Browse CVEs

HIGH 7.8 CVE-2023-3812 An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big)… Linux Kernel 4.19.265 / 5.4.224+ Fix from $1,9502023-07-24 HIGH 7.8 CVE-2022-46293 Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 … Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.8 CVE-2022-46294 Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 … Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.8 CVE-2022-46295 Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 … Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.5 CVE-2023-35077 An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7… Endpoint Manager 7.9.1.285+ Fix from $1,9502023-07-21 HIGH 7.8 CVE-2023-3611 An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The … Linux Kernel 4.14.322 / 4.19.291+ Fix from $1,9502023-07-21 HIGH 7.8 CVE-2022-37331 An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specia… Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.8 CVE-2022-41793 An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted… Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.8 CVE-2022-43467 An out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially cr… Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.8 CVE-2022-43607 An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1 and master commit 530dbfa3. A sp… Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.8 CVE-2022-46289 Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A speciall… Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.8 CVE-2022-46290 Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A speciall… Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.8 CVE-2022-46291 Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 … Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.8 CVE-2022-46292 Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 … Open Babel No fix yet Fix from $1,9502023-07-21 HIGH 7.8 CVE-2023-28730 A memory corruption vulnerability Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when open… Control Fpwin Pro after 7.6.0.3 Fix from $1,9502023-07-21 HIGH 7.8 CVE-2023-28728 A stack-based buffer overflow in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when openi… Control Fpwin Pro after 7.6.0.3 Fix from $1,9502023-07-21 CRITICAL 9.8 CVE-2023-38632 async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in tcpsocket.hpp when processing malformed TCP packets. Asynchronous Sockets For C\+\+ after 0.3.1 Fix from $2,3002023-07-21 HIGH 7.8 CVE-2021-39822 Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitr… Indesign after 16.3.2 Fix from $1,9502023-07-20 HIGH 7.0 CVE-2022-28734 Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer p… Grub2 2.06-3+ Fix from $1,9502023-07-20 HIGH 7.8 CVE-2022-28737 There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into acc… Shim 15.6+ Fix from $1,9502023-07-20 CRITICAL 9.8 CVE-2023-3463 All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory c… Cimplicity Mitigation only Fix from $2,3002023-07-19 MEDIUM 5.5 CVE-2023-37139 ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray(). Chakracore No fix yet Fix from $1,6002023-07-18 MEDIUM 5.5 CVE-2020-23910 Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhash_get in genhash.c. Asn1c after 0.9.28 Fix from $1,6002023-07-18 MEDIUM 6.5 CVE-2021-32256 An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c. Binutils No fix yet Fix from $1,6002023-07-18 HIGH 7.8 CVE-2021-34119 A flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this flaw possibly allows possible code execution and a denial of … Htmldoc Patch available Fix from $1,9502023-07-18 CRITICAL 9.8 CVE-2021-34123 An issue was discovered on atasm, version 1.09. A stack-buffer-overflow vulnerability in function aprintf() in asm.c allows attackers to execute arbi… Atasm Mitigation only Fix from $2,3002023-07-18 HIGH 7.5 CVE-2023-31998 A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices. Edgemax Edgerouter Firmware 2.8.9+ Fix from $1,9502023-07-18 MEDIUM 5.5 CVE-2023-37770 faust commit ee39a19 was discovered to contain a stack overflow via the component boxppShared::print() at /boxes/ppbox.cpp. Faust No fix yet Fix from $1,6002023-07-17 CRITICAL 9.8 CVE-2023-37791EPSS 13% D-Link DIR-619L v2.04(TW) was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin. Dir 619l Firmware No fix yet Fix from $2,3002023-07-17 MEDIUM 6.7 CVE-2023-35012 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow,… Db2 Mitigation only Fix from $1,6002023-07-17