CWE-126 · 518 kayıt
Buffer Over-read
Bu sınıftaki CVE’ler
518 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
56Planlayın | CVE-2023-49285İstismar yok | Denial of Service in HTTP Message Processing in Squidsquid-cache · squid · CWE-126 | Yüksek7,5 | — | %88,1 | 4 Ara 2023 |
51Planlayın | CVE-2017-7679Kavram kanıtı | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Coapache · http server · CWE-126 | Kritik9,8 | — | %39,3 | 19 Haz 2017 |
47Planlayın | CVE-2017-7668İstismar yok | The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token()apache · http server · CWE-126 | Yüksek7,5 | — | %57,5 | 19 Haz 2017 |
44Planlayın | CVE-2023-36397İstismar yok | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-126 | Kritik9,8 | — | %17,5 | 14 Kas 2023 |
42Planlayın | CVE-2025-21277İstismar yok | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerabilitymicrosoft · windows 10 1507 · CWE-126 | Yüksek7,5 | — | %38,6 | 14 Oca 2025 |
41Planlayın | CVE-2024-38071İstismar yok | Windows Remote Desktop Licensing Service Denial of Service Vulnerabilitymicrosoft · windows server 2008 · CWE-126 | Yüksek7,5 | — | %35,9 | 9 Tem 2024 |
41Planlayın | CVE-2018-14790İstismar yok | Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace.fujielectric · frenic loader 3.3 firmware · CWE-126 | Kritik9,8 | — | %5,4 | 1 Eki 2018 |
40Planlayın | CVE-2024-20290İstismar yok | A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) cisco · secure endpoint · CWE-126 | Yüksek7,5 | — | %33,6 | 7 Şub 2024 |
40Planlayın | CVE-2019-3563İstismar yok | Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflowfacebook · wangle · CWE-126 | Kritik9,8 | — | %1,7 | 29 Nis 2019 |
39İzleyin | CVE-2023-22385İstismar yok | Buffer Over-read in Data Modemqualcomm · 315 5g iot modem firmware · CWE-126 | Kritik9,8 | — | %0,4 | 3 Eki 2023 |
39İzleyin | CVE-2017-17772İstismar yok | Multiple buffer overread vulnerabilities in WLANqualcomm · sd 450 firmware · CWE-126 | Kritik9,8 | — | %0,4 | 26 Kas 2024 |
39İzleyin | CVE-2024-49839İstismar yok | Buffer Over-read in WLAN Host Cmnqualcomm · ar8035 firmware · CWE-126 | Kritik9,8 | — | %0,3 | 3 Şub 2025 |
38İzleyin | CVE-2019-11036İstismar yok | Heap over-read in PHP EXIF extensionphp · php · CWE-126 | Kritik9,1 | — | %7,0 | 3 May 2019 |
36İzleyin | CVE-2025-21176İstismar yok | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerabilitymicrosoft · .net · CWE-126 | Yüksek8,8 | — | %2,3 | 14 Oca 2025 |
36İzleyin | CVE-2021-34584İstismar yok | CODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)wago · 750-823 firmware · CWE-126 | Kritik9,1 | — | %1,1 | 26 Eki 2021 |
36İzleyin | CVE-2023-51773İstismar yok | BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.bacnetstack · bacnet stack · CWE-126 | Kritik9,1 | — | %1,1 | 28 Şub 2024 |
36İzleyin | CVE-2025-12106İstismar yok | Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IPopenvpn · openvpn · CWE-126 | Kritik9,1 | — | %0,6 | 1 Ara 2025 |
36İzleyin | CVE-2023-33058İstismar yok | Buffer Copy Without Checking Size of Input in Modemqualcomm · ar8035 firmware · CWE-126 | Kritik9,1 | — | %0,4 | 6 Şub 2024 |
36İzleyin | CVE-2024-49846İstismar yok | Buffer Over-read in Multi-Mode Call Processorqualcomm · qca6688aq firmware · CWE-126 | Kritik9,1 | — | %0,3 | 6 May 2025 |
36İzleyin | CVE-2024-21456İstismar yok | Buffer Over-read in WLAN HOSTqualcomm · ar8035 firmware · CWE-126 | Kritik9,1 | — | %0,3 | 1 Tem 2024 |
35İzleyin | CVE-2026-66312İstismar yok | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerabilitymicrosoft · edge chromium · CWE-126 | Yüksek8,8 | — | %1,1 | 3 Ağu 2026 |
35İzleyin | CVE-2024-43595İstismar yok | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerabilitymicrosoft · edge chromium · CWE-126 | Yüksek8,8 | — | %1,0 | 17 Eki 2024 |
35İzleyin | CVE-2025-36855İstismar yok | EOL .NET 6.0 Runtime Remote Code Execution Vulnerabilitymicrosoft · .net 6.0 · CWE-126 | Yüksek8,8 | — | %0,8 | 8 Eyl 2025 |
35İzleyin | CVE-2023-28572İstismar yok | Buffer Over-read in WLAN HOSTqualcomm · csrb31024 firmware · CWE-126 | Yüksek8,8 | — | %0,4 | 7 Kas 2023 |
34İzleyin | CVE-2021-1373İstismar yok | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilitycisco · ios xe · CWE-126 | Yüksek8,6 | — | %1,5 | 24 Mar 2021 |
- CVE-2023-4928556Planlayın
Denial of Service in HTTP Message Processing in Squid
YüksekCVSS 7,5İstismar yokEPSS %88squid-cache · squid4 Ara 2023
- CVE-2017-767951Planlayın
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Co
KritikCVSS 9,8Kavram kanıtıEPSS %39apache · http server19 Haz 2017
- CVE-2017-766847Planlayın
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token()
YüksekCVSS 7,5İstismar yokEPSS %57apache · http server19 Haz 2017
- CVE-2023-3639744Planlayın
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %18microsoft · windows 10 150714 Kas 2023
- CVE-2025-2127742Planlayın
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %39microsoft · windows 10 150714 Oca 2025
- CVE-2024-3807141Planlayın
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %36microsoft · windows server 20089 Tem 2024
- CVE-2018-1479041Planlayın
Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace.
KritikCVSS 9,8İstismar yokEPSS %5fujielectric · frenic loader 3.3 firmware1 Eki 2018
- CVE-2024-2029040Planlayın
A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS)
YüksekCVSS 7,5İstismar yokEPSS %34cisco · secure endpoint7 Şub 2024
- CVE-2019-356340Planlayın
Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow
KritikCVSS 9,8İstismar yokEPSS %2facebook · wangle29 Nis 2019
- CVE-2023-2238539İzleyin
Buffer Over-read in Data Modem
KritikCVSS 9,8İstismar yokEPSS %0qualcomm · 315 5g iot modem firmware3 Eki 2023
- CVE-2017-1777239İzleyin
Multiple buffer overread vulnerabilities in WLAN
KritikCVSS 9,8İstismar yokEPSS %0qualcomm · sd 450 firmware26 Kas 2024
- CVE-2024-4983939İzleyin
Buffer Over-read in WLAN Host Cmn
KritikCVSS 9,8İstismar yokEPSS %0qualcomm · ar8035 firmware3 Şub 2025
- CVE-2019-1103638İzleyin
Heap over-read in PHP EXIF extension
KritikCVSS 9,1İstismar yokEPSS %7php · php3 May 2019
- CVE-2025-2117636İzleyin
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2microsoft · .net14 Oca 2025
- CVE-2021-3458436İzleyin
CODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)
KritikCVSS 9,1İstismar yokEPSS %1wago · 750-823 firmware26 Eki 2021
- CVE-2023-5177336İzleyin
BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
KritikCVSS 9,1İstismar yokEPSS %1bacnetstack · bacnet stack28 Şub 2024
- CVE-2025-1210636İzleyin
Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP
KritikCVSS 9,1İstismar yokEPSS %1openvpn · openvpn1 Ara 2025
- CVE-2023-3305836İzleyin
Buffer Copy Without Checking Size of Input in Modem
KritikCVSS 9,1İstismar yokEPSS %0qualcomm · ar8035 firmware6 Şub 2024
- CVE-2024-4984636İzleyin
Buffer Over-read in Multi-Mode Call Processor
KritikCVSS 9,1İstismar yokEPSS %0qualcomm · qca6688aq firmware6 May 2025
- CVE-2024-2145636İzleyin
Buffer Over-read in WLAN HOST
KritikCVSS 9,1İstismar yokEPSS %0qualcomm · ar8035 firmware1 Tem 2024
- CVE-2026-6631235İzleyin
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · edge chromium3 Ağu 2026
- CVE-2024-4359535İzleyin
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · edge chromium17 Eki 2024
- CVE-2025-3685535İzleyin
EOL .NET 6.0 Runtime Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · .net 6.08 Eyl 2025
- CVE-2023-2857235İzleyin
Buffer Over-read in WLAN HOST
YüksekCVSS 8,8İstismar yokEPSS %0qualcomm · csrb31024 firmware7 Kas 2023
- CVE-2021-137334İzleyin
Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %1cisco · ios xe24 Mar 2021