Browse CVEs

HIGH 7.8 CVE-2024-38386 in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. Openharmony after 4.1 Fix from $1,9502024-09-02 CRITICAL 9.8 CVE-2024-45508 HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace… Htmldoc 1.9.19+ Fix from $2,3002024-09-01 HIGH 7.8 CVE-2024-0110 NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. … Cuda Toolkit after 12.6.0 Fix from $1,9502024-08-31 HIGH 7.8 CVE-2024-43700 xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerabi… Xfpt 1.01+ Fix from $1,9502024-08-29 MEDIUM 5.5 CVE-2024-8250 NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file Wireshark 4.0.17 / 4.2.7+ Fix from $1,6002024-08-29 HIGH 8.8 CVE-2024-8198 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potential… Chrome 128.0.6613.113+ Fix from $1,9502024-08-28 HIGH 8.8 CVE-2024-8193 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potential… Chrome 128.0.6613.113+ Fix from $1,9502024-08-28 CRITICAL 9.8 CVE-2024-34195 TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function … A3002r Firmware No fix yet Fix from $2,3002024-08-28 HIGH 8.8 CVE-2024-8231 A vulnerability classified as critical has been found in Tenda O6 1.0.0.7(2054). Affected is the function fromVirtualSet of the file /goform/setPortF… O6 Firmware No fix yet Fix from $1,9502024-08-28 CRITICAL 9.8 CVE-2024-8230 A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been rated as critical. This issue affects the function fromSafeSetMacFilter of the file … O6 Firmware No fix yet Fix from $2,3002024-08-28 CRITICAL 9.8 CVE-2024-8229 A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been declared as critical. This vulnerability affects the function frommacFilterModify of… O6 Firmware No fix yet Fix from $2,3002024-08-28 CRITICAL 9.8 CVE-2024-8226 A vulnerability has been found in Tenda O1 1.0.0.7(10648) and classified as critical. Affected by this vulnerability is the function formSetCfm of th… O1 Firmware No fix yet Fix from $2,3002024-08-28 CRITICAL 9.8 CVE-2024-8227 A vulnerability was found in Tenda O1 1.0.0.7(10648) and classified as critical. Affected by this issue is the function fromDhcpSetSer of the file /g… O1 Firmware No fix yet Fix from $2,3002024-08-28 CRITICAL 9.8 CVE-2024-8228 A vulnerability was found in Tenda O5 1.0.0.8(5017). It has been classified as critical. This affects the function fromSafeSetMacFilter of the file /… O5 Firmware No fix yet Fix from $2,3002024-08-28 CRITICAL 9.8 CVE-2024-8225 A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetS… G3 Firmware No fix yet Fix from $2,3002024-08-27 CRITICAL 9.8 CVE-2024-8224 A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file… G3 Firmware No fix yet Fix from $2,3002024-08-27 HIGH 7.8 CVE-2024-42851 Buffer Overflow vulnerability in open source exiftags v.1.01 allows a local attacker to execute arbitrary code via the paresetag function. Exiftags after 1.01 Fix from $1,9502024-08-27 CRITICAL 9.8 CVE-2024-44549 Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-44550 Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-44551 Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-44552 Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-44553 Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-44555 Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-44557 Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-41285 A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a c… Fw300r Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-44556 Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-44558 Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26 HIGH 7.8 CVE-2024-41879 Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… Acrobat Reader 128.0.2739.42+ Fix from $1,9502024-08-26 CRITICAL 9.8 CVE-2024-44563 Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26 CRITICAL 9.8 CVE-2024-44565 Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set. Ax1806 Firmware No fix yet Fix from $2,3002024-08-26