Browse CVEs

HIGH 7.8 CVE-2024-23155 A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be used to cause a Heap-based Buffer Overfl… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23156 A maliciously crafted 3DM file, when parsed in opennurbs.dll and ASMkern229A.dll through Autodesk applications, can lead to a memory corruption vulne… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23157 A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerabilit… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23151 A maliciously crafted 3DM file, when parsed in ASMkern229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious … Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23150 A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious ac… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23146 A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability.… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23147 A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory c… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23148 A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by writ… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-37000 A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write acc… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-37001 A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious a… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23143 A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-… Autocad Map 3d 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23144 A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerab… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-38667 In the Linux kernel, the following vulnerability has been resolved: riscv: prevent pt_regs corruption for secondary idle threads Top of the kernel … Linux Kernel 6.1.93 / 6.6.33+ Fix from $1,9502024-06-24 HIGH 7.1 CVE-2024-38621 In the Linux kernel, the following vulnerability has been resolved: media: stk1160: fix bounds checking in stk1160_copy_video() The subtract in thi… Linux Kernel 4.19.316 / 5.4.278+ Fix from $1,9502024-06-21 MEDIUM 6.7 CVE-2024-6154 Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate… Parallels Desktop 18.1.0+ Fix from $1,6002024-06-20 HIGH 8.4 CVE-2024-37676 An issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the Header_populateFromSettings function. Mitigation only Fix from $1,9502024-06-20 HIGH 8.8 CVE-2024-6189 A vulnerability was found in Tenda A301 15.13.08.12. It has been classified as critical. Affected is the function fromSetWirelessRepeat of the file /… A301 Firmware No fix yet Fix from $1,9502024-06-20 MEDIUM 5.5 CVE-2022-48743 In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUG_ON() triggered i… Linux Kernel 4.9.300 / 4.14.265+ Fix from $1,6002024-06-20 HIGH 7.8 CVE-2022-48744 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid field-overflowing memcpy() In preparation for FORTIFY_SOURCE p… Linux Kernel 5.10.248 / 5.16.6+ Fix from $1,9502024-06-20 HIGH 7.8 CVE-2022-48717 In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speaker_gain_control_put() Check for negative v… Linux Kernel 4.19.228 / 5.4.178+ Fix from $1,9502024-06-20 MEDIUM 5.5 CVE-2022-48711 In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The function tipc_mo… Linux Kernel 4.9.301 / 4.14.266+ Fix from $1,6002024-06-20 HIGH 7.8 CVE-2022-48712 In the Linux kernel, the following vulnerability has been resolved: ext4: fix error handling in ext4_fc_record_modified_inode() Current code does n… Linux Kernel 5.10.99 / 5.15.22+ Fix from $1,9502024-06-20 HIGH 7.5 CVE-2024-29012 Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause Denial of Service (DoS) via ssc… Sonicos 7.0.1-5161 / 7.1.1-7058+ Fix from $1,9502024-06-20 MEDIUM 6.5 CVE-2024-29013 Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via memcpy f… Sonicos 7.0.1-5161 / 7.1.1-7058+ Fix from $1,6002024-06-20 HIGH 8.8 CVE-2024-6102 Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a c… Chrome 126.0.6478.114+ Fix from $1,9502024-06-20 HIGH 7.8 CVE-2021-47605 In the Linux kernel, the following vulnerability has been resolved: vduse: fix memory corruption in vduse_dev_ioctl() The "config.offset" comes fro… Linux Kernel 5.15.11+ Fix from $1,9502024-06-19 HIGH 7.1 CVE-2021-47580 In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix type in min_t to avoid stack OOB Change min_t() to use ty… Linux Kernel 5.10.88 / 5.15.11+ Fix from $1,9502024-06-19 HIGH 7.8 CVE-2024-38586 In the Linux kernel, the following vulnerability has been resolved: r8169: Fix possible ring buffer corruption on fragmented Tx packets. An issue w… Linux Kernel 5.10.221 / 5.15.161+ Fix from $1,9502024-06-19 HIGH 7.8 CVE-2024-38578 In the Linux kernel, the following vulnerability has been resolved: ecryptfs: Fix buffer size for tag 66 packet The 'TAG 66 Packet Format' descript… Linux Kernel 4.19.316 / 5.4.278+ Fix from $1,9502024-06-19 HIGH 7.8 CVE-2024-36978 In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will b… Linux Kernel 5.4.279 / 5.10.221+ Fix from $1,9502024-06-19