2020-1990 HIGH
PAN-OS 8.1.0-8.1.12 - Authenticated Stack-based Buffer Overflow via Corrupted Configuration Upload
CVSS 7.2
CVE-2020-5735 HIGH KEV
Amcrest Cameras and NVR - Authenticated Stack-based Buffer Overflow via Port 37777
CVSS 8.8
CVE-2020-10599 CRITICAL
VISAM VBASE Editor <11.5.0.2 - Buffer Overflow
CVSS 9.8
CVE-2020-7065 HIGH
PHP 7.3.0-7.3.15 - Stack-based Buffer Overflow in mb_strtolower() with UTF-32LE Encoding
CVSS 7.4
CVE-2020-5344 HIGH
Dell iDRAC7, iDRAC8 and iDRAC9 - Unauthenticated Stack-based Buffer Overflow
CVSS 7.0
CVE-2020-10607 HIGH
Advantech WebAccess <8.4.2 - Buffer Overflow
CVSS 8.8
CVE-2020-10881 CRITICAL
TP-Link Archer A7 Firmware <190726 - RCE
CVSS 9.8
CVE-2020-7007 CRITICAL
Moxa EDS-G516E and EDS-510E Firmware < 5.2 - Stack-based Buffer Overflow
CVSS 9.8
CVE-2020-6989 CRITICAL
Moxa PT-7528 and PT-7828 Series Firmware < 4.0 - Stack-based Buffer Overflow via Web Server
CVSS 9.8
CVE-2020-7002 HIGH
Delta Industrial Automation CNCSoft ScreenEditor < 1.00.96 - Stack-based Buffer Overflow via Malicious Input File
CVSS 7.8
CVE-2020-8860 HIGH
Samsung Galaxy S10 Firmware - RCE
CVSS 8.0
CVE-2020-5234 MEDIUM
MessagePack for C# and Unity < 1.9.11 and < 2.1.90 - Denial of Service via Hash Collision Stack Overflow
CVSS 4.8
CVE-2020-1609 HIGH
Junos OS - Remote Code Execution via Crafted IPv6 JDHCPD Relay Packets
CVSS 8.8
CVE-2020-1605 HIGH
Junos OS - Unauthenticated Remote Code Execution via Crafted IPv4 JDHCPD Relay Packets
CVSS 8.8
CVE-2020-5204 MEDIUM
uftpd < 2.11 - Stack-based Buffer Overflow via PORT Command IPv4 Format String
CVSS 6.5
CVE-2019-25437 MEDIUM
Foscam VMS 1.1.6.6 - Buffer Overflow
CVSS 6.2
CVE-2019-25435 HIGH
Sricam DeviceViewer 3.12.0.1 - Buffer Overflow
CVSS 7.8
CVE-2019-25434 HIGH
SpotAuditor 5.3.1.0 - Unauthenticated Denial of Service via Registration Name Field
CVSS 7.5
CVE-2019-25365 CRITICAL
ChaosPro 2.0 - Stack-based Buffer Overflow in Configuration File Path Handling
CVSS 9.8
CVE-2019-25364 CRITICAL
MailCarrier 2.51 - Remote Code Execution via POP3 USER Command Buffer Overflow
CVSS 9.8
Details
Vulnerabilities 3,424
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits