Browse CVEs

HIGH 7.4 CVE-2023-40548 A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed … Shim 15.8+ Fix from $1,9502024-01-29 HIGH 7.5 CVE-2024-22861 Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module. Ffmpeg Patch available Fix from $1,9502024-01-27 CRITICAL 9.8 CVE-2024-22860 Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in … Ffmpeg Patch available Fix from $2,3002024-01-27 CRITICAL 9.8 CVE-2024-22862 Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser. Ffmpeg Patch available Fix from $2,3002024-01-27 CRITICAL 9.8 CVE-2023-52389 UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and P… Poco 1.11.8 / 1.12.5+ Fix from $2,3002024-01-27 HIGH 7.8 CVE-2024-23307 Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow. Linux Kernel 6.1.84 / 6.6.24+ Fix from $1,9502024-01-25 MEDIUM 5.5 CVE-2024-23851 copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missi… Linux Kernel after 6.7.1 Fix from $1,6002024-01-23 CRITICAL 9.8 CVE-2024-22211 FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_pla… Freerdp 2.11.5 / 3.2.0+ Fix from $2,3002024-01-19 HIGH 7.8 CVE-2021-33631 Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects open… Openeuler 4.19.90-2401.3 / 5.10.0-183.0.0+ Fix from $1,9502024-01-18 HIGH 7.8 CVE-2023-31034 NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow… Dgx A100 Firmware 1.25+ Fix from $1,9502024-01-12 CRITICAL 9.8 CVE-2023-49262 The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, provided there is an active user session. H8951 4g Esp Firmware 2310271149+ Fix from $2,3002024-01-12 MEDIUM 6.5 CVE-2023-52339 In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows. Libebml 1.4.5+ Fix from $1,6002024-01-12 MEDIUM 5.5 CVE-2023-28185 An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4, macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4… Ipados 9.4 / 11.7.5+ Fix from $1,6002024-01-10 HIGH 8.1 CVE-2023-41056 Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that … Redis 7.0.15 / 7.2.4+ Fix from $1,9502024-01-10 HIGH 8.8 CVE-2023-47992 An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a d… Freeimage No fix yet Fix from $1,9502024-01-09 HIGH 8.8 CVE-2023-47994 An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information… Freeimage No fix yet Fix from $1,9502024-01-09 MEDIUM 6.5 CVE-2023-47996 An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of se… Freeimage No fix yet Fix from $1,6002024-01-09 HIGH 7.8 CVE-2024-20698EPSS 9% Windows Kernel Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.5329 / 10.0.19044.3930+ Fix from $1,9502024-01-09 HIGH 8.0 CVE-2024-20654 Microsoft ODBC Driver Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20402 / 10.0.14393.6614+ Fix from $1,9502024-01-09 CRITICAL 9.8 CVE-2024-21646EPSS 5% Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When… Azure Uamqp 2024-01-01+ Fix from $2,3002024-01-09 HIGH 7.8 CVE-2023-39316 Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lea… Gtkwave No fix yet Fix from $1,9502024-01-08 HIGH 7.8 CVE-2023-39317 Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lea… Gtkwave No fix yet Fix from $1,9502024-01-08 HIGH 7.8 CVE-2023-39271 Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can … Gtkwave No fix yet Fix from $1,9502024-01-08 HIGH 7.8 CVE-2023-39272 Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can … Gtkwave No fix yet Fix from $1,9502024-01-08 HIGH 7.8 CVE-2023-39273 Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can … Gtkwave No fix yet Fix from $1,9502024-01-08 HIGH 7.8 CVE-2023-39274 Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can … Gtkwave No fix yet Fix from $1,9502024-01-08 HIGH 7.8 CVE-2023-39275 Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can … Gtkwave No fix yet Fix from $1,9502024-01-08 HIGH 7.8 CVE-2023-38653 Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115. A specially crafted… Gtkwave No fix yet Fix from $1,9502024-01-08 HIGH 7.8 CVE-2023-39270 Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can … Gtkwave No fix yet Fix from $1,9502024-01-08 HIGH 7.8 CVE-2023-38650 Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115. A specially crafte… Gtkwave No fix yet Fix from $1,9502024-01-08