Browse CVEs

HIGH 7.8 CVE-2023-3495 ** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Write vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially execute a… Eh View Mitigation only Fix from $1,9502023-08-23 HIGH 7.8 CVE-2023-39985 ** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Write vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially execute arbitra… Eh View Mitigation only Fix from $1,9502023-08-23 HIGH 7.8 CVE-2023-34853 Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityE… X12dai N6 Firmware Mitigation only Fix from $1,9502023-08-22 HIGH 7.5 CVE-2022-48570 Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outsi… Crypto\+\+ after 8.4.0 Fix from $1,9502023-08-22 CRITICAL 9.8 CVE-2022-48174 There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be e… Debian Linux after 1.36.1 Fix from $2,3002023-08-22 CRITICAL 9.8 CVE-2022-48522 In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation. Perl No fix yet Fix from $2,3002023-08-22 HIGH 7.8 CVE-2022-44840 Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c. Binutils 2.40+ Fix from $1,9502023-08-22 HIGH 7.8 CVE-2022-45703 Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c. Binutils 2.40+ Fix from $1,9502023-08-22 HIGH 7.8 CVE-2022-47069 p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Arch… P7zip No fix yet Fix from $1,9502023-08-22 HIGH 7.5 CVE-2022-43357 Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be ex… Libsass No fix yet Fix from $1,9502023-08-22 HIGH 7.5 CVE-2022-43358 Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploi… Libsass No fix yet Fix from $1,9502023-08-22 HIGH 7.5 CVE-2022-34038 Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that … Etcd Patch available Fix from $1,9502023-08-22 HIGH 8.8 CVE-2022-26592 Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function. Libsass No fix yet Fix from $1,9502023-08-22 HIGH 7.5 CVE-2022-28068 A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. Radare2 Patch available Fix from $1,9502023-08-22 HIGH 7.5 CVE-2022-28069 A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. Radare2 Patch available Fix from $1,9502023-08-22 HIGH 7.5 CVE-2022-28072 A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. Radare2 Patch available Fix from $1,9502023-08-22 MEDIUM 6.5 CVE-2021-40262 A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp. Freeimage 1.18.0+ Fix from $1,6002023-08-22 HIGH 8.8 CVE-2021-40263 A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp. Freeimage No fix yet Fix from $1,9502023-08-22 HIGH 8.8 CVE-2021-40265 A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp. Freeimage 1.18.0+ Fix from $1,9502023-08-22 HIGH 7.5 CVE-2021-46174 Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. Binutils 2.38+ Fix from $1,9502023-08-22 HIGH 7.1 CVE-2021-29390 libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c. Fedora Patch available Fix from $1,9502023-08-22 CRITICAL 9.8 CVE-2021-32292 An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sa… Active Iq Unified Manager No fix yet Fix from $2,3002023-08-22 HIGH 7.5 CVE-2021-32420 dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. Dpic Patch available Fix from $1,9502023-08-22 CRITICAL 9.8 CVE-2021-33388 dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y Dpic Mitigation only Fix from $2,3002023-08-22 HIGH 7.5 CVE-2021-34193 Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs. Opensc 0.22.0+ Fix from $1,9502023-08-22 HIGH 7.5 CVE-2020-22218 An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. Libssh2 Patch available Fix from $1,9502023-08-22 MEDIUM 5.5 CVE-2020-21723 A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attacker… Ogg Video Tools No fix yet Fix from $1,6002023-08-22 HIGH 7.8 CVE-2020-21724 Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrar… Ogg Video Tools No fix yet Fix from $1,9502023-08-22 HIGH 7.8 CVE-2020-21890 Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial o… Ghostscript Patch available Fix from $1,9502023-08-22 MEDIUM 5.5 CVE-2020-21687 Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file. Netwide Assembler No fix yet Fix from $1,6002023-08-22