Vulnerability index

Browse CVEs

2,663 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Heap-based Buffer OverflowCWE-122 × clear
Sigma Lite Firmware CRITICAL 9.8
CVE-2023-33221

When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This a…

Fix: 1.2.7 / 2.12.2+
Fix from $2,300 2023-12-15
Jq MEDIUM 5.5
CVE-2023-50246

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue.

Patch available
Fix from $1,600 2023-12-13
Windows 10 1507 HIGH 8.8
CVE-2023-35639

Microsoft ODBC Driver Remote Code Execution Vulnerability

Fix: 10.0.10240.20345 / 10.0.14393.6529+
Fix from $1,950 2023-12-12
Windows 10 1507 HIGH 8.8
CVE-2023-35630EPSS 6%

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Fix: 10.0.10240.20345 / 10.0.14393.6529+
Fix from $1,950 2023-12-12
Windows 10 1507 HIGH 7.8
CVE-2023-21740

Windows Media Remote Code Execution Vulnerability

Fix: 10.0.10240.20345 / 10.0.14393.6529+
Fix from $1,950 2023-12-12
Informix Dynamic Server MEDIUM 5.5
CVE-2023-28526

IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a…

Mitigation only
Fix from $1,600 2023-12-09
Informix Dynamic Server MEDIUM 5.5
CVE-2023-28527

IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local…

Mitigation only
Fix from $1,600 2023-12-09
Informix Dynamic Server HIGH 7.8
CVE-2023-28523

IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an…

Mitigation only
Fix from $1,950 2023-12-09
Aleos MEDIUM 5.5
CVE-2023-40465

Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area netwo…

Fix: after 4.16.0
Fix from $1,600 2023-12-04
Industrial Gateway Server CRITICAL 9.1
CVE-2023-5908

KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.

Fix: after 7.614
Fix from $2,300 2023-11-30
Autocad HIGH 7.8
CVE-2023-41140

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious acto…

Fix: 2023.1.4 / 2024.1+
Fix from $1,950 2023-11-23
Autocad CRITICAL 9.8
CVE-2023-29073

A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious ac…

Fix: 2023.1.4 / 2024.1+
Fix from $2,300 2023-11-23
Premiere Pro HIGH 7.8
CVE-2023-47056

Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in …

Fix: after 23.6
Fix from $1,950 2023-11-16
Audition MEDIUM 5.5
CVE-2023-47051

Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in ar…

Fix: after 23.6.1
Fix from $1,600 2023-11-16
Media Encoder HIGH 7.8
CVE-2023-47042

Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result …

Fix: after 24.0.2
Fix from $1,950 2023-11-16
Windows 10 1507 HIGH 8.0
CVE-2023-36425

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Fix: 10.0.10240.20308 / 10.0.14393.6452+
Fix from $1,950 2023-11-14
Windows 10 1507 HIGH 8.8
CVE-2023-36423

Microsoft Remote Registry Service Remote Code Execution Vulnerability

Fix: 10.0.10240.20308 / 10.0.14393.6452+
Fix from $1,950 2023-11-14
Windows 10 1607 HIGH 7.8
CVE-2023-36408

Windows Hyper-V Elevation of Privilege Vulnerability

Fix: 10.0.14393.6452 / 10.0.17763.5122+
Fix from $1,950 2023-11-14
Windows 10 1507 HIGH 8.8
CVE-2023-36402

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Fix: 10.0.10240.20308 / 10.0.14393.6452+
Fix from $1,950 2023-11-14
Windows 10 1507 HIGH 8.8
CVE-2023-36400

Windows HMAC Key Derivation Elevation of Privilege Vulnerability

Fix: 10.0.10240.20308 / 10.0.14393.6452+
Fix from $1,950 2023-11-14
Visual Studio 2019 MEDIUM 5.5
CVE-2023-36042

Visual Studio Denial of Service Vulnerability

Fix: 16.11.32 / 17.2.22+
Fix from $1,600 2023-11-14
Windows 10 1507 HIGH 7.8
CVE-2023-36036 KEVEPSS 17%

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Fix: 10.0.10240.20308 / 10.0.14393.6452+
Fix from $1,950 2023-11-14
Windows 10 1507 CRITICAL 9.8
CVE-2023-36028

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

Fix: 10.0.10240.20308 / 10.0.14393.6452+
Fix from $2,300 2023-11-14
Gecko Software Development Kit CRITICAL 9.8
CVE-2023-27882

A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially cra…

No fix yet
Fix from $2,300 2023-11-14
Gecko Software Development Kit CRITICAL 9.8
CVE-2023-25181

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of ne…

No fix yet
Fix from $2,300 2023-11-14
Px4 Drone Autopilot CRITICAL 9.8
CVE-2023-46256

PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerabili…

Fix: after 1.13.3
Fix from $2,300 2023-10-31
Samba MEDIUM 6.5
CVE-2023-5568

A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a d…

Fix: 4.19.2+
Fix from $1,600 2023-10-25
Enterprise Linux HIGH 7.8
CVE-2023-4692

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesys…

Fix: 2.12+
Fix from $1,950 2023-10-25
Fedora HIGH 8.8
CVE-2023-5686

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.

Fix: 5.9.0+
Fix from $1,950 2023-10-20
Vpn HIGH 8.1
CVE-2023-27395

A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02…

Patch available
Fix from $1,950 2023-10-12