Browse CVEs

HIGH 7.8 CVE-2024-27407 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed overflow check in mi_enum_attr() Linux Kernel 6.1.120 / 6.6.19+ Fix from $1,9502024-05-17 HIGH 8.8 CVE-2023-38581 Buffer overflow in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privil… Power Gadget Mitigation only Fix from $1,9502024-05-16 HIGH 7.5 CVE-2024-34905 FlyFish v3.0.0 was discovered to contain a buffer overflow via the password parameter on the login page. This vulnerability allows attackers to cause… Flyfish No fix yet Fix from $1,9502024-05-16 HIGH 7.8 CVE-2024-0762 Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix Sec… Securecore Technology 4.0.1.998 / 4.1.0.562+ Fix from $1,9502024-05-14 CRITICAL 9.8 CVE-2024-35099 TOTOLINK LR350 V9.3.5u.6698_B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth. Lr350 Firmware Mitigation only Fix from $2,3002024-05-14 CRITICAL 9.8 CVE-2024-34945 Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle. Fh1206 Firmware No fix yet Fix from $2,3002024-05-14 HIGH 8.8 CVE-2024-34196 Totolink AC1200 Wireless Dual Band Gigabit Router A3002RU_V3 Firmware V3.0.0-B20230809.1615 is vulnerable to Buffer Overflow. The "boa" program allow… A3002ru V3 Firmware No fix yet Fix from $1,9502024-05-14 MEDIUM 5.7 CVE-2024-33875 HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c, resulting in the corruption of the instruction poi… Hdf5 1.14.4+ Fix from $1,6002024-05-14 MEDIUM 5.7 CVE-2024-33876 HDF5 Library through 1.14.3 has a heap buffer overflow in H5S__point_deserialize in H5Spoint.c. Hdf5 1.14.4+ Fix from $1,6002024-05-14 CRITICAL 9.8 CVE-2024-33874 HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c. Hdf5 1.14.4+ Fix from $2,3002024-05-14 MEDIUM 6.5 CVE-2024-33771 A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial… Dir 619l Firmware No fix yet Fix from $1,6002024-05-14 MEDIUM 6.5 CVE-2024-33773 A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a den… Dir 619l Firmware No fix yet Fix from $1,6002024-05-14 MEDIUM 6.5 CVE-2024-33454 Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack compone… Esp Idf No fix yet Fix from $1,6002024-05-14 HIGH 7.5 CVE-2024-30259 FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.… Fast Dds 2.6.8 / 2.10.4+ Fix from $1,9502024-05-14 MEDIUM 5.7 CVE-2024-29166 HDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode, resulting in the corruption of the instruction pointer and causing denial of ser… Hdf5 1.14.4+ Fix from $1,6002024-05-14 CRITICAL 9.8 CVE-2024-29159 HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the corruption of the instruction pointer and causing denial … Hdf5 1.14.4+ Fix from $2,3002024-05-14 CRITICAL 9.8 CVE-2024-27280 A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and unget… Mitigation only Fix from $2,3002024-05-14 CRITICAL 9.8 CVE-2022-32504 An issue was discovered on certain Nuki Home Solutions devices. The code used to parse the JSON objects received from the WebSocket service provided … Mitigation only Fix from $2,3002024-05-14 HIGH 7.5 CVE-2024-34244 libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be triggered when the function is fed with spec… Libmodbus No fix yet Fix from $1,9502024-05-08 HIGH 7.3 CVE-2024-32664 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, spec… Suricata 6.0.19 / 7.0.5+ Fix from $1,9502024-05-07 CRITICAL 9.8 CVE-2023-46012 Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD UPnP. Ea7500 Firmware No fix yet Fix from $2,3002024-05-07 MEDIUM 6.5 CVE-2024-33780 MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPprf.cpp. This vulnerability al… Multi Protocol Spdz No fix yet Fix from $1,6002024-05-07 MEDIUM 6.5 CVE-2024-33783 MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cp… Multi Protocol Spdz No fix yet Fix from $1,6002024-05-07 HIGH 8.1 CVE-2024-22472 A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issu… Mitigation only Fix from $1,9502024-05-07 HIGH 7.5 CVE-2024-34252 wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wa… Wasm3 No fix yet Fix from $1,9502024-05-06 CRITICAL 9.8 CVE-2024-21480 Memory corruption while playing audio file having large-sized input buffer. Ar8035 Firmware No fix yet Fix from $2,3002024-05-06 HIGH 7.8 CVE-2023-43524 Memory corruption when the bandpass filter order received from AHAL is not within the expected range. Ar8035 Firmware Patch available Fix from $1,9502024-05-06 HIGH 7.8 CVE-2023-43525 Memory corruption while copying the sound model data from user to kernel buffer during sound model register. Ar8035 Firmware Patch available Fix from $1,9502024-05-06 HIGH 7.8 CVE-2023-43526 Memory corruption while querying module parameters from Listen Sound model client in kernel from user space. Ar8035 Firmware Patch available Fix from $1,9502024-05-06 MEDIUM 6.3 CVE-2024-4511 A vulnerability classified as critical has been found in Shanghai Sunfull Automation BACnet Server HMI1002-ARM 2.0.4. This affects an unknown part of… Mitigation only Fix from $1,6002024-05-06