Browse CVEs

MEDIUM 5.5 CVE-2024-41437 A heap buffer overflow in the function cp_unfilter() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a… Hicolor No fix yet Fix from $1,6002024-07-30 MEDIUM 5.5 CVE-2024-40777EPSS 8% An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 1… Ipados 1.3 / 10.6+ Fix from $1,6002024-07-29 MEDIUM 5.5 CVE-2024-27873 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 1… Ipados 12.7.6 / 13.6.8+ Fix from $1,6002024-07-29 HIGH 7.3 CVE-2024-42093 In the Linux kernel, the following vulnerability has been resolved: net/dpaa2: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OF… Linux Kernel 5.4.279 / 5.10.221+ Fix from $1,9502024-07-29 HIGH 7.1 CVE-2024-42094 In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFF… Linux Kernel 4.19.317 / 5.4.279+ Fix from $1,9502024-07-29 HIGH 7.8 CVE-2024-42086 In the Linux kernel, the following vulnerability has been resolved: iio: chemical: bme680: Fix overflows in compensate() functions There are cases … Linux Kernel 4.19.317 / 5.4.279+ Fix from $1,9502024-07-29 MEDIUM 5.5 CVE-2024-42080 In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: Fix potential invalid address access struct rdma_restrack_entry'… Linux Kernel 5.15.162 / 6.1.97+ Fix from $1,6002024-07-29 HIGH 7.8 CVE-2024-41042 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prefer nft_chain_validate nft_chain_validate already perf… Linux Kernel 4.19.320 / 5.4.282+ Fix from $1,9502024-07-29 CRITICAL 9.8 CVE-2024-32671 Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0. Escargot Patch available Fix from $2,3002024-07-29 HIGH 8.8 CVE-2024-7152 A vulnerability was found in Tenda O3 1.0.0.10(2478). It has been rated as critical. This issue affects the function fromSafeSetMacFilter of the file… O3 Firmware No fix yet Fix from $1,9502024-07-27 CRITICAL 9.8 CVE-2024-7151 A vulnerability was found in Tenda O3 1.0.0.10(2478). It has been declared as critical. This vulnerability affects the function fromMacFilterSet of t… O3 Firmware No fix yet Fix from $2,3002024-07-27 MEDIUM 6.7 CVE-2024-40897 Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially craf… Orc 0.4.39+ Fix from $1,6002024-07-26 CRITICAL 9.8 CVE-2024-41459 Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex. Fh1201 Firmware No fix yet Fix from $2,3002024-07-24 CRITICAL 9.8 CVE-2024-41460 Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic. Fh1201 Firmware No fix yet Fix from $2,3002024-07-24 CRITICAL 9.8 CVE-2024-41461 Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient. Fh1201 Firmware No fix yet Fix from $2,3002024-07-24 HIGH 7.5 CVE-2024-41462 Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient. Fh1201 Firmware No fix yet Fix from $1,9502024-07-24 HIGH 7.5 CVE-2024-41463 Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat. Fh1201 Firmware No fix yet Fix from $1,9502024-07-24 HIGH 7.5 CVE-2024-41464 Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic Fh1201 Firmware No fix yet Fix from $1,9502024-07-24 HIGH 7.5 CVE-2024-41465 Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm. Fh1201 Firmware No fix yet Fix from $1,9502024-07-24 HIGH 7.5 CVE-2024-41466 Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting. Fh1201 Firmware No fix yet Fix from $1,9502024-07-24 MEDIUM 5.7 CVE-2023-32466 Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privile… Edge Gateway 3200 Firmware 1.03.10+ Fix from $1,6002024-07-24 HIGH 7.8 CVE-2024-4080 A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in arbitrary code execution. Succ… Labview after 2020 Fix from $1,9502024-07-23 HIGH 7.8 CVE-2024-4081 A memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in arbitrary code execution. Successful ex… Labview after 2020 Fix from $1,9502024-07-23 HIGH 7.5 CVE-2024-41131 ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a cra… Imagesharp 2.1.9 / 3.1.5+ Fix from $1,9502024-07-22 HIGH 8.8 CVE-2024-6964 A vulnerability, which was classified as critical, was found in Tenda O3 1.0.0.10. Affected is the function fromDhcpSetSer. The manipulation of the a… O3 Firmware1.0.0.10\(2478\) No fix yet Fix from $1,9502024-07-22 HIGH 8.8 CVE-2024-6965 A vulnerability has been found in Tenda O3 1.0.0.10 and classified as critical. Affected by this vulnerability is the function fromVirtualSet. The ma… O3 Firmware1.0.0.10\(2478\) No fix yet Fix from $1,9502024-07-22 HIGH 8.8 CVE-2024-6962 A vulnerability classified as critical was found in Tenda O3 1.0.0.10. This vulnerability affects the function formQosSet. The manipulation of the ar… O3 Firmware1.0.0.10\(2478\) No fix yet Fix from $1,9502024-07-22 HIGH 8.8 CVE-2024-6963 A vulnerability, which was classified as critical, has been found in Tenda O3 1.0.0.10. This issue affects the function formexeCommand. The manipulat… O3 Firmware1.0.0.10\(2478\) No fix yet Fix from $1,9502024-07-22 HIGH 7.8 CVE-2024-40724 Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially… Assimp 5.4.2+ Fix from $1,9502024-07-19 HIGH 7.5 CVE-2024-40764 Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS). Sonicos 6.5.4.v-21s-rc2457 / 7.0.1-5161+ Fix from $1,9502024-07-18