Fallos del tipo CWE-125
4301 resultadosCVE-2022-45909CRITICALdrachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.EPSS 1.0%CVE-2023-28445CRITICALDeno improperly handles resizable ArrayBufferEPSS 1.0%CVE-2024-37407CRITICALLibarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slEPSS 1.0%CVE-2024-49103MEDIUMWindows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityEPSS 1.0%CVE-2024-49099MEDIUMWindows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityEPSS 1.0%CVE-2021-32975—Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-EPSS 1.0%CVE-2024-49098MEDIUMWindows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityEPSS 1.0%CVE-2021-27412—Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitEPSS 1.0%CVE-2026-41607MEDIUMApache Thrift: C++ JSON OOB readEPSS 1.0%CVE-2023-2989—Fortra Globalscape Administration Server Out of Bounds Memory ReadEPSS 1.0%CVE-2022-39316MEDIUMOut of bound read in FreeRDPEPSS 1.0%CVE-2022-26770HIGHAn out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS MoEPSS 1.0%CVE-2023-41360CRITICALAn issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream siEPSS 1.0%CVE-2021-44017—A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Image.dll EPSS 1.0%CVE-2023-51580MEDIUMBlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-25646HIGHLIBPNG has a heap buffer overflow in png_set_quantizeEPSS 1.0%CVE-2026-41604HIGHApache Thrift: Swift Range crash in skip()EPSS 1.0%CVE-2024-54508MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS SeEPSS 1.0%CVE-2023-1255MEDIUMInput buffer over-read in AES-XTS implementation on 64 bit ARMEPSS 1.0%CVE-2022-28670LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. UseEPSS 1.0%