Browse CVEs

HIGH 7.2 CVE-2023-41275 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-02-02 CRITICAL 9.1 CVE-2023-5841 Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX ima… Openexr after 3.2.1 Fix from $2,3002024-02-01 HIGH 7.8 CVE-2023-6246 A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog fun… Fedora 2.39+ Fix from $1,9502024-01-31 HIGH 7.5 CVE-2023-6779 An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and… Fedora 2.39+ Fix from $1,9502024-01-31 HIGH 7.5 CVE-2023-52356 A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw a… Enterprise Linux Patch available Fix from $1,9502024-01-25 CRITICAL 9.8 CVE-2024-22211 FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_pla… Freerdp 2.11.5 / 3.2.0+ Fix from $2,3002024-01-19 HIGH 7.8 CVE-2023-31031 NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A su… Dgx A100 Firmware 1.25+ Fix from $1,9502024-01-12 MEDIUM 5.3 CVE-2024-21596 A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthent… Junos Mitigation only Fix from $1,6002024-01-12 MEDIUM 5.5 CVE-2024-21594 A Heap-based Buffer Overflow vulnerability in the Network Services Daemon (NSD) of Juniper Networks Junos OS allows authenticated, low privileged, lo… Junos 20.4+ Fix from $1,6002024-01-12 MEDIUM 5.2 CVE-2024-21337 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Edge Chromium 120.0.2210.133+ Fix from $1,6002024-01-11 CRITICAL 9.8 CVE-2023-48263 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (R… Nexo Os after 1500-sp2 Fix from $2,3002024-01-10 HIGH 8.8 CVE-2023-37297 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation… Megarac Sp X 12.7 / 13.6+ Fix from $1,9502024-01-09 HIGH 8.8 CVE-2023-37294 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation… Megarac Sp X 12.7 / 13.6+ Fix from $1,9502024-01-09 HIGH 8.8 CVE-2023-37295 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation… Megarac Sp X 12.7 / 13.6+ Fix from $1,9502024-01-09 HIGH 7.3 CVE-2024-20697EPSS 72% Windows libarchive Remote Code Execution Vulnerability Windows 11 22h2 10.0.22621.3007 / 10.0.22631.3007+ Fix from $1,9502024-01-09 HIGH 7.3 CVE-2024-20696 Windows libarchive Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.5329 / 10.0.19044.3930+ Fix from $1,9502024-01-09 HIGH 7.8 CVE-2024-20677 A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has … 365 Apps Patch available Fix from $1,9502024-01-09 HIGH 7.8 CVE-2022-36763 EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. … Edk2 after 202311 Fix from $1,9502024-01-09 HIGH 7.8 CVE-2022-36764 EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. S… Edk2 after 202311 Fix from $1,9502024-01-09 HIGH 7.8 CVE-2023-49122 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buff… Solid Edge Se2023 223.0+ Fix from $1,9502024-01-09 HIGH 7.8 CVE-2023-49123 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buff… Solid Edge Se2023 223.0+ Fix from $1,9502024-01-09 HIGH 7.8 CVE-2023-49121 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buff… Solid Edge Se2023 223.0+ Fix from $1,9502024-01-09 MEDIUM 5.5 CVE-2023-6992 Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c… Zlib 2023-11-16+ Fix from $1,6002024-01-04 HIGH 7.8 CVE-2023-47039 A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell… Perl 5.32.1+ Fix from $1,9502024-01-02 HIGH 7.3 CVE-2023-7104 A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ex… SQLite after 3.43.0 Fix from $1,9502023-12-29 CRITICAL 9.8 CVE-2023-7158 A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the file objslic… Micropython 1.22.0+ Fix from $2,3002023-12-29 HIGH 7.5 CVE-2023-48704 ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer ov… Clickhouse 23.3.18.15 / 23.8.8.20+ Fix from $1,9502023-12-22 CRITICAL 9.8 CVE-2023-47118 ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer o… Clickhouse 23.3.16.7 / 23.8.6.16+ Fix from $2,3002023-12-20 HIGH 7.5 CVE-2023-3430 A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote att… Openimageio No fix yet Fix from $1,9502023-12-18 HIGH 7.8 CVE-2023-47038 A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an … Perl after 5.38.0 Fix from $1,9502023-12-18