Browse CVEs

HIGH 8.1 CVE-2024-37040 CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a user with access to the devic… Sage Rtu Firmware Patch available Fix from $1,9502024-06-12 HIGH 7.5 CVE-2024-36650 TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_… A3100r Firmware No fix yet Fix from $1,9502024-06-11 MEDIUM 6.8 CVE-2022-37020 Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code exe… Elite Slice Firmware 00.02.64 / 01.62+ Fix from $1,6002024-06-10 CRITICAL 9.1 CVE-2024-24192 robdns commit d76d2e6 was discovered to contain a heap overflow via the component block->filename at /src/zonefile-insertion.c. Robdns Mitigation only Fix from $2,3002024-06-06 HIGH 7.8 CVE-2024-5305 Kofax Power PDF PDF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu… Power Pdf 5.0.0.18+ Fix from $1,9502024-06-06 MEDIUM 6.5 CVE-2024-5463 A vulnerability regarding buffer copy without checking the size of input ('Classic Buffer Overflow') has been found in the login component. This allo… Bc500 Firmware 1.1.1-0383+ Fix from $1,6002024-06-04 HIGH 8.8 CVE-2023-43556 Memory corruption in Hypervisor when platform information mentioned is not aligned. Ar8035 Firmware Mitigation only Fix from $1,9502024-06-03 HIGH 7.8 CVE-2023-43542 Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked. 9205 Lte Modem Firmware Mitigation only Fix from $1,9502024-06-03 HIGH 7.8 CVE-2023-43538 Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization. Aqt1000 Firmware No fix yet Fix from $1,9502024-06-03 HIGH 8.1 CVE-2024-5564 A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a mal… Mitigation only Fix from $1,9502024-05-31 HIGH 8.1 CVE-2024-37017 asdcplib (aka AS-DCP Lib) 2.13.1 has a heap-based buffer over-read in ASDCP::TimedText::MXFReader::h__Reader::MD_to_TimedText_TDesc in AS_DCP_TimedTe… Mitigation only Fix from $1,9502024-05-31 MEDIUM 6.7 CVE-2024-30164 Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions. This … Mitigation only Fix from $1,6002024-05-28 HIGH 7.1 CVE-2024-30165 Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with eleva… Mitigation only Fix from $1,9502024-05-28 CRITICAL 9.8 CVE-2024-35398 TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules. Cp900l Firmware Mitigation only Fix from $2,3002024-05-28 MEDIUM 5.3 CVE-2024-35400 TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRules Cp900l Firmware Mitigation only Fix from $1,6002024-05-28 HIGH 8.8 CVE-2022-48681 Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail. Egrt 00 Firmware No fix yet Fix from $1,9502024-05-28 MEDIUM 5.3 CVE-2022-4969 A vulnerability, which was classified as critical, has been found in bwoodsend rockhopper up to 0.1.2. Affected by this issue is the function count_r… Patch available Fix from $1,6002024-05-27 MEDIUM 6.5 CVE-2024-33809 PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks. Tidb No fix yet Fix from $1,6002024-05-24 HIGH 7.5 CVE-2024-5243 TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary co… Omada Er605 Firmware Mitigation only Fix from $1,9502024-05-23 HIGH 7.8 CVE-2021-47485 In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflo… Linux Kernel 4.4.292 / 4.9.290+ Fix from $1,9502024-05-22 HIGH 7.3 CVE-2024-25724 In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing from Routing Service, Recording Service, Queuing Servi… Connext Professional 5.3.1.44 / 6.0.1.35+ Fix from $1,9502024-05-21 HIGH 8.8 CVE-2024-27128 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-05-21 HIGH 8.8 CVE-2024-27129 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-05-21 HIGH 8.8 CVE-2024-27130EPSS 38% A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-05-21 CRITICAL 9.1 CVE-2023-52735 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself sock_map pr… Linux Kernel 5.15.95 / 6.1.13+ Fix from $2,3002024-05-21 HIGH 7.8 CVE-2021-47347 In the Linux kernel, the following vulnerability has been resolved: wl1251: Fix possible buffer overflow in wl1251_cmd_scan Function wl1251_cmd_sca… Linux Kernel 4.4.276 / 4.9.276+ Fix from $1,9502024-05-21 MEDIUM 6.5 CVE-2023-37929 The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacke… Dx3300 T1 Firmware Mitigation only Fix from $1,6002024-05-21 MEDIUM 5.5 CVE-2024-0816 The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of se… Lte3202 M437 Firmware Mitigation only Fix from $1,6002024-05-21 CRITICAL 9.8 CVE-2024-35571 Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv. Ax1806 Firmware No fix yet Fix from $2,3002024-05-20 MEDIUM 5.3 CVE-2024-35823 In the Linux kernel, the following vulnerability has been resolved: vt: fix unicode buffer corruption when deleting characters This is the same iss… Linux Kernel 4.19.312 / 5.4.274+ Fix from $1,6002024-05-17