Browse CVEs

HIGH 7.5 CVE-2022-27892 Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Got… Gotham 3.22.11.2+ Fix from $1,9502023-02-16 HIGH 7.5 CVE-2022-27897 Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory.… Gotham 3.22.11.2+ Fix from $1,9502023-02-16 HIGH 7.5 CVE-2023-21816 Windows Active Directory Domain Services API Denial of Service Vulnerability Windows 10 10.0.10240.19747 / 10.0.14393.5717+ Fix from $1,9502023-02-14 HIGH 7.5 CVE-2023-21818EPSS 43% Windows Secure Channel Denial of Service Vulnerability Windows 10 10.0.10240.19747 / 10.0.14393.5717+ Fix from $1,9502023-02-14 HIGH 8.8 CVE-2023-21685 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.19747 / 10.0.14393.5717+ Fix from $1,9502023-02-14 HIGH 8.0 CVE-2023-22934 In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command lets a search bypass SPL safeguar… Splunk 8.1.13 / 8.2.10+ Fix from $1,9502023-02-14 HIGH 8.8 CVE-2023-22935 In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘display.page.search.patterns.sensitivity’ search parameter lets a search bypass S… Splunk 8.1.13 / 8.2.10+ Fix from $1,9502023-02-14 HIGH 8.8 CVE-2023-22939 In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘map’ search processing language (SPL) command lets a search bypass SPL safeguards… Splunk 8.1.13 / 8.2.10+ Fix from $1,9502023-02-14 MEDIUM 5.7 CVE-2023-22940 In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL) command, including ‘summaryi… Splunk 8.1.13 / 8.2.10+ Fix from $1,6002023-02-14 HIGH 7.8 CVE-2022-31808 A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43… Sipass Integrated Acc Ap Firmware 2.85.43 / 2.85.44+ Fix from $1,9502023-02-14 HIGH 8.8 CVE-2022-45725EPSS 7% Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute arbitrary code on the target vi… Cf Wr610n Firmware Mitigation only Fix from $1,9502023-02-13 CRITICAL 9.8 CVE-2022-45088 Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion. This issue affects … Smartpower Web 23.01.01+ Fix from $2,3002023-02-12 HIGH 7.5 CVE-2022-40502 Transient DOS due to improper input validation in WLAN Host. Csr8811 Firmware Mitigation only Fix from $1,9502023-02-12 HIGH 7.5 CVE-2022-34146 Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation. Csr8811 Firmware Mitigation only Fix from $1,9502023-02-12 CRITICAL 9.8 CVE-2022-25729 Memory corruption in modem due to improper length check while copying into memory Ar8031 Firmware Mitigation only Fix from $2,3002023-02-12 MEDIUM 5.5 CVE-2022-33216 Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file. Qam8295p Firmware Mitigation only Fix from $1,6002023-02-12 HIGH 7.0 CVE-2023-24816 IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python prog… Ipython 8.10.0+ Fix from $1,9502023-02-10 HIGH 7.8 CVE-2023-24569 Dell Alienware Command Center versions 5.5.37.0 and prior contain an Improper Input validation vulnerability. A local authenticated malicious user co… Alienware Command Center after 5.5.37.0 Fix from $1,9502023-02-10 MEDIUM 5.3 CVE-2018-7935 There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerability to make the network where t… E5573cs 322 Firmware No fix yet Fix from $1,6002023-02-10 HIGH 7.8 CVE-2023-21451 A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to cause memory corruptions. Android Mitigation only Fix from $1,9502023-02-09 HIGH 7.8 CVE-2023-21439 Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $1,9502023-02-09 MEDIUM 5.5 CVE-2023-21446 Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.00.422 in Android T(13) allows… Android Mitigation only Fix from $1,6002023-02-09 MEDIUM 6.1 CVE-2023-21434EPSS 13% Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute JavaScript by launching a web pag… Galaxy Store 4.5.49.8+ Fix from $1,6002023-02-09 MEDIUM 6.5 CVE-2022-38778 A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that … Kibana 0.2.1 / 7.17.9+ Fix from $1,6002023-02-08 MEDIUM 6.5 CVE-2023-0751 When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and s… FreeBSD Patch available Fix from $1,6002023-02-08 HIGH 7.5 CVE-2022-34350 IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable to External Service Interactio… Api Connect after 2018.4.1.20 Fix from $1,9502023-02-08 HIGH 7.5 CVE-2022-44617 A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can l… Libxpm 3.5.15+ Fix from $1,9502023-02-06 MEDIUM 5.5 CVE-2023-0615 A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue… Linux Kernel 6.2+ Fix from $1,6002023-02-06 MEDIUM 6.7 CVE-2023-20612 In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-02-06 MEDIUM 6.7 CVE-2023-20613 In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-02-06