Browse CVEs

CRITICAL 9.8 CVE-2022-25740 Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface Mdm8207 Firmware Mitigation only Fix from $2,3002023-04-13 CRITICAL 9.8 CVE-2022-25678 Memory correction in modem due to buffer overwrite during coap connection Mdm8207 Firmware Mitigation only Fix from $2,3002023-04-13 MEDIUM 5.5 CVE-2022-24350 An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that the output buffer lies within … Insydeh2o after 5.5 Fix from $1,6002023-04-12 MEDIUM 5.5 CVE-2020-24736 Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script. Sqlite3 Patch available Fix from $1,6002023-04-11 MEDIUM 5.5 CVE-2022-47335 In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Android No fix yet Fix from $1,6002023-04-11 MEDIUM 5.5 CVE-2022-47336 In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Android No fix yet Fix from $1,6002023-04-11 MEDIUM 5.5 CVE-2022-47362 In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Android No fix yet Fix from $1,6002023-04-11 MEDIUM 5.5 CVE-2022-47463 In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Android No fix yet Fix from $1,6002023-04-11 MEDIUM 5.5 CVE-2022-47464 In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. Android Mitigation only Fix from $1,6002023-04-11 HIGH 7.5 CVE-2020-23257 Buffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function jsvGarbageCollectMarkUsed in… Espruino No fix yet Fix from $1,9502023-04-04 HIGH 7.8 CVE-2023-26733 Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows a local attacker to cause a denial of service via the TinyTiffReader_readNextFrame funct… Tinytiff No fix yet Fix from $1,9502023-04-04 CRITICAL 9.8 CVE-2020-19692 Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njs_module_read in the njs_modul… Njs 0.3.4+ Fix from $2,3002023-04-04 CRITICAL 9.8 CVE-2020-19695 Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c funct… Njs 0.3.4+ Fix from $2,3002023-04-04 MEDIUM 6.5 CVE-2023-0977 A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in th… Agent after 5.7.8 Fix from $1,6002023-04-03 CRITICAL 9.8 CVE-2023-25076EPSS 66% A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345c… Sniproxy Patch available Fix from $2,3002023-03-30 CRITICAL 9.8 CVE-2023-28502EPSS 61% Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-… Unidata after 12.2.1 Fix from $2,3002023-03-29 CRITICAL 9.8 CVE-2023-28504 Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-… Unidata after 12.2.1 Fix from $2,3002023-03-29 HIGH 8.8 CVE-2023-28505 Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a buffer… Unidata after 12.2.1 Fix from $1,9502023-03-29 HIGH 8.8 CVE-2023-28506 Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-… Unidata after 12.2.1 Fix from $1,9502023-03-29 HIGH 8.8 CVE-2023-28508 Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-b… Unidata after 12.2.1 Fix from $1,9502023-03-29 HIGH 7.8 CVE-2022-42431 This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute pri… Model 3 Firmware 2022.28+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-27643EPSS 25% This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers… R6400 Firmware 1.0.1.78 / 1.0.4.126+ Fix from $1,9502023-03-29 MEDIUM 5.5 CVE-2023-26924 LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes… Llvm No fix yet Fix from $1,6002023-03-27 CRITICAL 9.8 CVE-2023-25664 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A f… Tensorflow 2.12.0+ Fix from $2,3002023-03-25 MEDIUM 6.7 CVE-2023-28772 An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow. Linux Kernel 4.4.276 / 4.9.276+ Fix from $1,6002023-03-23 MEDIUM 5.5 CVE-2023-1560 A vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0. This issue affects some unknown processing of the file tiny… Tinytiff No fix yet Fix from $1,6002023-03-22 CRITICAL 9.8 CVE-2023-28116 Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write… Contiki Ng after 4.8 Fix from $2,3002023-03-17 HIGH 7.8 CVE-2023-1452 A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown fun… Gpac No fix yet Fix from $1,9502023-03-17 HIGH 7.5 CVE-2023-26767 Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at loggin… Liblouis Patch available Fix from $1,9502023-03-16 HIGH 7.5 CVE-2023-26768 Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and … Liblouis Patch available Fix from $1,9502023-03-16