Browse CVEs

HIGH 7.5 CVE-2023-21700 Windows iSCSI Discovery Service Denial of Service Vulnerability Windows 10 10.0.10240.19747 / 10.0.14393.5717+ Fix from $1,9502023-02-14 MEDIUM 5.5 CVE-2022-47359 In log service, there is a missing permission check. This could lead to local denial of service in log service. Android No fix yet Fix from $1,6002023-02-12 MEDIUM 5.5 CVE-2022-47360 In log service, there is a missing permission check. This could lead to local denial of service in log service. Android No fix yet Fix from $1,6002023-02-12 MEDIUM 5.5 CVE-2022-44447 In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check. This could lead to local denial of service in wlan … Android Mitigation only Fix from $1,6002023-02-12 HIGH 7.5 CVE-2022-25733 Denial of service in modem due to null pointer dereference while processing DNS packets Ar8031 Firmware Mitigation only Fix from $1,9502023-02-12 HIGH 7.5 CVE-2022-25735 Denial of service in modem due to missing null check while processing TCP or UDP packets from server Ar8031 Firmware Mitigation only Fix from $1,9502023-02-12 HIGH 7.5 CVE-2023-0216 An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() … OpenSSL 3.3.3+ Fix from $1,9502023-02-08 HIGH 7.5 CVE-2023-0217 An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() … OpenSSL after 3.0.7 Fix from $1,9502023-02-08 HIGH 7.5 CVE-2023-0401 A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for… OpenSSL 3.3.3+ Fix from $1,9502023-02-08 HIGH 7.5 CVE-2022-32663 In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional exe… Mt5221 Firmware Mitigation only Fix from $1,9502023-02-06 CRITICAL 9.8 CVE-2023-23087 An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function. Mojojson No fix yet Fix from $2,3002023-02-03 HIGH 7.5 CVE-2023-22340 On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured… Big Ip Access Policy Manager 14.1.5.3 / 15.1.8+ Fix from $1,9502023-02-01 HIGH 7.5 CVE-2023-22341 On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed … Big Ip Access Policy Manager 14.1.5.3+ Fix from $1,9502023-02-01 HIGH 7.5 CVE-2023-22839 On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a … Big Ip Domain Name System 14.1.5.3 / 15.1.7+ Fix from $1,9502023-02-01 MEDIUM 5.5 CVE-2022-4285 An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a de… Fedora 2.39-7+ Fix from $1,6002023-01-27 MEDIUM 5.5 CVE-2023-0394 A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw c… Linux Kernel 6.2+ Fix from $1,6002023-01-26 HIGH 7.5 CVE-2022-44018 In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds … Uatoolkit Embedded 1.41+ Fix from $1,9502023-01-26 MEDIUM 6.5 CVE-2022-47015 MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to derefere… MariaDB 10.3.39 / 10.4.29+ Fix from $1,6002023-01-20 HIGH 7.8 CVE-2022-47021 A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers t… Fedora after 0.12 Fix from $1,9502023-01-20 HIGH 7.8 CVE-2022-47024 A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to… Vim after 9.0.0339 Fix from $1,9502023-01-20 MEDIUM 5.5 CVE-2022-47929 In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of … Linux Kernel 6.1.6+ Fix from $1,6002023-01-17 HIGH 7.5 CVE-2023-0122 A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Deni… Linux Kernel Patch available Fix from $1,9502023-01-17 MEDIUM 5.5 CVE-2022-4121 In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote … Libetpan Patch available Fix from $1,6002023-01-17 HIGH 7.1 CVE-2022-41858 A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/n… Linux Kernel 4.9.311 / 4.14.276+ Fix from $1,9502023-01-17 HIGH 7.5 CVE-2022-41860 In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This … Freeradius after 3.0.25 Fix from $1,9502023-01-17 MEDIUM 5.5 CVE-2022-4842 A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the … Linux Kernel Mitigation only Fix from $1,6002023-01-12 MEDIUM 5.3 CVE-2022-3341 A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because th… Debian Linux 5.0.3+ Fix from $1,6002023-01-12 HIGH 7.5 CVE-2023-21757 Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability Windows 10 Mitigation only Fix from $1,9502023-01-10 HIGH 7.5 CVE-2023-21758EPSS 93% Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Windows 10 Mitigation only Fix from $1,9502023-01-10 HIGH 7.5 CVE-2023-21683 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Windows 10 1607 Mitigation only Fix from $1,9502023-01-10