Advisories · Weakness

CWE-126.

Every Advisory and CVE whose sources give the weakness CWE-126, newest first.

CVE-2022-1987 CVE record

CVSS 2.5 Low

Buffer Over-read in bfabiszewski/libmobi
- bfabiszewski/libmobi
- CWE-126
Not analysed yet 3 Jun 2022
CVE-2022-1927 CVE record

CVSS 7.8 High

Buffer Over-read in vim/vim
- vim/vim
- CWE-126
Not analysed yet 29 May 2022
CVE-2022-1908 CVE record

CVSS 3.6 Low

Buffer Over-read in bfabiszewski/libmobi
- bfabiszewski/libmobi
- CWE-126
Not analysed yet 27 May 2022
CVE-2022-1907 CVE record

CVSS 3.6 Low

Buffer Over-read in bfabiszewski/libmobi
- bfabiszewski/libmobi
- CWE-126
Not analysed yet 27 May 2022
CVE-2022-1769 CVE record

CVSS 6.6 Medium

Buffer Over-read in vim/vim
- vim/vim
- CWE-126
Not analysed yet 17 May 2022
CVE-2022-1720 CVE record

CVSS 6.6 Medium

Buffer Over-read in function grab_file_name in vim/vim
- vim/vim
- CWE-126
Not analysed yet 16 May 2022
CVE-2022-1629 CVE record

CVSS 6.6 Medium

Buffer Over-read in function find_next_quote in vim/vim
- vim/vim
- CWE-126
Not analysed yet 10 May 2022
org.apache.tomcat:tomcat Maven

Apache Tomcat Buffer Over-Read
- CWE-126
<=5.5.15 · no fixed version yet

GHSA-jpqr-vh55-xqxf · CVE-2006-7197 Not analysed yet 1 May 2022
CVE-2022-1533 CVE record

CVSS 6.6 Medium

Buffer Over-read in bfabiszewski/libmobi
- bfabiszewski/libmobi
- CWE-126
Not analysed yet 29 Apr 2022
CVE-2022-1534 CVE record

CVSS 6.6 Medium

Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi
- bfabiszewski/libmobi
- CWE-126
Not analysed yet 29 Apr 2022
CVE-2022-20714 CVE record

CVSS 8.6 High

Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-126
Not analysed yet 15 Apr 2022
CVE-2022-22519 CVE record

CVSS 7.5 High

Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-126
Not analysed yet 7 Apr 2022
CVE-2022-23130 CVE record

CVSS 5.9 Medium

Mitsubishi Electric Corporation GENESIS64: Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E…
- Mitsubishi Electric Corporation GENESIS64
- Mitsubishi Electric Iconics Digital Solutions GENESIS64
- CWE-126
Not analysed yet 21 Jan 2022
CVE-2021-22563 CVE record

CVSS 4.5 Medium

Memory Overread in libjxl
- Google LLC libjxl
- CWE-126
Not analysed yet 1 Nov 2021
CVE-2021-34584 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

CODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)
- CODESYS V2
- CWE-126
Not analysed yet 26 Oct 2021
CVE-2021-1588 CVE record

CVSS 8.6 High

Cisco NX-OS Software MPLS OAM Denial of Service Vulnerability
- Cisco NX-OS Software
- CWE-126
Not analysed yet 25 Aug 2021
CVE-2021-22552 CVE record

CVSS 5.3 Medium

Memory overread secure enclave in Asylo 0.6.2
- Google LLC Asylo
- CWE-126
Not analysed yet 2 Aug 2021
CVE-2021-1614 CVE record

CVSS 5.3 Medium

Cisco SD-WAN Software Information Disclosure Vulnerability
- Cisco SD-WAN Solution
- CWE-126
Not analysed yet 22 Jul 2021
CVE-2021-34325 CVE record

Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…
- Siemens JT2Go
- Siemens Teamcenter Visualization
- CWE-126
Not analysed yet 13 Jul 2021
CVE-2021-34322 CVE record

Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…
- Siemens JT2Go
- Siemens Teamcenter Visualization
- CWE-126
Not analysed yet 13 Jul 2021
CVE-2021-34321 CVE record

Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…
- Siemens JT2Go
- Siemens Teamcenter Visualization
- CWE-126
Not analysed yet 13 Jul 2021
CVE-2021-34320 CVE record

Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…
- Siemens JT2Go
- Siemens Teamcenter Visualization
- CWE-126
Not analysed yet 13 Jul 2021
CVE-2021-34308 CVE record

Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…
- Siemens JT2Go
- Siemens Teamcenter Visualization
- CWE-126
Not analysed yet 13 Jul 2021
CVE-2021-34307 CVE record

Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…
- Siemens JT2Go
- Siemens Teamcenter Visualization
- CWE-126
Not analysed yet 13 Jul 2021
CVE-2021-34304 CVE record

Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…
- Siemens JT2Go
- Siemens Teamcenter Visualization
- CWE-126
Not analysed yet 13 Jul 2021
CVE-2021-34303 CVE record

Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…
- Siemens JT2Go
- Siemens Teamcenter Visualization
- CWE-126
Not analysed yet 13 Jul 2021
CVE-2021-34302 CVE record

Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…
- Siemens JT2Go
- Siemens Teamcenter Visualization
- CWE-126
Not analysed yet 13 Jul 2021
CVE-2021-34299 CVE record

Siemens JT2Go: A vulnerability has been identified in JT2Go (All versions < V13.2)…
- Siemens JT2Go
- Siemens Teamcenter Visualization
- CWE-126
Not analysed yet 13 Jul 2021
CVE-2021-1373 CVE record

CVSS 8.6 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-126
Not analysed yet 24 Mar 2021
CVE-2020-25853 CVE record

Realtek RTL8195A Wi-Fi Module: The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released…
- Realtek RTL8195A Wi-Fi Module
- CWE-126
Not analysed yet 3 Feb 2021
CVE-2020-3399 CVE record

CVSS 8.6 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-126
Not analysed yet 24 Sept 2020
bl npm

CVSS 6.5 Medium

Remote Memory Exposure in bl
- Memory corruption
- CWE-126
<1.2.3 || >=2.0.0, <2.2.1 || >=3.0.0, <3.0.1 || >=4.0.0, <4.0.3 · fixed in 1.2.3, 2.2.1, 3.0.1, 4.0.3

GHSA-pp7h-53gx-mx7r · CVE-2020-8244 Not analysed yet 2 Sept 2020
CVE-2019-1010220 CVE record

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read.
- tcpdump
- CWE-126
Not analysed yet 22 Jul 2019
mqtt-packet npm

CVSS 7.5 High

Improper Input Validation and Buffer Over-read in mqtt-packet
- Memory corruption
- CWE-126
<3.5.1 || >=4.0.0, <4.1.3 || >=5.0.0, <5.6.1 || >=6.0.0, <6.1.2 · fixed in 3.5.1, 4.1.3, 5.6.1, 6.1.2

GHSA-wv67-9jq7-8r69 · CVE-2019-5432 Not analysed yet 14 May 2019
CVE-2019-11036 CVE record

CVSS 4.8 Medium

Heap over-read in PHP EXIF extension
- PHP
- CWE-126
Not analysed yet 3 May 2019
CVE-2019-3563 CVE record

Facebook Wangle: Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly…
- Facebook Wangle
- CWE-126
Not analysed yet 29 Apr 2019
CVE-2018-8799 CVE record

Check Point Software Technologies Ltd. rdesktop: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function…
- Check Point Software Technologies Ltd. rdesktop
- CWE-126
Not analysed yet 5 Feb 2019
CVE-2018-8798 CVE record

Check Point Software Technologies Ltd. rdesktop: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function…
- Check Point Software Technologies Ltd. rdesktop
- CWE-126
Not analysed yet 5 Feb 2019
CVE-2018-8796 CVE record

Check Point Software Technologies Ltd. rdesktop: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function…
- Check Point Software Technologies Ltd. rdesktop
- CWE-126
Not analysed yet 5 Feb 2019
CVE-2018-8792 CVE record

Check Point Software Technologies Ltd. rdesktop: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function…
- Check Point Software Technologies Ltd. rdesktop
- CWE-126
Not analysed yet 5 Feb 2019
CVE-2018-8791 CVE record

Check Point Software Technologies Ltd. rdesktop: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function…
- Check Point Software Technologies Ltd. rdesktop
- CWE-126
Not analysed yet 5 Feb 2019
CVE-2018-8789 CVE record

Check Point Software Technologies Ltd. FreeRDP: FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM…
- Check Point Software Technologies Ltd. FreeRDP
- CWE-126
Not analysed yet 29 Nov 2018
CVE-2018-14790 CVE record

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace.
- Fuji Electric FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace
- CWE-126
Not analysed yet 1 Oct 2018
CVE-2017-7679 CVE record

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.
- Apache Software Foundation Apache HTTP Server
- CWE-126
Not analysed yet 20 Jun 2017
CVE-2017-7668 CVE record

The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string.
- Apache Software Foundation Apache HTTP Server
- CWE-126
Not analysed yet 20 Jun 2017
CVE-2009-2495 CVE record

CVSS 6.5 Medium

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce strin…
- CWE-126
Not analysed yet 29 Jul 2009