Browse CVEs

MEDIUM 5.5 CVE-2024-44938 In the Linux kernel, the following vulnerability has been resolved: jfs: Fix shift-out-of-bounds in dbDiscardAG When searching for the next smaller… Linux Kernel 6.6.47 / 6.10.6+ Fix from $1,6002024-08-26 MEDIUM 5.5 CVE-2024-43910 In the Linux kernel, the following vulnerability has been resolved: bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory access… Linux Kernel 6.10.5+ Fix from $1,6002024-08-26 MEDIUM 5.5 CVE-2024-44933 In the Linux kernel, the following vulnerability has been resolved: bnxt_en : Fix memory out-of-bounds in bnxt_fill_hw_rss_tbl() A recent commit ha… Linux Kernel Patch available Fix from $1,6002024-08-26 MEDIUM 6.3 CVE-2024-38207 Microsoft Edge (HTML-based) Memory Corruption Vulnerability Edge Chromium 128.0.2739.42+ Fix from $1,6002024-08-23 MEDIUM 6.5 CVE-2024-44387 Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet. Fh1206 Firmware Mitigation only Fix from $1,6002024-08-23 HIGH 8.8 CVE-2024-44390 Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function formWrlsafeset. Fh1206 Firmware Mitigation only Fix from $1,9502024-08-23 HIGH 7.8 CVE-2022-48927 In the Linux kernel, the following vulnerability has been resolved: iio: adc: tsc2046: fix memory corruption by preventing array overflow On one si… Linux Kernel 5.15.26 / 5.16.12+ Fix from $1,9502024-08-22 MEDIUM 5.5 CVE-2022-48923 In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segment Compressed length can be … Linux Kernel 5.15.26 / 5.16.12+ Fix from $1,6002024-08-22 HIGH 8.8 CVE-2024-7967 Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7973 Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafte… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7965 KEVEPSS 19% Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 128.0.2739.42 / 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 7.5 CVE-2023-29929 Buffer Overflow vulnerability found in Kemptechnologies Loadmaster before v.7.2.60.0 allows a remote attacker to casue a denial of service via the li… Mitigation only Fix from $1,9502024-08-21 HIGH 7.5 CVE-2024-20375 A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Ses… Unified Communications Manager Mitigation only Fix from $1,9502024-08-21 HIGH 7.8 CVE-2024-6811 IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c… Irfanview Mitigation only Fix from $1,9502024-08-21 HIGH 7.8 CVE-2024-6812 IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c… Irfanview Mitigation only Fix from $1,9502024-08-21 HIGH 7.8 CVE-2024-37008 A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to e… Revit Mitigation only Fix from $1,9502024-08-21 CRITICAL 9.8 CVE-2024-30949 An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function. Newlib Patch available Fix from $2,3002024-08-20 HIGH 7.3 CVE-2024-43688 cron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based buffer underflow and memory corruption. NOTE: this iss… Patch available Fix from $1,9502024-08-20 HIGH 7.8 CVE-2024-7305 A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious act… Advance Steel 2022.1.6 / 2023.1.7+ Fix from $1,9502024-08-20 CRITICAL 9.8 CVE-2024-42815 In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of length verification for the USER_AGENT field in /usr/bin/… Re365 Firmware No fix yet Fix from $2,3002024-08-19 HIGH 7.5 CVE-2024-44073 The Miniscript (aka rust-miniscript) library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth. Miniscript 12.2.0+ Fix from $1,9502024-08-19 CRITICAL 9.8 CVE-2024-7909 A vulnerability has been found in TOTOLINK EX1200L 9.3.5u.6146_B20201023 and classified as critical. Affected by this vulnerability is the function s… Ex1200l Firmware No fix yet Fix from $2,3002024-08-18 CRITICAL 9.8 CVE-2024-7908 A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected is the function setDefResponse of th… Ex1200l Firmware No fix yet Fix from $2,3002024-08-18 HIGH 7.8 CVE-2024-43839 In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures To have enough sp… Debian Linux 4.19.320 / 5.4.282+ Fix from $1,9502024-08-17 HIGH 7.8 CVE-2024-43825 In the Linux kernel, the following vulnerability has been resolved: iio: Fix the sorting functionality in iio_gts_build_avail_time_table The sortin… Linux Kernel 6.6.44 / 6.10.3+ Fix from $1,9502024-08-17 MEDIUM 5.5 CVE-2024-42288 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix for possible memory corruption Init Control Block is derefer… Linux Kernel 5.4.282 / 5.10.224+ Fix from $1,6002024-08-17 HIGH 7.5 CVE-2024-42979 Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function. This vulnerability allows … Fh1206 Firmware No fix yet Fix from $1,9502024-08-15 HIGH 7.5 CVE-2024-42980 Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows at… Fh1206 Firmware No fix yet Fix from $1,9502024-08-15 HIGH 7.5 CVE-2024-42981 Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability … Fh1206 Firmware No fix yet Fix from $1,9502024-08-15 HIGH 7.5 CVE-2024-42982 Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows… Fh1206 Firmware No fix yet Fix from $1,9502024-08-15