Browse CVEs

HIGH 7.8 CVE-2024-25445 Improper handling of values in HuginBase::PTools::Transform::transform of Hugin 2022.0.0 leads to an assertion failure. Hugin No fix yet Fix from $1,9502024-02-09 HIGH 7.5 CVE-2023-43523 Transient DOS while processing 11AZ RTT management action frame received through OTA. Ar8035 Firmware No fix yet Fix from $1,9502024-02-06 MEDIUM 5.5 CVE-2024-23850 In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be… Linux Kernel after 6.7.1 Fix from $1,6002024-01-23 HIGH 7.5 CVE-2023-34194 StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted X… Tinyxml after 2.6.2 Fix from $1,9502023-12-13 HIGH 7.5 CVE-2023-33041 Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids. Ar8035 Firmware No fix yet Fix from $1,9502023-12-05 HIGH 7.5 CVE-2023-33043 Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. Ar8035 Firmware Mitigation only Fix from $1,9502023-12-05 HIGH 7.5 CVE-2023-33044 Transient DOS in Data modem while handling TLB control messages from the Network. 315 5g Iot Modem Firmware No fix yet Fix from $1,9502023-12-05 HIGH 7.5 CVE-2023-49286EPSS 10% Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerabl… Squid after 6.4 Fix from $1,9502023-12-04 HIGH 7.5 CVE-2023-40462 The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in… Debian Linux after 4.16.0 Fix from $1,9502023-12-04 HIGH 7.5 CVE-2023-32841 In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RR… Nr15 Mitigation only Fix from $1,9502023-12-04 HIGH 7.5 CVE-2023-32842 In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RR… Nr15 Mitigation only Fix from $1,9502023-12-04 HIGH 7.5 CVE-2023-32843 In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RR… Nr15 Mitigation only Fix from $1,9502023-12-04 HIGH 7.5 CVE-2023-32844 In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RR… Nr15 Mitigation only Fix from $1,9502023-12-04 HIGH 7.5 CVE-2023-32845 In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RR… Nr15 Mitigation only Fix from $1,9502023-12-04 HIGH 7.5 CVE-2023-32846 In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RR… Nr15 Mitigation only Fix from $1,9502023-12-04 MEDIUM 5.3 CVE-2023-5871 A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. … Libnbd 1.18.2+ Fix from $1,6002023-11-27 MEDIUM 5.5 CVE-2023-38473 A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function. Enterprise Linux 0.9+ Fix from $1,6002023-11-02 MEDIUM 5.5 CVE-2023-38469 A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. Enterprise Linux 0.9+ Fix from $1,6002023-11-02 MEDIUM 5.5 CVE-2023-38470 A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. Enterprise Linux 0.9+ Fix from $1,6002023-11-02 MEDIUM 5.5 CVE-2023-38471 A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. Enterprise Linux 0.9+ Fix from $1,6002023-11-02 MEDIUM 5.5 CVE-2023-38472 A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function. Enterprise Linux 0.9+ Fix from $1,6002023-11-02 HIGH 7.5 CVE-2023-44175 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific ge… Junos 20.4+ Fix from $1,9502023-10-12 MEDIUM 5.3 CVE-2023-44386 Vapor is an HTTP web framework for Swift. There is a denial of service vulnerability impacting all users of affected versions of Vapor. The HTTP1 err… Vapor 4.84.2+ Fix from $1,6002023-10-05 HIGH 7.5 CVE-2023-24843 Transient DOS in Modem while triggering a camping on an 5G cell. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-10-03 HIGH 7.5 CVE-2023-32820 In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no addition… Linux Kernel Mitigation only Fix from $1,9502023-10-02 HIGH 7.5 CVE-2023-4236 A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion failure. This happens whe… Fedora 9.18.18+ Fix from $1,9502023-09-20 MEDIUM 5.6 CVE-2023-3301 A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci fr… Enterprise Linux after 8.0.3 Fix from $1,6002023-09-13 HIGH 7.5 CVE-2023-21646 Transient DOS in Modem while processing invalid System Information Block 1. Ar8035 Firmware Mitigation only Fix from $1,9502023-09-05 HIGH 7.5 CVE-2023-21653 Transient DOS in Modem while processing RRC reconfiguration message. Ar8035 Firmware Mitigation only Fix from $1,9502023-09-05 MEDIUM 5.5 CVE-2022-35205 An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial o… Binutils Patch available Fix from $1,6002023-08-22