Browse CVEs

CRITICAL 9.8 CVE-2024-1916 Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unaut… Mitigation only Fix from $2,3002024-03-15 CRITICAL 9.8 CVE-2024-1917 Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unaut… Mitigation only Fix from $2,3002024-03-15 CRITICAL 9.8 CVE-2024-0803 Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unaut… Mitigation only Fix from $2,3002024-03-15 MEDIUM 5.3 CVE-2024-22396 An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (D… Mitigation only Fix from $1,6002024-03-14 HIGH 8.8 CVE-2024-21450 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20596 / 10.0.14393.6897+ Fix from $1,9502024-03-12 HIGH 8.8 CVE-2024-21441 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20596 / 10.0.14393.6897+ Fix from $1,9502024-03-12 HIGH 8.8 CVE-2024-21444 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20596 / 10.0.14393.6897+ Fix from $1,9502024-03-12 CRITICAL 9.8 CVE-2024-27304 pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size… Pgproto3 2.3.3 / 4.18.2+ Fix from $2,3002024-03-06 HIGH 7.8 CVE-2021-47098 In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations Com… Linux Kernel 5.15.2+ Fix from $1,9502024-03-04 HIGH 7.8 CVE-2023-43550 Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. Ar8035 Firmware Patch available Fix from $1,9502024-03-04 MEDIUM 6.7 CVE-2024-20025 In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002024-03-04 CRITICAL 9.1 CVE-2024-27101 SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Integer overflow in… Spicedb 1.29.2+ Fix from $2,3002024-03-01 MEDIUM 5.5 CVE-2021-46940 In the Linux kernel, the following vulnerability has been resolved: tools/power turbostat: Fix offset overflow issue in index converting The idx_to… Linux Kernel 5.10.36 / 5.11.20+ Fix from $1,6002024-02-27 CRITICAL 9.8 CVE-2024-23605 A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .ggu… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 CRITICAL 9.8 CVE-2024-23496 A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 CRITICAL 9.8 CVE-2024-21825 A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 CRITICAL 9.8 CVE-2024-21836 A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 MEDIUM 6.2 CVE-2024-25366 Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServer_handleG… Libiec61850 No fix yet Fix from $1,6002024-02-20 CRITICAL 9.8 CVE-2024-21812 An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A … Fedora No fix yet Fix from $2,3002024-02-20 HIGH 8.8 CVE-2024-1580 An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1… Safari 1.1.1 / 1.4.0+ Fix from $1,9502024-02-19 HIGH 7.8 CVE-2024-20730 Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in a… Acrobat Dc 20.005.30574 / 23.008.20533+ Fix from $1,9502024-02-15 HIGH 8.8 CVE-2024-21420 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 7.8 CVE-2024-21379 Microsoft Word Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21372 Windows OLE Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 HIGH 8.8 CVE-2024-21350 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20469 / 10.0.14393.6709+ Fix from $1,9502024-02-13 MEDIUM 6.8 CVE-2024-24857 A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity … Debian Linux 6.7.12+ Fix from $1,6002024-02-05 HIGH 7.8 CVE-2024-21851 in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow. Openharmony after 3.2.4 Fix from $1,9502024-02-02 HIGH 7.8 CVE-2024-21845 in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow. Openharmony after 3.2.4 Fix from $1,9502024-02-02 MEDIUM 5.3 CVE-2023-6780 An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. T… Fedora 2.39+ Fix from $1,6002024-01-31 HIGH 7.5 CVE-2024-23775 Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via mbedtls_x5… Mbed Tls 2.28.7 / 3.5.2+ Fix from $1,9502024-01-31