Browse CVEs

HIGH 8.8 CVE-2023-21406 Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in th… A1001 Firmware after 1.65.4 Fix from $1,9502023-07-25 HIGH 7.8 CVE-2022-41793 An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted… Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.5 CVE-2023-37758 D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi. Dir 815 Firmware Mitigation only Fix from $1,9502023-07-18 HIGH 7.5 CVE-2023-30383 TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discov… Archer C2 V1 Firmware Mitigation only Fix from $1,9502023-07-18 HIGH 7.5 CVE-2023-31998 A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices. Edgemax Edgerouter Firmware 2.8.9+ Fix from $1,9502023-07-18 MEDIUM 6.7 CVE-2021-43072 A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiAnalyzer version 7.0.2 and below, version 6.4.7 and below, … Fortianalyzer 2.0.9 / 6.2.11+ Fix from $1,6002023-07-18 MEDIUM 6.5 CVE-2023-34140 A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5… Usg 20w Vpn Firmware 5.37+ Fix from $1,6002023-07-17 CRITICAL 9.8 CVE-2023-35802 IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obt… Iq Engine 10.6r1 / 10.6r5+ Fix from $2,3002023-07-15 CRITICAL 9.8 CVE-2023-37793 WAYOS FBM-291W 19.09.11V was discovered to contain a buffer overflow via the component /upgrade_filter.asp. Fbm 291w Firmware No fix yet Fix from $2,3002023-07-14 MEDIUM 5.5 CVE-2023-21243 In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buff… Android Patch available Fix from $1,6002023-07-13 MEDIUM 6.5 CVE-2023-3618 A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in li… Debian Linux 4.5.1+ Fix from $1,6002023-07-12 HIGH 7.8 CVE-2023-29414 A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a … Accutech Manager after 2.7 Fix from $1,9502023-07-12 MEDIUM 5.5 CVE-2020-20118 Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to the aswS… Antivirus 19.7+ Fix from $1,6002023-07-11 CRITICAL 9.8 CVE-2023-34561 A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometr… Geometry Dash No fix yet Fix from $2,3002023-07-11 HIGH 8.1 CVE-2023-24019 A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A specially… Ur32l Firmware No fix yet Fix from $1,9502023-07-06 HIGH 7.5 CVE-2021-46896 Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332. Px4 Drone Autopilot No fix yet Fix from $1,9502023-07-06 CRITICAL 9.1 CVE-2023-37245 Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of… Emui No fix yet Fix from $2,3002023-07-06 CRITICAL 9.8 CVE-2020-25969 gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest(). Gnuplot No fix yet Fix from $2,3002023-07-05 HIGH 7.5 CVE-2023-35979 There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitat… Arubaos 8.6.0.21 / 8.10.0.7+ Fix from $1,9502023-07-05 HIGH 7.8 CVE-2023-21635 Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony. Aqt1000 Firmware Mitigation only Fix from $1,9502023-07-04 HIGH 7.8 CVE-2023-21639 Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client. Aqt1000 Firmware Mitigation only Fix from $1,9502023-07-04 HIGH 7.8 CVE-2023-21640 Memory corruption in Linux when the file upload API is called with parameters having large buffer. Fastconnect 6900 Firmware No fix yet Fix from $1,9502023-07-04 HIGH 7.8 CVE-2023-22386 Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. Ar8035 Firmware Patch available Fix from $1,9502023-07-04 HIGH 7.8 CVE-2023-24851 Memory Corruption in WLAN HOST while parsing QMI response message from firmware. Ar8035 Firmware Patch available Fix from $1,9502023-07-04 HIGH 7.8 CVE-2023-36183 Buffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote to execute arbitrary code and obtain sensitive information via a c… Openimageio after 2.4.12.0 Fix from $1,9502023-07-03 HIGH 7.8 CVE-2023-36377 Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, a… Osslsigncode No fix yet Fix from $1,9502023-07-03 HIGH 8.8 CVE-2023-35176 Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature… W1a75a Firmware 002_2322c+ Fix from $1,9502023-06-30 HIGH 8.8 CVE-2023-35178 Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs. W1a75a Firmware 002_2322c+ Fix from $1,9502023-06-30 MEDIUM 5.5 CVE-2023-25433 libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop … Libtiff Patch available Fix from $1,6002023-06-29 MEDIUM 5.5 CVE-2023-26966 libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be b… Libtiff Patch available Fix from $1,6002023-06-29