Browse CVEs

HIGH 7.5 CVE-2024-42420 Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper proce… E Studio1058 Firmware Mitigation only Fix from $1,9502024-10-25 HIGH 7.5 CVE-2024-43424 Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may caus… E Studio1058 Firmware Mitigation only Fix from $1,9502024-10-25 HIGH 7.5 CVE-2024-45829 Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in a… E Studio1058 Firmware Mitigation only Fix from $1,9502024-10-25 HIGH 8.6 CVE-2024-48208 pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file. Pure Ftpd 1.0.52+ Fix from $1,9502024-10-24 HIGH 8.2 CVE-2024-31029 An issue in the server_handle_regular function of the test_coap_server.c file within the FreeCoAP project allows remote attackers to cause a Denial o… Freecoap No fix yet Fix from $1,9502024-10-22 HIGH 7.1 CVE-2024-50042 In the Linux kernel, the following vulnerability has been resolved: ice: Fix increasing MSI-X on VF Increasing MSI-X value on a VF leads to invalid… Linux Kernel 6.8 / 6.11.4+ Fix from $1,9502024-10-21 HIGH 7.1 CVE-2022-49031 In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4403: Fix oob read in afe4403_read_raw KASAN report out-of-boun… Linux Kernel 4.9.335 / 4.14.301+ Fix from $1,9502024-10-21 HIGH 7.1 CVE-2022-49032 In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw KASAN report out… Linux Kernel 4.9.335 / 4.14.301+ Fix from $1,9502024-10-21 HIGH 7.1 CVE-2022-48999 In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fib_info contains an nh refe… Linux Kernel 5.4.226 / 5.10.158+ Fix from $1,9502024-10-21 HIGH 7.1 CVE-2022-48966 In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp->indir[0]… Linux Kernel 4.9.336 / 4.14.302+ Fix from $1,9502024-10-21 HIGH 7.1 CVE-2024-49928 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid reading out of bounds when loading TX power FW elements Beca… Linux Kernel 6.10.14 / 6.11.3+ Fix from $1,9502024-10-21 HIGH 7.1 CVE-2024-47757 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() The function nilfs… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 HIGH 7.1 CVE-2024-47723 In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG() and diAlloc() In dbNextAG() , there is no … Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 HIGH 7.1 CVE-2024-47721 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to preve… Linux Kernel 6.10.13 / 6.11.2+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2023-32190 mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root priv… Mitigation only Fix from $1,9502024-10-16 HIGH 8.1 CVE-2024-41311 In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an o… Debian Linux Patch available Fix from $1,9502024-10-15 HIGH 7.8 CVE-2024-47965 Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attack… Cncsoft G2 Mitigation only Fix from $1,9502024-10-10 HIGH 7.8 CVE-2024-48958 execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because s… Libarchive 3.7.5+ Fix from $1,9502024-10-10 HIGH 7.8 CVE-2024-48957 execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because s… Libarchive 3.7.5+ Fix from $1,9502024-10-10 HIGH 7.5 CVE-2024-39516 An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthentica… Junos 21.4+ Fix from $1,9502024-10-09 HIGH 7.8 CVE-2024-47421 Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could res… Framemaker 2020.7 / 2022.5+ Fix from $1,9502024-10-09 MEDIUM 5.5 CVE-2024-47419 Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… Animate 23.0.8 / 24.0.5+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-47420 Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… Animate 23.0.8 / 24.0.5+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-45145 Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… Lightroom 7.5 / 12.5.1+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-20787 Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo… Substance 3d Painter 10.1.0+ Fix from $1,6002024-10-09 HIGH 7.5 CVE-2024-43562 Windows Network Address Translation (NAT) Denial of Service Vulnerability Windows 10 1507 10.0.10240.20796 / 10.0.14393.7428+ Fix from $1,9502024-10-08 HIGH 7.5 CVE-2024-43565 Windows Network Address Translation (NAT) Denial of Service Vulnerability Windows 10 1507 10.0.10240.20796 / 10.0.14393.7428+ Fix from $1,9502024-10-08 MEDIUM 6.5 CVE-2024-43557 Windows Mobile Broadband Driver Denial of Service Vulnerability Windows 10 1809 10.0.17763.6414 / 10.0.19044.5011+ Fix from $1,6002024-10-08 MEDIUM 6.5 CVE-2024-43558 Windows Mobile Broadband Driver Denial of Service Vulnerability Windows 10 1809 10.0.17763.6414 / 10.0.19044.5011+ Fix from $1,6002024-10-08 MEDIUM 6.5 CVE-2024-43561 Windows Mobile Broadband Driver Denial of Service Vulnerability Windows 10 1809 10.0.17763.6414 / 10.0.19044.5011+ Fix from $1,6002024-10-08