Browse CVEs

HIGH 7.8 CVE-2023-35986 Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to a stack-based buffer overflow. An a… Dicom Viewer Pro 12.2.6+ Fix from $1,9502023-10-19 HIGH 8.8 CVE-2022-25334 The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD… Omap L138 Firmware Mitigation only Fix from $1,9502023-10-19 CRITICAL 9.8 CVE-2023-4601 A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execu… System Configuration 2023+ Fix from $2,3002023-10-18 MEDIUM 6.5 CVE-2023-41711 SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash. Sonicos 6.5.4.4-44v-21-2340 / 6.5.4.13-105n+ Fix from $1,6002023-10-17 MEDIUM 6.5 CVE-2023-41712 SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash. Sonicos 6.5.4.4-44v-21-2340 / 6.5.4.13-105n+ Fix from $1,6002023-10-17 MEDIUM 6.5 CVE-2023-39276 SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash. Sonicos 6.5.4.4-44v-21-2340 / 6.5.4.13-105n+ Fix from $1,6002023-10-17 MEDIUM 6.5 CVE-2023-39277 SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall … Sonicos 6.5.4.4-44v-21-2340 / 6.5.4.13-105n+ Fix from $1,6002023-10-17 MEDIUM 6.5 CVE-2023-39278 SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash. Sonicos 6.5.4.4-44v-21-2340 / 6.5.4.13-105n+ Fix from $1,6002023-10-17 MEDIUM 6.5 CVE-2023-39279 SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash. Sonicos 6.5.4.4-44v-21-2340 / 6.5.4.13-105n+ Fix from $1,6002023-10-17 MEDIUM 6.5 CVE-2023-39280 SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash. Sonicos 6.5.4.4-44v-21-2340 / 6.5.4.13-105n+ Fix from $1,6002023-10-17 CRITICAL 9.8 CVE-2023-45984 TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter i… X5000r Firmware No fix yet Fix from $2,3002023-10-16 MEDIUM 6.8 CVE-2023-21414 NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly … Axis Os 10.12.206 / 11.6.94+ Fix from $1,6002023-10-16 CRITICAL 9.8 CVE-2023-36950 TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parame… X5000r Firmware No fix yet Fix from $2,3002023-10-16 CRITICAL 9.8 CVE-2023-36947 TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter i… X5000r Firmware No fix yet Fix from $2,3002023-10-16 HIGH 8.8 CVE-2023-4263 Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver Zephyr after 3.4.0 Fix from $1,9502023-10-13 HIGH 7.2 CVE-2023-32973 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts 4.5.4.2467 / 5.0.1.2425+ Fix from $1,9502023-10-13 MEDIUM 5.5 CVE-2023-44176 A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CL… Junos 20.4+ Fix from $1,6002023-10-13 MEDIUM 5.5 CVE-2023-44177 A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a … Junos 20.4+ Fix from $1,6002023-10-13 MEDIUM 5.5 CVE-2023-44178 A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CL… Junos 20.4+ Fix from $1,6002023-10-13 CRITICAL 9.8 CVE-2023-34365 A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108. A specially crafted n… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 CRITICAL 9.8 CVE-2023-34426 A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108. A specially crafted networ… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 CRITICAL 9.8 CVE-2023-35055 A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lea… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 CRITICAL 9.8 CVE-2023-35056 A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lea… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 CRITICAL 9.8 CVE-2023-31272 A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A specially crafted network reques… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 HIGH 7.8 CVE-2023-36729 Named Pipe File System Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.14393.6351+ Fix from $1,9502023-10-10 HIGH 7.8 CVE-2023-45601 A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.1.250), Parasolid V36.0 (All v… Parasolid 35.0.262 / 35.1.250+ Fix from $1,9502023-10-10 HIGH 7.8 CVE-2023-30900 A vulnerability has been identified in Xpedition Layout Browser (All versions < VX.2.14). Affected application contains a stack overflow vulnerabilit… Xpedition Layout Browser Mitigation only Fix from $1,9502023-10-10 CRITICAL 9.8 CVE-2023-3725 Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem Zephyr after 3.4.0 Fix from $2,3002023-10-06 HIGH 7.2 CVE-2023-32971 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts 4.5.4.2467 / 5.0.1.2425+ Fix from $1,9502023-10-06 HIGH 7.2 CVE-2023-32972 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts 4.5.4.2467 / 5.0.1.2425+ Fix from $1,9502023-10-06