Browse CVEs

CRITICAL 9.8 CVE-2023-43338 Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr(). This vulnerability allows at… Mjs No fix yet Fix from $2,3002023-09-23 HIGH 7.8 CVE-2023-34319 The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would… Debian Linux 4.10 / 4.14.321+ Fix from $1,9502023-09-22 HIGH 7.8 CVE-2023-5068 Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacke… Diascreen 1.3.2+ Fix from $1,9502023-09-21 HIGH 7.0 CVE-2023-4504 Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buff… Libppd 2.4.7+ Fix from $1,9502023-09-21 CRITICAL 9.8 CVE-2023-43236 D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dir_setWanWifi. Dir 816 A2 Firmware No fix yet Fix from $2,3002023-09-21 CRITICAL 9.8 CVE-2023-43237EPSS 12% D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC. Dir 816 A2 Firmware No fix yet Fix from $2,3002023-09-21 CRITICAL 9.8 CVE-2023-43238 D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi. Dir 816 A2 Firmware No fix yet Fix from $2,3002023-09-21 CRITICAL 9.8 CVE-2023-43239EPSS 12% D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in showMACfilterMAC. Dir 816 A2 Firmware No fix yet Fix from $2,3002023-09-21 CRITICAL 9.8 CVE-2023-43240EPSS 12% D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sip_address in ipportFilter. Dir 816 A2 Firmware No fix yet Fix from $2,3002023-09-21 CRITICAL 9.8 CVE-2023-43241 D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter TXPower and GuardInt in SetWLanRadioSecurity. Dir 823g Firmware No fix yet Fix from $2,3002023-09-21 CRITICAL 9.8 CVE-2023-43242 D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter removeRuleList in form2IPQoSTcDel. Dir 816a2 Firmware No fix yet Fix from $2,3002023-09-21 CRITICAL 9.8 CVE-2023-43235 D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter StartTime and EndTime in SetWifiDownSettings. Dir 823g Firmware No fix yet Fix from $2,3002023-09-21 CRITICAL 9.8 CVE-2023-2262 A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potential… 1756 En2t Series A Firmware after 11.002 Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43200 D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the id parameter in the yyxz.data function. Di 7200g Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43201 D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the hi_up parameter in the qos_ext.asp function. Di 7200g Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43203 D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a stack overflow vulnerability in the function update_users. Dwl 6610ap Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43196 D-Link DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the zn_jb parameter in the arp_sys.asp function. Di 7200g Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43197 D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn parameter in the tgfile.asp function. Di 7200g Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43198 D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the popupId parameter in the H5/hi_block.asp function. Di 7200g Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43199 D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function. Di 7200g Firmware No fix yet Fix from $2,3002023-09-20 HIGH 7.5 CVE-2023-3341 The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only l… Fedora 9.16.44 / 9.18.19+ Fix from $1,9502023-09-20 CRITICAL 9.8 CVE-2023-25528 NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a … Dgx H100 Firmware 23.08.18+ Fix from $2,3002023-09-20 HIGH 8.1 CVE-2023-42443 Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In version 0.3.9 and prior, under certain conditions, the memory … Vyper 0.3.10+ Fix from $1,9502023-09-18 HIGH 7.5 CVE-2023-40018 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation tha… Freeswitch 1.10.10+ Fix from $1,9502023-09-15 HIGH 7.8 CVE-2023-32643 A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bu… Glib 2.75.1+ Fix from $1,9502023-09-14 CRITICAL 9.8 CVE-2023-3935 A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achi… Codemeter Runtime 7.60c+ Fix from $2,3002023-09-13 HIGH 7.8 CVE-2023-26369 KEVEPSS 7% Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write … Acrobat 20.005.30524 / 23.006.20320+ Fix from $1,9502023-09-13 HIGH 8.8 CVE-2023-4863 KEVEPSS 100% Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memo… Chrome 1.0.62681.0 / 1.6.00.26463+ Fix from $1,9502023-09-12 HIGH 7.8 CVE-2023-41032 A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.253), Parasolid V35.1 (All v… Parasolid 34.1.258 / 35.0.253+ Fix from $1,9502023-09-12 HIGH 7.8 CVE-2023-41033 A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.260), Parasolid V35.1 (All versions < V35.1.246), Parasolid V36.0 (All v… Parasolid 35.0.260 / 35.1.246+ Fix from $1,9502023-09-12