Browse CVEs

CRITICAL 9.8 CVE-2023-35968 Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially cr… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 CRITICAL 9.8 CVE-2023-34346 A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108. A specially crafted network… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 CRITICAL 9.8 CVE-2023-34365 A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108. A specially crafted n… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 CRITICAL 9.8 CVE-2023-34426 A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108. A specially crafted networ… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 CRITICAL 9.8 CVE-2023-35965 Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 CRITICAL 9.8 CVE-2023-35966 Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 CRITICAL 9.8 CVE-2023-31272 A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A specially crafted network reques… Yf325 Firmware Mitigation only Fix from $2,3002023-10-11 HIGH 7.8 CVE-2023-31096 An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There is Local Privilege Escalation… Lsi Pci Sv92ex Firmware after 2.2.100.1 Fix from $1,9502023-10-10 MEDIUM 5.5 CVE-2023-43785 A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an ou… Enterprise Linux 1.8.7+ Fix from $1,6002023-10-10 HIGH 7.8 CVE-2023-45601 A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.1.250), Parasolid V36.0 (All v… Parasolid 35.0.262 / 35.1.250+ Fix from $1,9502023-10-10 HIGH 7.8 CVE-2023-44081 A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions… Tecnomatix 2201.0009 / 2302.0003+ Fix from $1,9502023-10-10 HIGH 7.8 CVE-2023-44082 A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions… Tecnomatix 2201.0009 / 2302.0003+ Fix from $1,9502023-10-10 HIGH 7.8 CVE-2023-44083 A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions… Tecnomatix 2201.0009 / 2302.0003+ Fix from $1,9502023-10-10 HIGH 8.8 CVE-2023-43641EPSS 17% libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user… Fedora 2.3.0+ Fix from $1,9502023-10-09 CRITICAL 9.8 CVE-2023-3725 Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem Zephyr after 3.4.0 Fix from $2,3002023-10-06 HIGH 7.2 CVE-2023-32971 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts 4.5.4.2467 / 5.0.1.2425+ Fix from $1,9502023-10-06 HIGH 7.2 CVE-2023-32972 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts 4.5.4.2467 / 5.0.1.2425+ Fix from $1,9502023-10-06 CRITICAL 9.8 CVE-2023-44807 D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function. Dir 820l Firmware No fix yet Fix from $2,3002023-10-06 MEDIUM 5.5 CVE-2023-3428 A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into o… Fedora 7.1.1-19+ Fix from $1,6002023-10-04 HIGH 7.8 CVE-2023-30733 Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code executio… Android Mitigation only Fix from $1,9502023-10-04 HIGH 7.8 CVE-2023-4911 KEVEPSS 81% A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue cou… Fedora Patch available Fix from $1,9502023-10-03 CRITICAL 9.8 CVE-2023-33028 Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Ar8035 Firmware No fix yet Fix from $2,3002023-10-03 HIGH 7.8 CVE-2023-33034 Memory corruption while parsing the ADSP response command. Csra6620 Firmware Patch available Fix from $1,9502023-10-03 HIGH 7.8 CVE-2023-24853 Memory Corruption in HLOS while registering for key provisioning notify. Ar8035 Firmware No fix yet Fix from $1,9502023-10-03 CRITICAL 9.8 CVE-2023-24855 Memory corruption in Modem while processing security related configuration before AS Security Exchange. Ar8035 Firmware No fix yet Fix from $2,3002023-10-03 CRITICAL 9.8 CVE-2023-22385 Memory Corruption in Data Modem while making a MO call or MT VOLTE call. 315 5g Iot Modem Firmware No fix yet Fix from $2,3002023-10-03 HIGH 7.8 CVE-2023-22384 Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ). Qca6574au Firmware No fix yet Fix from $1,9502023-10-03 HIGH 7.8 CVE-2023-43361 Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conv… Vorbis Tools No fix yet Fix from $1,9502023-10-02 HIGH 7.5 CVE-2023-5344 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. Fedora 9.0.1969+ Fix from $1,9502023-10-02 MEDIUM 6.7 CVE-2023-32826 In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,6002023-10-02