Browse CVEs

HIGH 7.8 CVE-2023-33085 Memory corruption in wearables while processing data from AON. Ar8035 Firmware Patch available Fix from $1,9502024-01-02 HIGH 7.8 CVE-2023-33030 Memory corruption in HLOS while running playready use-case. 315 5g Iot Modem Firmware No fix yet Fix from $1,9502024-01-02 CRITICAL 9.8 CVE-2023-33025 Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call. Ar8035 Firmware Mitigation only Fix from $2,3002024-01-02 HIGH 7.5 CVE-2023-50096 STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bu… X Cube Safea1 No fix yet Fix from $1,9502024-01-01 HIGH 7.8 CVE-2023-51434 Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution. Magic Ui 6.1.0.212+ Fix from $1,9502023-12-29 HIGH 7.5 CVE-2023-47091 An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS… Stormshield Network Security 4.3.23 / 4.6.10+ Fix from $1,9502023-12-25 CRITICAL 9.8 CVE-2023-51771 In MicroHttpServer (aka Micro HTTP Server) through a8ab029, _ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long URI. Micro Http Server No fix yet Fix from $2,3002023-12-25 CRITICAL 9.8 CVE-2023-7095EPSS 14% A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by this issue is the function ma… A7100ru Firmware No fix yet Fix from $2,3002023-12-25 HIGH 7.5 CVE-2023-48704 ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer ov… Clickhouse 23.3.18.15 / 23.8.8.20+ Fix from $1,9502023-12-22 CRITICAL 9.8 CVE-2023-50986 Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function. I29 Firmware Mitigation only Fix from $2,3002023-12-20 CRITICAL 9.8 CVE-2023-50044 Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string. Mjs Patch available Fix from $2,3002023-12-20 CRITICAL 9.8 CVE-2023-50628 Buffer Overflow vulnerability in libming version 0.4.8, allows attackers to execute arbitrary code and obtain sensitive information via parser.c comp… Libming Patch available Fix from $2,3002023-12-20 HIGH 7.5 CVE-2023-6711 Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted m… Rtu500 Firmware 12.0.15.0 / 12.2.12.0+ Fix from $1,9502023-12-19 CRITICAL 9.8 CVE-2023-6906 A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024. Affected is the function main of the file /cgi… A7100ru Firmware No fix yet Fix from $2,3002023-12-18 HIGH 7.5 CVE-2023-50784 A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the server by sendi… Unrealircd 6.1.4+ Fix from $1,9502023-12-16 CRITICAL 9.8 CVE-2023-50469EPSS 9% Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 was discovered to contain a buffer overflow via the ApCliEncrypType parameter at /apply.c… Lbt T300 T310 Firmware No fix yet Fix from $2,3002023-12-15 HIGH 8.2 CVE-2023-37457 Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk versions 18.20.0 and prior, 20.5.0 and prior, and 21.0.0; as we… Asterisk after 20.5.0 Fix from $1,9502023-12-14 HIGH 8.8 CVE-2023-42799 Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow sta… Moonlight Common C 2023-10-06+ Fix from $1,9502023-12-14 HIGH 8.8 CVE-2023-42800 Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow sta… Moonlight Common C 2023-10-06+ Fix from $1,9502023-12-14 HIGH 7.6 CVE-2023-42801 Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow sta… Moonlight Common C 0.10.23 / 0.13.4+ Fix from $1,9502023-12-14 MEDIUM 6.5 CVE-2023-25642 There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticate… Mc801a Firmware Mitigation only Fix from $1,6002023-12-14 MEDIUM 5.5 CVE-2023-50268 jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a pat… Jq Patch available Fix from $1,6002023-12-13 MEDIUM 5.5 CVE-2023-50246 jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue. Jq Patch available Fix from $1,6002023-12-13 MEDIUM 5.3 CVE-2023-49990 Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c. Espeak Ng No fix yet Fix from $1,6002023-12-12 MEDIUM 5.3 CVE-2023-49993 Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at readclause.c. Espeak Ng No fix yet Fix from $1,6002023-12-12 HIGH 7.5 CVE-2023-46283 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo… Opcenter Quality 4.1 / 15+ Fix from $1,9502023-12-12 HIGH 7.5 CVE-2023-46284 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo… Opcenter Quality 4.1 / 15+ Fix from $1,9502023-12-12 CRITICAL 9.8 CVE-2023-50245 OpenEXR-viewer is a viewer for OpenEXR files with detailed metadata probing. Versions prior to 0.6.1 have a memory overflow vulnerability. This issue… Openexr Viewer 0.6.1+ Fix from $2,3002023-12-11 HIGH 7.2 CVE-2023-32975 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502023-12-08 HIGH 7.2 CVE-2023-32968 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502023-12-08