Browse CVEs

MEDIUM 6.7 CVE-2023-32829 In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution… Yocto Mitigation only Fix from $1,6002023-10-02 MEDIUM 6.7 CVE-2023-32823 In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-10-02 HIGH 7.5 CVE-2023-5173 In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unp… Firefox 118+ Fix from $1,9502023-09-27 HIGH 7.8 CVE-2023-38150 Windows Kernel Elevation of Privilege Vulnerability Windows 11 21h2 10.0.22000.2416 / 10.0.22621.2275+ Fix from $1,9502023-09-12 HIGH 7.8 CVE-2023-38142EPSS 7% Windows Kernel Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20162 / 10.0.14393.6252+ Fix from $1,9502023-09-12 HIGH 7.8 CVE-2023-36792 Visual Studio Remote Code Execution Vulnerability .net Framework 15.9.57 / 16.11.30+ Fix from $1,9502023-09-12 HIGH 7.5 CVE-2023-28831 The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run in… Simatic Cloud Connect 7 Cc712 Firmware 2.2 / 2.9.7+ Fix from $1,9502023-09-12 HIGH 8.8 CVE-2023-35673 In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjace… Android Mitigation only Fix from $1,9502023-09-11 CRITICAL 9.8 CVE-2023-35681 In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code e… Android Mitigation only Fix from $2,3002023-09-11 HIGH 8.6 CVE-2023-4576 On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive… Firefox 102.15 / 115.2+ Fix from $1,9502023-09-11 HIGH 7.8 CVE-2023-21644 Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request. Aqt1000 Firmware Mitigation only Fix from $1,9502023-09-05 HIGH 7.8 CVE-2023-21655 Memory corruption in Audio while validating and mapping metadata. Qca6391 Firmware Patch available Fix from $1,9502023-09-05 HIGH 7.8 CVE-2023-4734 Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. Vim 9.0.1846 / 14.1+ Fix from $1,9502023-09-02 CRITICAL 9.8 CVE-2023-36326 Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a d… Relic 2022-11-14+ Fix from $2,3002023-09-01 CRITICAL 9.8 CVE-2023-36327 Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause … Relic 2022-11-14+ Fix from $2,3002023-09-01 CRITICAL 9.8 CVE-2023-36328 Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute ar… Fedora 1.2.1+ Fix from $2,3002023-09-01 MEDIUM 5.5 CVE-2023-4722 Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV. Gpac 2.3-dev+ Fix from $1,6002023-09-01 CRITICAL 9.8 CVE-2023-40186 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer… Debian Linux 2.11.0+ Fix from $2,3002023-08-31 HIGH 7.8 CVE-2023-40022 Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in `consume_… Rizin 0.6.1+ Fix from $1,9502023-08-24 HIGH 7.5 CVE-2020-21699 The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the nginx ra… Tengine Mitigation only Fix from $1,9502023-08-22 HIGH 7.5 CVE-2023-39125 NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated. NOTE… Ntsc Crt No fix yet Fix from $1,9502023-08-18 HIGH 7.5 CVE-2023-2914EPSS 40% The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the… Thinmanager Thinserver after 13.0.2 Fix from $1,9502023-08-17 MEDIUM 5.5 CVE-2021-28025 Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of ser… Qt No fix yet Fix from $1,6002023-08-11 MEDIUM 5.5 CVE-2021-28429 Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial o… Ffmpeg Patch available Fix from $1,6002023-08-11 CRITICAL 9.8 CVE-2023-35085 An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings … Unifi Uap Firmware after 6.5.50 Fix from $2,3002023-08-10 CRITICAL 9.8 CVE-2023-36911 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Windows 10 10.0.10240.20107 / 10.0.14393.6167+ Fix from $2,3002023-08-08 HIGH 7.8 CVE-2023-36900EPSS 11% Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows 10 10.0.10240.20107 / 10.0.14393.6167+ Fix from $1,9502023-08-08 CRITICAL 9.8 CVE-2023-36910 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Windows 10 10.0.10240.20107 / 10.0.14393.6167+ Fix from $2,3002023-08-08 HIGH 7.8 CVE-2023-36866 Microsoft Office Visio Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502023-08-08 HIGH 7.5 CVE-2023-35383 Microsoft Message Queuing Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20107 / 10.0.14393.6167+ Fix from $1,9502023-08-08