Browse CVEs

HIGH 7.8 CVE-2024-27459EPSS 8% The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary … Openvpn 2.5.10 / 2.6.10+ Fix from $1,9502024-07-08 HIGH 7.8 CVE-2024-39480 In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Currently, when the user attempts … Linux Kernel 4.19.316 / 5.4.278+ Fix from $1,9502024-07-05 MEDIUM 6.6 CVE-2024-32228 FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevc_frame_end. Ffmpeg Patch available Fix from $1,6002024-07-01 CRITICAL 9.8 CVE-2024-6403 A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet … A301 Firmware No fix yet Fix from $2,3002024-06-28 CRITICAL 9.8 CVE-2024-6402 A vulnerability classified as critical was found in Tenda A301 15.13.08.12. Affected by this vulnerability is the function fromSetWirelessRepeat of t… A301 Firmware No fix yet Fix from $2,3002024-06-28 HIGH 7.8 CVE-2024-37003 A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications, can be used to cause a Stack… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 8.8 CVE-2024-6189 A vulnerability was found in Tenda A301 15.13.08.12. It has been classified as critical. Affected is the function fromSetWirelessRepeat of the file /… A301 Firmware No fix yet Fix from $1,9502024-06-20 HIGH 7.5 CVE-2024-29012 Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause Denial of Service (DoS) via ssc… Sonicos 7.0.1-5161 / 7.1.1-7058+ Fix from $1,9502024-06-20 HIGH 8.8 CVE-2024-6144 Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent att… Wcb6200q Firmware Mitigation only Fix from $1,9502024-06-19 HIGH 8.8 CVE-2024-6146 Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adja… Wcb6200q Firmware Mitigation only Fix from $1,9502024-06-19 MEDIUM 6.2 CVE-2024-38443 C/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use case… Mitigation only Fix from $1,6002024-06-16 HIGH 8.4 CVE-2024-36600 Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file. Libcdio 2.3.0+ Fix from $1,9502024-06-14 HIGH 8.8 CVE-2024-37641 TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow via the submit-url parameter at /formNewSchedule Tew 814dap Firmware No fix yet Fix from $1,9502024-06-14 HIGH 8.8 CVE-2024-37643 TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter at /formPasswordAuth . Tew 814dap Firmware No fix yet Fix from $1,9502024-06-14 HIGH 8.8 CVE-2024-37645 TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter at /formSysLog . Tew 814dap Firmware No fix yet Fix from $1,9502024-06-14 HIGH 8.8 CVE-2024-37640 TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyGuestCfg. A3700r Firmware No fix yet Fix from $1,9502024-06-14 HIGH 8.8 CVE-2024-37639 TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via eport in the function setIpPortFilterRules. A3700r Firmware No fix yet Fix from $1,9502024-06-14 HIGH 7.2 CVE-2024-31163 ASUS Download Master has a buffer overflow vulnerability. An unauthenticated remote attacker with administrative privileges can exploit this vulnerab… Mitigation only Fix from $1,9502024-06-14 HIGH 7.2 CVE-2024-3079 Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary co… Mitigation only Fix from $1,9502024-06-14 HIGH 8.8 CVE-2024-5948 Deep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adj… Dse855 Firmware Mitigation only Fix from $1,9502024-06-13 HIGH 8.8 CVE-2024-5950 Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows netwo… Dse855 Firmware Mitigation only Fix from $1,9502024-06-13 HIGH 8.8 CVE-2024-37631 TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the File parameter in function UploadCustomModule. A3700r Firmware No fix yet Fix from $1,9502024-06-13 CRITICAL 9.8 CVE-2024-37632 TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth . A3700r Firmware No fix yet Fix from $2,3002024-06-13 HIGH 8.8 CVE-2024-37633 TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfg A3700r Firmware No fix yet Fix from $1,9502024-06-13 CRITICAL 9.8 CVE-2024-37634 TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg. A3700r Firmware No fix yet Fix from $2,3002024-06-13 CRITICAL 9.8 CVE-2024-37635 TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg A3700r Firmware No fix yet Fix from $2,3002024-06-13 HIGH 7.8 CVE-2024-37029 Fuji Electric Tellus Lite V-Simulator is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute arbitrary code. Tellus Lite V Simulator 4.0.20.0+ Fix from $1,9502024-06-13 HIGH 8.8 CVE-2024-28877 MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installatio… Dicom Viewer 2024.2+ Fix from $1,9502024-06-11 HIGH 7.5 CVE-2024-30083 Windows Standards-Based Storage Management Service Denial of Service Vulnerability Windows Server 2012 10.0.14393.7070 / 10.0.17763.5936+ Fix from $1,9502024-06-11 HIGH 7.5 CVE-2024-26010 A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitch… Fortios 7.0.4 / 7.0.15+ Fix from $1,9502024-06-11