Browse CVEs

CRITICAL 9.8 CVE-2024-30602 Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function. Fh1203 Firmware No fix yet Fix from $2,3002024-03-28 CRITICAL 9.8 CVE-2024-30584 Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function. Fh1202 Firmware No fix yet Fix from $2,3002024-03-28 CRITICAL 9.8 CVE-2024-30593 Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function. Fh1202 Firmware No fix yet Fix from $2,3002024-03-28 CRITICAL 9.1 CVE-2023-45929 S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr(). S Lang No fix yet Fix from $2,3002024-03-27 MEDIUM 6.2 CVE-2024-25580 An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2… Qt 5.15.17 / 6.2.12+ Fix from $1,6002024-03-27 HIGH 8.8 CVE-2024-25395 A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2. Rt Thread after 5.0.2 Fix from $1,9502024-03-27 CRITICAL 9.8 CVE-2024-2452 In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cause an integer wrap-around an… Threadx Netx Duo 6.4.0+ Fix from $2,3002024-03-26 HIGH 7.8 CVE-2023-6175 NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file Wireshark after 4.0.10 Fix from $1,9502024-03-26 HIGH 8.1 CVE-2024-29195 The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for co… Azure C Shared Utility after 2023-12-01 Fix from $1,9502024-03-26 HIGH 7.5 CVE-2023-47430 Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to cause a denial of service via via the SendContainer() functio… Readymedia Patch available Fix from $1,9502024-03-25 MEDIUM 5.5 CVE-2021-47172 In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers … Linux Kernel 5.4.124 / 5.10.42+ Fix from $1,6002024-03-25 CRITICAL 9.8 CVE-2024-29243 Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the vpn_client_ip parameter at /apply.cgi. Lbt T300 Mini1 Firmware No fix yet Fix from $2,3002024-03-21 MEDIUM 5.3 CVE-2024-29244 Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the pin_code_3g parameter at /apply.cgi. Lbt T300 Mini1 Firmware No fix yet Fix from $1,6002024-03-21 HIGH 7.8 CVE-2024-28583 Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the readLine() function… Freeimage No fix yet Fix from $1,9502024-03-20 MEDIUM 5.5 CVE-2024-28576 Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_tc… Freeimage No fix yet Fix from $1,6002024-03-20 MEDIUM 5.5 CVE-2024-28565 Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the psdParser:… Freeimage No fix yet Fix from $1,6002024-03-20 HIGH 7.8 CVE-2024-28569 Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::Xdr::read(… Freeimage No fix yet Fix from $1,9502024-03-20 MEDIUM 5.5 CVE-2024-28570 Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the processMak… Freeimage No fix yet Fix from $1,6002024-03-20 MEDIUM 6.2 CVE-2024-28564 Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::C… Freeimage No fix yet Fix from $1,6002024-03-20 HIGH 7.8 CVE-2023-52612 In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req->dst buffer overflow The req->dst buffer size should be… Linux Kernel 4.19.306 / 5.4.268+ Fix from $1,9502024-03-18 HIGH 7.8 CVE-2023-52614 In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix buffer overflow in trans_stat_show Fix buffer overflow in tra… Linux Kernel 5.10.216 / 5.15.149+ Fix from $1,9502024-03-18 CRITICAL 9.8 CVE-2024-28639 Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrar… X5000r Firmware No fix yet Fix from $2,3002024-03-16 CRITICAL 10.0 CVE-2024-25139 In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffer overflo… Omada Er605 Firmware after 2.2.3 Fix from $2,3002024-03-14 HIGH 8.8 CVE-2015-10123 An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a sp… Mitigation only Fix from $1,9502024-03-13 CRITICAL 9.8 CVE-2024-22039 A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP… Cerberus Pro En Engineering Tool 4.0.5016 / 4.2.5015+ Fix from $2,3002024-03-12 MEDIUM 6.2 CVE-2024-25984 In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information di… Android Mitigation only Fix from $1,6002024-03-11 CRITICAL 9.8 CVE-2024-2331 A vulnerability was found in SourceCodester Tourist Reservation System 1.0. It has been declared as critical. This vulnerability affects the function… Tourist Reservation System Mitigation only Fix from $2,3002024-03-09 HIGH 7.8 CVE-2024-23286 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, m… Ipados 1.1 / 10.4+ Fix from $1,9502024-03-08 HIGH 7.8 CVE-2024-25817 Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .git/HEAD, .git/refs, and .git/o… Eza 0.18.2+ Fix from $1,9502024-03-06 HIGH 7.8 CVE-2021-47107 In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument th… Linux Kernel 5.15.12+ Fix from $1,9502024-03-04