Browse CVEs

CRITICAL 9.1 CVE-2023-40575 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-… Freerdp No fix yet Fix from $2,3002023-08-31 HIGH 7.5 CVE-2023-40576 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-… Freerdp No fix yet Fix from $1,9502023-08-31 CRITICAL 9.1 CVE-2023-40181 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer… Debian Linux 2.11.0+ Fix from $2,3002023-08-31 CRITICAL 9.1 CVE-2023-39353 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to a missing … Debian Linux 2.11.0+ Fix from $2,3002023-08-31 CRITICAL 9.1 CVE-2023-39356 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a missing offset valid… Debian Linux 2.11.0+ Fix from $2,3002023-08-31 HIGH 7.5 CVE-2023-39354 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-… Debian Linux 2.11.0+ Fix from $1,9502023-08-31 HIGH 7.5 CVE-2023-3646 On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and … Eos 4.29.2f+ Fix from $1,9502023-08-29 CRITICAL 9.1 CVE-2023-41359 An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no ch… Fedora after 9.0 Fix from $2,3002023-08-29 CRITICAL 9.1 CVE-2023-41360 An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation. Debian Linux after 9.0 Fix from $2,3002023-08-29 MEDIUM 5.3 CVE-2023-3425 Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated us… Classic Web 23.2 / 23.6.12695.3+ Fix from $1,6002023-08-25 MEDIUM 5.5 CVE-2023-4042 A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. Th… Codeready Linux Builder No fix yet Fix from $1,6002023-08-23 HIGH 7.8 CVE-2023-39984 ** UNSUPPORTED WHEN ASSIGNED ** Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hitachi EH-VIEW (KeypadDesig… Eh View Mitigation only Fix from $1,9502023-08-23 MEDIUM 5.5 CVE-2023-39986 ** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Read vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially disclose informa… Eh View Mitigation only Fix from $1,6002023-08-23 HIGH 8.1 CVE-2023-4427EPSS 34% Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a cr… Chrome 116.0.5845.110+ Fix from $1,9502023-08-23 HIGH 8.1 CVE-2023-4428EPSS 11% Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a c… Chrome 116.0.5845.110+ Fix from $1,9502023-08-23 HIGH 8.1 CVE-2023-4431 Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a… Chrome 116.0.5845.110+ Fix from $1,9502023-08-23 MEDIUM 5.5 CVE-2023-38666 Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4encrypt. Bento4 No fix yet Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2023-38667 Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service. Netwide Assembler No fix yet Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2023-38668 Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash). Netwide Assembler No fix yet Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2022-48554 File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project. Debian Linux No fix yet Fix from $1,6002023-08-22 HIGH 7.8 CVE-2022-47673 An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of s… Binutils 2.39.3+ Fix from $1,9502023-08-22 MEDIUM 5.9 CVE-2020-22217 Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. Debian Linux Patch available Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2023-27939 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disc… macOS 13.3+ Fix from $1,6002023-08-14 MEDIUM 5.5 CVE-2023-27947 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disc… macOS 13.3+ Fix from $1,6002023-08-14 MEDIUM 5.5 CVE-2023-27948 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disc… macOS 13.3+ Fix from $1,6002023-08-14 MEDIUM 5.5 CVE-2023-28199 An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fix… macOS 13.3+ Fix from $1,6002023-08-14 HIGH 7.8 CVE-2020-36615 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1. Processing a maliciously crafted font… macOS 11.0.1+ Fix from $1,9502023-08-14 MEDIUM 5.5 CVE-2023-21271 In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local informatio… Android Patch available Fix from $1,6002023-08-14 MEDIUM 5.5 CVE-2023-21274 In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inform… Android Patch available Fix from $1,6002023-08-14 HIGH 7.5 CVE-2023-39908 The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. This may… Yubihsm 2 Sdk 2023.08+ Fix from $1,9502023-08-14