Browse CVEs

CRITICAL 9.8 CVE-2023-51133 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute. X2000r Firmware Mitigation only Fix from $2,3002023-12-30 CRITICAL 9.8 CVE-2023-51135 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup. X2000r Firmware Mitigation only Fix from $2,3002023-12-30 CRITICAL 9.8 CVE-2023-51136 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule. X2000r Firmware Mitigation only Fix from $2,3002023-12-30 MEDIUM 5.5 CVE-2023-50572 An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error. Jline 3.25.0+ Fix from $1,6002023-12-29 CRITICAL 9.8 CVE-2023-7158 A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the file objslic… Micropython 1.22.0+ Fix from $2,3002023-12-29 CRITICAL 9.8 CVE-2023-52173 XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0. Xnview Classic 2.51.3+ Fix from $2,3002023-12-29 CRITICAL 9.8 CVE-2023-52174 XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6. Xnview Classic 2.51.3+ Fix from $2,3002023-12-29 CRITICAL 9.8 CVE-2023-6879 Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc(). Fedora 3.7.1+ Fix from $2,3002023-12-27 HIGH 7.5 CVE-2023-51080 The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow. Hutool 5.8.25+ Fix from $1,9502023-12-27 CRITICAL 9.8 CVE-2023-51084 hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method. Hyavijava No fix yet Fix from $2,3002023-12-27 CRITICAL 9.8 CVE-2023-51090 Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig. M3 Firmware No fix yet Fix from $2,3002023-12-26 CRITICAL 9.8 CVE-2023-51091EPSS 8% Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler. M3 Firmware No fix yet Fix from $2,3002023-12-26 CRITICAL 9.8 CVE-2023-51092EPSS 13% Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade. M3 Firmware No fix yet Fix from $2,3002023-12-26 CRITICAL 9.8 CVE-2023-51093 Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo. M3 Firmware No fix yet Fix from $2,3002023-12-26 CRITICAL 9.8 CVE-2023-51097 Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing. W9 Firmware No fix yet Fix from $2,3002023-12-26 CRITICAL 9.8 CVE-2023-51101 Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo. W9 Firmware No fix yet Fix from $2,3002023-12-26 CRITICAL 9.8 CVE-2023-51102 Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet. W9 Firmware No fix yet Fix from $2,3002023-12-26 CRITICAL 9.8 CVE-2023-51095 Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy. M3 Firmware No fix yet Fix from $2,3002023-12-26 HIGH 7.8 CVE-2023-5180 An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a cr… Drawings Sdk 2024.12+ Fix from $1,9502023-12-26 HIGH 7.5 CVE-2023-48704 ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer ov… Clickhouse 23.3.18.15 / 23.8.8.20+ Fix from $1,9502023-12-22 HIGH 7.5 CVE-2023-49356 A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3GainAPETag function at apetag… Mp3gain No fix yet Fix from $1,9502023-12-22 HIGH 8.8 CVE-2023-7024 KEVEPSS 7% Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 120.0.6099.129+ Fix from $1,9502023-12-21 MEDIUM 5.5 CVE-2023-4255 An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vuln… Fedora Patch available Fix from $1,6002023-12-21 CRITICAL 9.8 CVE-2023-50988 Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function. I29 Firmware Mitigation only Fix from $2,3002023-12-20 CRITICAL 9.8 CVE-2023-50990 Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function. I29 Firmware Mitigation only Fix from $2,3002023-12-20 CRITICAL 9.8 CVE-2023-50992 Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function. I29 Firmware Mitigation only Fix from $2,3002023-12-20 CRITICAL 9.8 CVE-2023-50984 Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function. I29 Firmware Mitigation only Fix from $2,3002023-12-20 CRITICAL 9.8 CVE-2023-50985 Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in the lanCfgSet function. I29 Firmware Mitigation only Fix from $2,3002023-12-20 CRITICAL 9.8 CVE-2023-50986 Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function. I29 Firmware Mitigation only Fix from $2,3002023-12-20 CRITICAL 9.8 CVE-2023-50987 Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysTimeInfoSet function. I29 Firmware Mitigation only Fix from $2,3002023-12-20