Browse CVEs

CRITICAL 9.8 CVE-2021-42863 A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fak… Jerryscript 2021-10-15+ Fix from $2,3002022-05-12 CRITICAL 9.8 CVE-2022-29591 Tenda TX9 Pro 22.03.02.10 devices have a SetNetControlList buffer overflow. Tx9 Pro Firmware Mitigation only Fix from $2,3002022-05-10 HIGH 7.8 CVE-2022-28463 ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow. Debian Linux 6.9.12-44 / 7.1.0-29+ Fix from $1,9502022-05-08 HIGH 8.1 CVE-2022-24903 Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing… Fedora 8.2204.1+ Fix from $1,9502022-05-06 CRITICAL 9.1 CVE-2021-3643 A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a … Sound Exchange Mitigation only Fix from $2,3002022-05-02 CRITICAL 9.8 CVE-2022-28480 ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe. Allmediaserver No fix yet Fix from $2,3002022-04-29 CRITICAL 9.8 CVE-2022-28994 Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request. Small Http Server No fix yet Fix from $2,3002022-04-29 HIGH 8.2 CVE-2021-4206 A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a smal… Enterprise Linux 7.0.0+ Fix from $1,9502022-04-29 HIGH 8.2 CVE-2021-4207 A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.he… Enterprise Linux 7.0.0+ Fix from $1,9502022-04-29 MEDIUM 5.5 CVE-2022-0636 A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash. Thin Installer 1.3.0039+ Fix from $1,6002022-04-22 HIGH 7.2 CVE-2021-46122 Tp-Link TL-WR840N (EU) v6.20 Firmware (0.9.1 4.17 v0001.0 Build 201124 Rel.64328n) is vulnerable to Buffer Overflow via the Password reset feature. Tl Wr840n Firmware No fix yet Fix from $1,9502022-04-18 HIGH 7.5 CVE-2021-44493 An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Ex… Gt.m after 7.0-000 Fix from $1,9502022-04-15 MEDIUM 5.3 CVE-2022-1328 Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line Debian Linux 2.2.3+ Fix from $1,6002022-04-14 HIGH 8.8 CVE-2021-21939 A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to c… Imagegear No fix yet Fix from $1,9502022-04-14 MEDIUM 5.9 CVE-2021-21967 An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-craft… Seaconnect 370w Firmware No fix yet Fix from $1,6002022-04-14 HIGH 7.5 CVE-2022-27008 nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat() when a slow array appended element is fast array. Njs Patch available Fix from $1,9502022-04-14 CRITICAL 9.8 CVE-2022-24788 Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer from a potential buffer overrun… Vyper 0.3.2+ Fix from $2,3002022-04-13 HIGH 7.5 CVE-2022-27387 MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially… MariaDB 10.2.44 / 10.3.35+ Fix from $1,9502022-04-12 HIGH 7.5 CVE-2022-26334 A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC… Scalance X302 7eec Firmware 4.1.4+ Fix from $1,9502022-04-12 HIGH 7.5 CVE-2022-26335 A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC… Scalance X302 7eec Firmware 4.1.4+ Fix from $1,9502022-04-12 MEDIUM 5.5 CVE-2022-26414 A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which coul… Vmg3312 T20a Firmware 5.13 / 5.17+ Fix from $1,6002022-04-11 HIGH 7.5 CVE-2022-24793 PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects app… Debian Linux after 2.12 Fix from $1,9502022-04-06 CRITICAL 9.8 CVE-2021-41751 Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecma_builtin_array_prototype_object_slice in Jerryscript before … Jerryscript 2021-10-20+ Fix from $2,3002022-04-05 CRITICAL 10.0 CVE-2022-22570 A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious ac… Ua Lite Firmware 3.8.31.13+ Fix from $2,3002022-04-01 HIGH 7.5 CVE-2021-32968 Two buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2.2 or earlier may allow a remote attacker to caus… Nport Iaw5150a 6i\/o Firmware after 2.2 Fix from $1,9502022-04-01 MEDIUM 5.5 CVE-2021-30331 Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdra… Ar8035 Firmware Mitigation only Fix from $1,6002022-04-01 HIGH 7.8 CVE-2021-35089 Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto Qca6696 Firmware No fix yet Fix from $1,9502022-04-01 HIGH 7.2 CVE-2021-23850 A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable… Autodome Ip 4000i Firmware Mitigation only Fix from $1,9502022-03-30 HIGH 7.2 CVE-2021-23851 A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable … Autodome Ip 4000i Firmware Mitigation only Fix from $1,9502022-03-30 HIGH 7.2 CVE-2022-26639 TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter. Tl Wr840n Firmware No fix yet Fix from $1,9502022-03-28