Browse CVEs

HIGH 7.5 CVE-2023-3633 An out-of-bounds write vulnerability in Bitdefender Engines on Windows causes the engine to crash. This issue affects Bitdefender Engines version 7.9… Engines 7.94792+ Fix from $1,9502023-07-14 CRITICAL 9.8 CVE-2023-37714 Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteSta… F1202 Firmware No fix yet Fix from $2,3002023-07-14 CRITICAL 9.8 CVE-2023-37715 Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function frmL7ProtFor… F1202 Firmware No fix yet Fix from $2,3002023-07-14 CRITICAL 9.8 CVE-2023-37716 Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stac… F1202 Firmware No fix yet Fix from $2,3002023-07-14 CRITICAL 9.8 CVE-2023-37717 Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stac… F1202 Firmware No fix yet Fix from $2,3002023-07-14 CRITICAL 9.8 CVE-2023-37718 Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeClie… F1202 Firmware No fix yet Fix from $2,3002023-07-14 CRITICAL 9.8 CVE-2023-37719 Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromP2pListF… F1202 Firmware No fix yet Fix from $2,3002023-07-14 CRITICAL 9.8 CVE-2023-37721 Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacF… F1202 Firmware No fix yet Fix from $2,3002023-07-14 CRITICAL 9.8 CVE-2023-37722 Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlF… F1202 Firmware No fix yet Fix from $2,3002023-07-14 CRITICAL 9.8 CVE-2023-37723 Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetti… F1202 Firmware No fix yet Fix from $2,3002023-07-14 MEDIUM 6.5 CVE-2023-37837 libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. This vulner… Libjpeg 1.66+ Fix from $1,6002023-07-13 HIGH 7.5 CVE-2023-26597 Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification … C300 Firmware after 520.2tcu2 Fix from $1,9502023-07-13 HIGH 7.5 CVE-2023-25078 Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operatio… Experion Server after 520.2tcu2 Fix from $1,9502023-07-13 HIGH 7.5 CVE-2023-22435 Experion server may experience a DoS due to a stack overflow when handling a specially crafted message. Experion Server after 520.2tcu2 Fix from $1,9502023-07-13 HIGH 7.5 CVE-2023-23585 Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.  See H… Experion Server after 520.2tcu2 Fix from $1,9502023-07-13 HIGH 7.5 CVE-2023-24474 Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message Experion Server after 520.2tcu2 Fix from $1,9502023-07-13 HIGH 7.5 CVE-2023-24480 Controller DoS due to stack overflow when decoding a message from the server.  See Honeywell Security Notification for recommendations on upgrading … C300 Firmware after 520.2tcu2 Fix from $1,9502023-07-13 HIGH 7.5 CVE-2023-29451 Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy. Zabbix after 6.4.4 Fix from $1,9502023-07-13 HIGH 7.8 CVE-2023-21255 In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege wi… Debian Linux Patch available Fix from $1,9502023-07-13 CRITICAL 9.8 CVE-2023-21250 In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executi… Android Patch available Fix from $2,3002023-07-13 HIGH 7.8 CVE-2023-29308 Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arb… Indesign 17.4.2 / 18.4+ Fix from $1,9502023-07-12 CRITICAL 9.8 CVE-2023-3595 Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious us… 1756 En2f Series A Firmware Mitigation only Fix from $2,3002023-07-12 HIGH 7.5 CVE-2023-3596 Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a d… 1756 En4tr Firmware Mitigation only Fix from $1,9502023-07-12 HIGH 7.8 CVE-2023-2763 Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desk… 3dexperience Solidworks after 2023 Fix from $1,9502023-07-12 MEDIUM 5.5 CVE-2023-37174 GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dump_isom_scene function at /mp4box/filedump.c. Gpac No fix yet Fix from $1,6002023-07-11 MEDIUM 5.5 CVE-2023-37765 GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgpac.so. Gpac No fix yet Fix from $1,6002023-07-11 MEDIUM 5.5 CVE-2023-37766 GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/libgpac.so. Gpac No fix yet Fix from $1,6002023-07-11 MEDIUM 5.5 CVE-2023-37767 GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM_ParseIndexValueReplace function at /lib/libgpac.s… Gpac No fix yet Fix from $1,6002023-07-11 HIGH 8.8 CVE-2023-36824EPSS 77% Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, … Redis 7.0.12+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-2072 The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product.  The vulnerable pa… Powermonitor 1000 Firmware Mitigation only Fix from $1,9502023-07-11