Vulnerabilities (CVE)

Filtered by CWE-122
Total 1451 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-24551 1 Siemens 1 Solid Edge Se2023 2024-11-21 N/A 7.8 HIGH
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer underflow while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVE-2023-24550 1 Siemens 1 Solid Edge Se2023 2024-11-21 N/A 7.8 HIGH
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVE-2023-24474 1 Honeywell 4 Direct Station, Engineering Station, Experion Server and 1 more 2024-11-21 N/A 7.5 HIGH
Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message
CVE-2023-24014 1 Deltaww 1 Cncsoft-b 2024-11-21 N/A 7.8 HIGH
Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to heap-based buffer overflow, which could allow an attacker to execute arbitrary code.
CVE-2023-23782 1 Fortinet 1 Fortiweb 2024-11-21 N/A 7.8 HIGH
A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privilege via specifically crafted arguments to existing commands.
CVE-2023-23582 1 Snapav 2 Wattbox Wb-300-ip-3, Wattbox Wb-300-ip-3 Firmware 2024-11-21 N/A 5.3 MEDIUM
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely.
CVE-2023-23415 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-11-21 N/A 9.8 CRITICAL
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
CVE-2023-23406 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-11-21 N/A 8.8 HIGH
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-23403 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-11-21 N/A 8.8 HIGH
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-23400 1 Microsoft 4 Windows Server 2012, Windows Server 2016, Windows Server 2019 and 1 more 2024-11-21 N/A 7.2 HIGH
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-23390 1 Microsoft 1 3d Builder 2024-11-21 N/A 7.8 HIGH
3D Builder Remote Code Execution Vulnerability
CVE-2023-23384 1 Microsoft 1 Sql Server 2024-11-21 N/A 7.3 HIGH
Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2023-23381 1 Microsoft 3 Visual Studio 2017, Visual Studio 2019, Visual Studio 2022 2024-11-21 N/A 7.8 HIGH
Visual Studio Remote Code Execution Vulnerability
CVE-2023-23378 1 Microsoft 1 Print 3d 2024-11-21 N/A 7.8 HIGH
Print 3D Remote Code Execution Vulnerability
CVE-2023-23377 1 Microsoft 1 3d Builder 2024-11-21 N/A 7.8 HIGH
3D Builder Remote Code Execution Vulnerability
CVE-2023-22660 1 Justsystems 1 Ichitaro 2022 2024-11-21 N/A 7.0 HIGH
A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record types. A specially crafted document can cause a buffer overflow, leading to memory corruption, which can result in arbitrary code execution.To trigger this vulnerability, the victim would need to open a malicious, attacker-created document.
CVE-2023-22236 3 Adobe, Apple, Microsoft 3 Animate, Macos, Windows 2024-11-21 N/A 7.8 HIGH
Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21812 1 Microsoft 13 Windows 10, Windows 10 1607, Windows 10 1809 and 10 more 2024-11-21 N/A 7.8 HIGH
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-21804 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2024-11-21 N/A 7.8 HIGH
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-21799 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-11-21 N/A 8.8 HIGH
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability