Browse CVEs

CRITICAL 9.8 CVE-2023-51963 Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo. Ax1803 Firmware No fix yet Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-51964 Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo. Ax1803 Firmware No fix yet Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-51965 Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo. Ax1803 Firmware No fix yet Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-51952 Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv. Ax1803 Firmware No fix yet Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-51961 Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv. Ax1803 Firmware No fix yet Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-51966 Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo. Ax1803 Firmware No fix yet Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-48265 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (R… Nexo Os after 1500-sp2 Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-48266 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (R… Nexo Os after 1500-sp2 Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-51971 Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo. Ax1803 Firmware No fix yet Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-48262 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (R… Nexo Os after 1500-sp2 Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-48263 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (R… Nexo Os after 1500-sp2 Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-48264 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (R… Nexo Os after 1500-sp2 Fix from $2,3002024-01-10 HIGH 7.5 CVE-2023-49427 Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via list parameter in SetNetCont… Ax12 Firmware Mitigation only Fix from $1,9502024-01-10 HIGH 8.8 CVE-2023-3043 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploit… Megarac Sp X 12.7 / 13.6+ Fix from $1,9502024-01-09 HIGH 8.8 CVE-2023-37297 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation… Megarac Sp X 12.7 / 13.6+ Fix from $1,9502024-01-09 HIGH 8.8 CVE-2023-37293 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploit… Megarac Sp X 12.7 / 13.6+ Fix from $1,9502024-01-09 HIGH 8.8 CVE-2023-37294 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation… Megarac Sp X 12.7 / 13.6+ Fix from $1,9502024-01-09 HIGH 8.8 CVE-2023-37295 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation… Megarac Sp X 12.7 / 13.6+ Fix from $1,9502024-01-09 HIGH 8.8 CVE-2023-37296 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network. A successful exploitatio… Megarac Sp X 12.7 / 13.6+ Fix from $1,9502024-01-09 MEDIUM 6.5 CVE-2023-6129 Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications run… OpenSSL after 3.1.4 Fix from $1,6002024-01-09 CRITICAL 9.8 CVE-2023-7222 A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmul… X2000r Firmware No fix yet Fix from $2,3002024-01-09 HIGH 7.8 CVE-2023-49128 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application contains an out of bounds write … Solid Edge Se2023 223.0+ Fix from $1,9502024-01-09 HIGH 7.8 CVE-2023-49129 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain a stack overflow vulner… Solid Edge Se2023 223.0+ Fix from $1,9502024-01-09 HIGH 7.8 CVE-2023-49122 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buff… Solid Edge Se2023 223.0+ Fix from $1,9502024-01-09 HIGH 7.8 CVE-2023-49123 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buff… Solid Edge Se2023 223.0+ Fix from $1,9502024-01-09 HIGH 7.8 CVE-2023-49121 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buff… Solid Edge Se2023 223.0+ Fix from $1,9502024-01-09 CRITICAL 9.8 CVE-2023-49236 A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs becaus… Tv Ip1314pi Firmware No fix yet Fix from $2,3002024-01-09 CRITICAL 9.8 CVE-2023-50585 Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function. A18 Firmware No fix yet Fix from $2,3002024-01-09 HIGH 7.8 CVE-2021-3600 It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div… Linux Kernel 4.14.308 / 4.19.206+ Fix from $1,9502024-01-08 HIGH 7.8 CVE-2023-38657 An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can… Gtkwave No fix yet Fix from $1,9502024-01-08