Browse CVEs

HIGH 7.5 CVE-2024-24476 A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(… Fedora 4.2.0+ Fix from $1,9502024-02-21 HIGH 7.8 CVE-2023-52440EPSS 22% In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() If authblob->Sessi… Linux Kernel 6.1.52 / 6.4.15+ Fix from $1,9502024-02-21 HIGH 7.8 CVE-2023-52441 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds in init_smb2_rsp_hdr() If client send smb2 negotiate r… Linux Kernel 5.15.145 / 6.1.53+ Fix from $1,9502024-02-21 MEDIUM 5.5 CVE-2023-52435 In the Linux kernel, the following vulnerability has been resolved: net: prevent mss overflow in skb_segment() Once again syzbot is able to crash t… Linux Kernel 5.4.269 / 5.10.210+ Fix from $1,6002024-02-20 HIGH 8.0 CVE-2023-52434 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and l… Linux Kernel 5.4.277 / 5.10.211+ Fix from $1,9502024-02-20 HIGH 8.1 CVE-2024-1553 Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we p… Firefox 115.8.0 / 123.0+ Fix from $1,9502024-02-20 MEDIUM 6.7 CVE-2023-30767 Improper buffer restrictions in Intel(R) Optimization for TensorFlow before version 2.13.0 may allow an authenticated user to potentially enable esca… Optimization For Tensorflow 2.13.0+ Fix from $1,6002024-02-14 HIGH 7.8 CVE-2021-46757 Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual a… Ryzen Embedded 5950e Firmware Mitigation only Fix from $1,9502024-02-13 HIGH 7.8 CVE-2024-24921 A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corruption while… Simcenter Femap 2401.0000+ Fix from $1,9502024-02-13 CRITICAL 9.8 CVE-2024-24577 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality i… Libgit2 1.6.5 / 1.7.2+ Fix from $2,3002024-02-06 CRITICAL 9.8 CVE-2023-43534 Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. Ar8035 Firmware Mitigation only Fix from $2,3002024-02-06 CRITICAL 9.8 CVE-2024-20011 In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additi… Android Mitigation only Fix from $2,3002024-02-05 MEDIUM 5.3 CVE-2024-24560 Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. When calls to external contracts are made, we write the input buffer st… Vyper after 0.3.10 Fix from $1,6002024-02-02 CRITICAL 9.8 CVE-2024-0338 A buffer overflow vulnerability has been found in XAMPP affecting version 8.2.4 and earlier. An attacker could execute arbitrary code through a long … Xampp after 8.2.4 Fix from $2,3002024-02-02 CRITICAL 9.8 CVE-2024-24561 Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.10 and earlier, the bounds check for slices does not ac… Vyper after 0.3.10 Fix from $2,3002024-02-01 HIGH 7.5 CVE-2024-21916 A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could pot… Controllogix 5570 Controller Firmware Mitigation only Fix from $1,9502024-01-31 CRITICAL 9.8 CVE-2024-1112 Heap-based buffer overflow vulnerability in Resource Hacker, developed by Angus Johnson, affecting version 3.6.0.92. This vulnerability could allow a… Resource Hacker Mitigation only Fix from $2,3002024-01-31 HIGH 8.8 CVE-2024-23617 A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit thi… Symantec Data Center Security Server after 14.0.2 Fix from $1,9502024-01-26 CRITICAL 9.8 CVE-2024-23613 A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker c… Symantec Deployment Solutions Mitigation only Fix from $2,3002024-01-26 CRITICAL 9.8 CVE-2024-23614 A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerabi… Symantec Messaging Gateway after 9.5 Fix from $2,3002024-01-26 CRITICAL 9.8 CVE-2024-23615 A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerab… Symantec Messaging Gateway after 10.5 Fix from $2,3002024-01-26 CRITICAL 9.8 CVE-2024-23616 A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vuln… Symantec Server Management Suite after 7.9 Fix from $2,3002024-01-26 HIGH 7.5 CVE-2024-0744 In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploitable crash. This vulnerabilit… Firefox 122.0+ Fix from $1,9502024-01-23 HIGH 8.8 CVE-2024-23213 The issue was addressed with improved memory handling. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, ma… Safari 10.3 / 14.3+ Fix from $1,9502024-01-23 HIGH 7.8 CVE-2023-42881 The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Processing a file may lead to unexpected app termina… macOS 14.2+ Fix from $1,9502024-01-23 MEDIUM 5.5 CVE-2024-0774 A vulnerability was found in Any-Capture Any Sound Recorder 2.93. It has been declared as problematic. This vulnerability affects unknown code of the… Any Sound Recorder No fix yet Fix from $1,6002024-01-22 MEDIUM 5.5 CVE-2024-0772 A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the c… Sharealarmpro No fix yet Fix from $1,6002024-01-22 MEDIUM 5.5 CVE-2024-0771 A vulnerability has been found in Nsasoft Product Key Explorer 4.0.9 and classified as problematic. Affected by this vulnerability is an unknown func… Product Key Explorer No fix yet Fix from $1,6002024-01-21 HIGH 8.8 CVE-2023-5131 A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a special… Ispsoft Mitigation only Fix from $1,9502024-01-18 HIGH 7.8 CVE-2023-43821 A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS fil… Dopsoft after 2.00.07.04 Fix from $1,9502024-01-18