Browse CVEs

HIGH 7.2 CVE-2024-37044 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-11-22 MEDIUM 6.5 CVE-2024-37047 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,6002024-11-22 HIGH 7.8 CVE-2024-53335 TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in downloadFlile.cgi. A810r Firmware No fix yet Fix from $1,9502024-11-21 HIGH 8.8 CVE-2024-53334 TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in infostat.cgi. A810r Firmware No fix yet Fix from $1,9502024-11-21 MEDIUM 6.2 CVE-2024-53425 A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain … Assimp No fix yet Fix from $1,6002024-11-21 MEDIUM 6.2 CVE-2024-53426 A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function. Mitigation only Fix from $1,6002024-11-21 HIGH 7.5 CVE-2024-48986 An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from i… Mbed Patch available Fix from $1,9502024-11-20 HIGH 7.5 CVE-2024-48982 An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from i… Mbed Patch available Fix from $1,9502024-11-20 CRITICAL 9.8 CVE-2024-48984 An issue was discovered in MBed OS 6.16.0. When parsing hci reports, the hci parsing software dynamically determines the length of a list of reports … Mbed Os Patch available Fix from $2,3002024-11-20 HIGH 7.5 CVE-2024-48981 An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet header by l… Mbed Patch available Fix from $1,9502024-11-20 HIGH 7.5 CVE-2024-48985 An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by rea… Mbed Patch available Fix from $1,9502024-11-20 HIGH 7.8 CVE-2024-44307 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrar… macOS 14.6+ Fix from $1,9502024-11-20 HIGH 7.8 CVE-2024-44306 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrar… macOS 14.6+ Fix from $1,9502024-11-20 CRITICAL 9.8 CVE-2024-52714 Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime. Ac6 Firmware No fix yet Fix from $2,3002024-11-19 CRITICAL 9.8 CVE-2024-52759EPSS 6% D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function. Di 8003 Firmware No fix yet Fix from $2,3002024-11-19 MEDIUM 5.7 CVE-2024-52711 DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip parameter. Di 8100 Firmware No fix yet Fix from $1,6002024-11-19 HIGH 7.8 CVE-2024-50282 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() Avoid a pos… Linux Kernel 4.19.324 / 5.4.286+ Fix from $1,9502024-11-19 MEDIUM 6.5 CVE-2021-1379 Multiple vulnerabilities in the Cisco&nbsp;Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco&nbsp;IP Phone Series… Ip Conference Phone 7832 Firmware 11.3 / 12.8+ Fix from $1,6002024-11-18 CRITICAL 9.8 CVE-2015-20111 miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflo… Patch available Fix from $2,3002024-11-18 CRITICAL 9.8 CVE-2024-45970 Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious ser… Libiec61850 1.6.0+ Fix from $2,3002024-11-15 CRITICAL 9.8 CVE-2024-45971 Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a malicious ser… Libiec61850 1.6.0+ Fix from $2,3002024-11-15 MEDIUM 5.3 CVE-2024-24450 Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN5G AMF <= 2.0.0 allows a remo… Mitigation only Fix from $1,6002024-11-15 MEDIUM 5.3 CVE-2024-24447 A buffer overflow in the ngap_amf_handle_pdu_session_resource_setup_response function of oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial… Mitigation only Fix from $1,6002024-11-15 MEDIUM 6.5 CVE-2024-41206 A stack-based buffer over-read in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Information Disclosure via a crafted TS video… Tsmuxer No fix yet Fix from $1,6002024-11-14 HIGH 8.8 CVE-2024-41209 A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service (DoS) and Code Execution via … Tsmuxer No fix yet Fix from $1,9502024-11-14 MEDIUM 6.5 CVE-2024-41217 A heap-based buffer overflow in tsMuxer version nightly-2024-05-10-02-00-45 allows attackers to cause Denial of Service (DoS) via a crafted MKV video… Tsmuxer No fix yet Fix from $1,6002024-11-14 HIGH 8.8 CVE-2024-49777 A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service (DoS), Information Disclosure… Tsmuxer No fix yet Fix from $1,9502024-11-14 HIGH 8.8 CVE-2024-49778 A heap-based buffer overflow in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service (DoS) and Code Execution via … Tsmuxer No fix yet Fix from $1,9502024-11-14 MEDIUM 5.4 CVE-2024-50838 A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vuln… E Learning Management System No fix yet Fix from $1,6002024-11-14 MEDIUM 5.4 CVE-2024-50839 A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management System Project 1.0. This vul… E Learning Management System No fix yet Fix from $1,6002024-11-14