Browse CVEs

HIGH 7.8 CVE-2023-31194 An improper array index validation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0.139. A specially crafted markdown file… Diagon No fix yet Fix from $1,9502023-07-05 HIGH 7.8 CVE-2023-21633 Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request. Apq8064au Firmware No fix yet Fix from $1,9502023-07-04 HIGH 7.8 CVE-2023-21637 Memory corruption in Linux while calling system configuration APIs. Aqt1000 Firmware No fix yet Fix from $1,9502023-07-04 HIGH 7.5 CVE-2023-3138 A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided … Enterprise Linux 1.8.6+ Fix from $1,9502023-06-28 MEDIUM 5.5 CVE-2023-21167 In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could le… Android Mitigation only Fix from $1,6002023-06-28 HIGH 8.8 CVE-2023-0972 Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack bu… Z\/ip Gateway Sdk after 7.18.01 Fix from $1,9502023-06-21 HIGH 8.8 CVE-2023-3110 Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buf… Unify Software Development Kit after 1.3.1 Fix from $1,9502023-06-21 HIGH 7.8 CVE-2023-32270 Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lea… Tellus Mitigation only Fix from $1,9502023-06-19 HIGH 7.5 CVE-2023-3036 An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a… Cfnts 2023-06-01+ Fix from $1,9502023-06-14 MEDIUM 6.5 CVE-2023-28601 Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicio… Zoom 5.14.0+ Fix from $1,6002023-06-13 HIGH 7.8 CVE-2023-33124 A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visua… Jt2go 13.2.0.13 / 13.3.0.10+ Fix from $1,9502023-06-13 HIGH 8.8 CVE-2023-34341 AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within… Megarac Sp X 12.7 / 13.5+ Fix from $1,9502023-06-12 MEDIUM 5.5 CVE-2022-40533 Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request. Csra6620 Firmware Mitigation only Fix from $1,6002023-06-06 HIGH 7.8 CVE-2023-21628 Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. Apq8017 Firmware Mitigation only Fix from $1,9502023-06-06 HIGH 7.8 CVE-2022-33267 Memory corruption in Linux while sending DRM request. Aqt1000 Firmware No fix yet Fix from $1,9502023-06-06 HIGH 7.8 CVE-2023-27285 IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflo… Aspera Cargo 4.2.6+ Fix from $1,9502023-06-05 HIGH 7.1 CVE-2023-2977 A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can … Enterprise Linux Patch available Fix from $1,9502023-06-01 CRITICAL 9.8 CVE-2023-33975 RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In version 20… Riot after 2023.01 Fix from $2,3002023-05-30 HIGH 7.5 CVE-2023-24817 RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to vers… Riot 2023.04+ Fix from $1,9502023-05-30 MEDIUM 6.5 CVE-2023-2970 A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArr… Mindspore Mitigation only Fix from $1,6002023-05-30 HIGH 7.8 CVE-2023-2873 A vulnerability classified as critical was found in Twister Antivirus 8. This vulnerability affects the function 0x804f2143/0x804f217f/0x804f214b/0x8… Twister Antivirus after 8.17 Fix from $1,9502023-05-24 MEDIUM 5.5 CVE-2023-30774 A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS val… Libtiff 14.1+ Fix from $1,6002023-05-19 MEDIUM 5.5 CVE-2023-30775 A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c. Libtiff Mitigation only Fix from $1,6002023-05-19 MEDIUM 6.5 CVE-2023-1972 A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability. Binutils after 2.40 Fix from $1,6002023-05-17 MEDIUM 6.5 CVE-2023-1729 A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash. Fedora 0.21.2+ Fix from $1,6002023-05-15 MEDIUM 6.5 CVE-2022-47393 An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple version… Control For Beaglebone Sl 4.8.0.0+ Fix from $1,6002023-05-15 HIGH 7.8 CVE-2023-28410 Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux before kernel version 6.2.10… I915 Graphics 6.2.10+ Fix from $1,9502023-05-10 MEDIUM 6.7 CVE-2023-25545 Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privi… Server System D50tnp1mhcrlc Firmware 2.90+ Fix from $1,6002023-05-10 HIGH 7.8 CVE-2023-22297 Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable es… Server System D50tnp1mhcrlc Firmware 2.90+ Fix from $1,9502023-05-10 MEDIUM 5.5 CVE-2022-41808 Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to potentially e… Quickassist Technology 1.7.l.4.12+ Fix from $1,6002023-05-10