Browse CVEs

MEDIUM 5.4 CVE-2024-50840 A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerabi… E Learning Management System No fix yet Fix from $1,6002024-11-14 HIGH 7.5 CVE-2024-50305 Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2… Traffic Server 9.2.6+ Fix from $1,9502024-11-14 MEDIUM 6.5 CVE-2024-50956 A buffer overflow in the RecvSocketData function of Inovance HCPLC_AM401-CPU1608TPTN 21.38.0.0, HCPLC_AM402-CPU1608TPTN 41.38.0.0, and HCPLC_AM403-CP… Mitigation only Fix from $1,6002024-11-13 HIGH 7.5 CVE-2024-25253 Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module. No fix yet Fix from $1,9502024-11-11 CRITICAL 9.8 CVE-2024-25254 SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter. Superscan No fix yet Fix from $2,3002024-11-11 CRITICAL 9.8 CVE-2024-52533 gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient f… Debian Linux 2.82.1+ Fix from $2,3002024-11-11 CRITICAL 9.8 CVE-2024-50667EPSS 7% The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6. Th… Tew 820ap Firmware No fix yet Fix from $2,3002024-11-11 HIGH 7.8 CVE-2024-46952 An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (rel… Debian Linux 10.04.0+ Fix from $1,9502024-11-10 CRITICAL 9.8 CVE-2024-35426 vmir e8117 was discovered to contain a stack overflow via the init_local_vars function at /src/vmir_wasm_parser.c. Vmir No fix yet Fix from $2,3002024-11-08 MEDIUM 6.2 CVE-2024-35420 wac commit 385e1 was discovered to contain a heap overflow. Wac No fix yet Fix from $1,6002024-11-08 HIGH 7.8 CVE-2024-35422 vmir e8117 was discovered to contain a heap buffer overflow via the wasm_call function at /src/vmir_wasm_parser.c. Vmir No fix yet Fix from $1,9502024-11-08 MEDIUM 6.2 CVE-2024-35410 wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause… Wac No fix yet Fix from $1,6002024-11-08 MEDIUM 6.2 CVE-2024-35418 wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c. This vulnerability allows attackers to caus… Wac No fix yet Fix from $1,6002024-11-08 MEDIUM 5.5 CVE-2024-35419 wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c. This vulnerability allows attackers to cau… Wac No fix yet Fix from $1,6002024-11-08 CRITICAL 9.8 CVE-2024-10964 A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handle_add_plugin in the library cmd.libr… Neuron after 2.10.0 Fix from $2,3002024-11-07 MEDIUM 6.5 CVE-2024-51409 Buffer Overflow vulnerability in Tenda O3 v.1.0.0.5 allows a remote attacker to cause a denial of service via a network packet in a fixed format to a… O3 Firmware No fix yet Fix from $1,6002024-11-06 HIGH 8.8 CVE-2024-51116 Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'. Ac6 Firmware No fix yet Fix from $1,9502024-11-05 HIGH 7.8 CVE-2024-50131 In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen() … Linux Kernel 5.15.170 / 6.1.115+ Fix from $1,9502024-11-05 MEDIUM 5.5 CVE-2024-50090 In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix overflow in oa batch buffer By default xe_bb_create_job() append… Linux Kernel 6.11.4+ Fix from $1,6002024-11-05 MEDIUM 5.7 CVE-2024-52023 Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppo… Xr300 Firmware Mitigation only Fix from $1,6002024-11-05 MEDIUM 5.7 CVE-2024-52024 Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizp… Xr300 Firmware Mitigation only Fix from $1,6002024-11-05 MEDIUM 5.7 CVE-2024-52025 Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geni… Xr300 Firmware Mitigation only Fix from $1,6002024-11-05 MEDIUM 5.7 CVE-2024-52026 Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_… Xr300 Firmware Mitigation only Fix from $1,6002024-11-05 MEDIUM 5.7 CVE-2024-52028 Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at wiz_pptp.cgi. This vulnerability allows a… R7000p Firmware Mitigation only Fix from $1,6002024-11-05 MEDIUM 5.7 CVE-2024-52029 Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at genie_pptp.cgi. This vulnerability allows… R7000p Firmware Mitigation only Fix from $1,6002024-11-05 MEDIUM 5.7 CVE-2024-52030 Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at ru_wan_flow.cgi. This vulnerability allow… R7000p Firmware Mitigation only Fix from $1,6002024-11-05 MEDIUM 5.7 CVE-2024-52013 Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip… R8500 Firmware Mitigation only Fix from $1,6002024-11-05 MEDIUM 5.7 CVE-2024-52014 Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip… R8500 Firmware Mitigation only Fix from $1,6002024-11-05 MEDIUM 5.7 CVE-2024-52015 Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip… R8500 Firmware Mitigation only Fix from $1,6002024-11-05 MEDIUM 5.7 CVE-2024-52016 Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in th… R8500 Firmware Mitigation only Fix from $1,6002024-11-05