Browse CVEs

HIGH 7.8 CVE-2024-43700 xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerabi… Xfpt 1.01+ Fix from $1,9502024-08-29 HIGH 8.8 CVE-2024-8198 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potential… Chrome 128.0.6613.113+ Fix from $1,9502024-08-28 CRITICAL 9.8 CVE-2024-34198 TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa program fail… A3002ru Firmware No fix yet Fix from $2,3002024-08-28 HIGH 7.3 CVE-2024-41176 The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service (DoS) condition on the d… Mdp Package 1.2.7.0 / 14.1.2.0+ Fix from $1,9502024-08-27 CRITICAL 9.8 CVE-2024-44555 Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-41285 A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a c… Fw300r Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-45237 An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a… Fort Validator 1.6.3+ Fix from $2,3002024-08-24 HIGH 8.1 CVE-2024-42040 Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an atta… U Boot after 2025.10 Fix from $1,9502024-08-23 CRITICAL 9.8 CVE-2024-8078 A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been declared as critical. This vulnerability affects the function setT… T8 Firmware No fix yet Fix from $2,3002024-08-22 CRITICAL 9.8 CVE-2024-8079 A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been rated as critical. This issue affects the function exportOvpn. The… T8 Firmware No fix yet Fix from $2,3002024-08-22 CRITICAL 9.8 CVE-2024-8076 A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this issue is the function setDiagnosis… T8 Firmware Mitigation only Fix from $2,3002024-08-22 HIGH 7.5 CVE-2024-6918 CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause a crash of the Accutech Manager… Mitigation only Fix from $1,9502024-08-20 CRITICAL 9.8 CVE-2024-42812EPSS 16% In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers wh… Dir 860l Firmware No fix yet Fix from $2,3002024-08-19 CRITICAL 9.8 CVE-2024-42813 In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. … Tew 752dru Firmware No fix yet Fix from $2,3002024-08-19 HIGH 8.8 CVE-2024-7849 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L… Mitigation only Fix from $1,9502024-08-16 HIGH 7.5 CVE-2024-34727 In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote infor… Android Mitigation only Fix from $1,9502024-08-15 HIGH 8.8 CVE-2024-7832 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS… Dns 120 Firmware No fix yet Fix from $1,9502024-08-15 CRITICAL 9.8 CVE-2024-7831 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L… Dns 120 Firmware No fix yet Fix from $2,3002024-08-15 CRITICAL 9.8 CVE-2024-7829 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS… Dns 120 Firmware No fix yet Fix from $2,3002024-08-15 CRITICAL 9.8 CVE-2024-7830 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L… Dns 120 Firmware No fix yet Fix from $2,3002024-08-15 CRITICAL 9.8 CVE-2024-7828EPSS 16% ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW,… Dns 120 Firmware No fix yet Fix from $2,3002024-08-15 HIGH 7.3 CVE-2022-23817 Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/wri… Mitigation only Fix from $1,9502024-08-13 MEDIUM 5.2 CVE-2021-46746 Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access to AMD s… No fix yet Fix from $1,6002024-08-13 CRITICAL 9.8 CVE-2024-42547 TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the http_host parameter in the loginauth function. A3100r Firmware No fix yet Fix from $2,3002024-08-12 CRITICAL 9.8 CVE-2024-42546 TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth function. A3100r Firmware No fix yet Fix from $2,3002024-08-12 CRITICAL 9.8 CVE-2024-42543 TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the http_host parameter in the loginauth function. A3700r Firmware No fix yet Fix from $2,3002024-08-12 CRITICAL 9.8 CVE-2024-42545 TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg function. A3700r Firmware No fix yet Fix from $2,3002024-08-12 CRITICAL 9.8 CVE-2024-42520 TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl. A3002r Firmware No fix yet Fix from $2,3002024-08-12 CRITICAL 9.8 CVE-2024-7613 A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromGstDhcpSetSer of the file /go… Fh1206 Firmware No fix yet Fix from $2,3002024-08-12 CRITICAL 9.8 CVE-2024-7490 Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution throug… Advanced Software Framework after 3.52.0.2574 Fix from $2,3002024-08-08