Browse CVEs

HIGH 7.8 CVE-2024-39480 In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Currently, when the user attempts … Linux Kernel 4.19.316 / 5.4.278+ Fix from $1,9502024-07-05 MEDIUM 5.4 CVE-2024-29507 Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters. Ghostscript 10.03.0+ Fix from $1,6002024-07-03 HIGH 8.8 CVE-2024-29506 Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name. Ghostscript 10.03.0+ Fix from $1,9502024-07-03 MEDIUM 6.6 CVE-2024-32228 FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevc_frame_end. Ffmpeg Patch available Fix from $1,6002024-07-01 HIGH 7.8 CVE-2024-32230 FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg… Ffmpeg No fix yet Fix from $1,9502024-07-01 HIGH 7.8 CVE-2024-23368 Memory corruption when allocating and accessing an entry in an SMEM partition. Apq8064au Firmware Patch available Fix from $1,9502024-07-01 HIGH 8.1 CVE-2024-27628 Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. Dcmtk Patch available Fix from $1,9502024-06-28 CRITICAL 9.8 CVE-2024-39349 A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it does not… Bc500 Firmware 1.0.7-0298+ Fix from $2,3002024-06-28 HIGH 7.5 CVE-2024-39134 A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function … Zziplib Patch available Fix from $1,9502024-06-27 MEDIUM 5.3 CVE-2024-39129 Heap Buffer Overflow vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function PushTSBuf() at /src/Payloa… Mitigation only Fix from $1,6002024-06-27 HIGH 8.2 CVE-2024-39207 lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmem_write function. No fix yet Fix from $1,9502024-06-27 MEDIUM 6.5 CVE-2024-38951 A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted MavLink message. Px4 Drone Autopilot No fix yet Fix from $1,6002024-06-25 HIGH 7.5 CVE-2024-38952 PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at /logger/logged_topics.cpp. Px4 Drone Autopilot No fix yet Fix from $1,9502024-06-25 HIGH 8.2 CVE-2024-4640 OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. A… Oncell G3470a Lte Us T Firmware after 1.7.7 Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-39291 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_m… Linux Kernel 6.6.33 / 6.9.4+ Fix from $1,9502024-06-24 CRITICAL 9.8 CVE-2024-33278 Buffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.388_24198 allows a remote attacker to execute arbitrary code vi… Mitigation only Fix from $2,3002024-06-24 HIGH 7.8 CVE-2021-47609 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Fix string overflow in SCPI genpd driver Without the bound … Linux Kernel 4.9.294 / 4.14.259+ Fix from $1,9502024-06-19 HIGH 7.0 CVE-2024-38576 In the Linux kernel, the following vulnerability has been resolved: rcu: Fix buffer overflow in print_cpu_stall_info() The rcuc-starvation output f… Linux Kernel 6.1.93 / 6.6.33+ Fix from $1,9502024-06-19 HIGH 7.8 CVE-2024-38577 In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow There is a possi… Linux Kernel 5.10.226 / 5.15.167+ Fix from $1,9502024-06-19 HIGH 7.8 CVE-2024-38541 In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_modalias() In of_modalias(), if the… Linux Kernel 5.4.294 / 5.10.238+ Fix from $1,9502024-06-19 HIGH 8.8 CVE-2024-6142 Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to e… Wcb6200q Firmware Mitigation only Fix from $1,9502024-06-19 HIGH 8.8 CVE-2024-6143 Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to ex… Wcb6200q Firmware Mitigation only Fix from $1,9502024-06-19 HIGH 8.2 CVE-2024-37305 oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using pos… Patch available Fix from $1,9502024-06-17 HIGH 8.8 CVE-2024-24320 Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sensitive information and execut… Cloudpanel after 2.4.0 Fix from $1,9502024-06-14 CRITICAL 9.8 CVE-2024-37637 TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg. A3700r Firmware No fix yet Fix from $2,3002024-06-14 HIGH 7.8 CVE-2024-0099 NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could cause buffer overrun in the host. A succ… Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-32907 In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502024-06-13 CRITICAL 9.8 CVE-2024-37632 TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth . A3700r Firmware No fix yet Fix from $2,3002024-06-13 CRITICAL 9.8 CVE-2024-37635 TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg A3700r Firmware No fix yet Fix from $2,3002024-06-13 HIGH 7.5 CVE-2024-36760 A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: (/ SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : _ … Mitigation only Fix from $1,9502024-06-13