Browse CVEs

HIGH 7.5 CVE-2023-34928 A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST requ… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34929 A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34930 A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34931 A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST req… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-34932 A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST reque… Magic B1st Firmware No fix yet Fix from $1,9502023-06-28 HIGH 7.8 CVE-2023-29068 A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction w… Alias 2020.1.6 / 2021.1.3+ Fix from $1,9502023-06-27 HIGH 7.5 CVE-2023-34924 H3C Magic B1STW B1STV100R012 was discovered to contain a stack overflow via the function SetAPInfoById. This vulnerability allows attackers to cause … Magic B1stw Firmware Mitigation only Fix from $1,9502023-06-26 MEDIUM 6.7 CVE-2023-2290 A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute ar… Thinkpad E14 Firmware Mitigation only Fix from $1,6002023-06-26 CRITICAL 9.8 CVE-2023-36660 The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption. Nettle Patch available Fix from $2,3002023-06-25 HIGH 7.8 CVE-2023-25003 A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities.… Alias 2020.1.6 / 2021.1.3+ Fix from $1,9502023-06-23 HIGH 8.8 CVE-2023-32435 KEVEPSS 23% A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 1… Safari 13.3 / 15.7.7+ Fix from $1,9502023-06-23 HIGH 7.8 CVE-2023-32380 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS V… macOS 11.7.7 / 12.6.6+ Fix from $1,9502023-06-23 MEDIUM 5.5 CVE-2023-32395 A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. A… macOS 11.7.7 / 12.6.6+ Fix from $1,6002023-06-23 HIGH 7.5 CVE-2023-32397 A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey… Ipados 11.7.7 / 12.6.6+ Fix from $1,9502023-06-23 HIGH 7.8 CVE-2023-23516 The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. An app… macOS 11.7.3 / 12.6.3+ Fix from $1,9502023-06-23 HIGH 8.8 CVE-2023-36271 LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c. Libredwg after 0.12.5 Fix from $1,9502023-06-23 HIGH 8.8 CVE-2023-36272 LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c. Libredwg after 0.12.5 Fix from $1,9502023-06-23 HIGH 8.8 CVE-2023-36273 LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c. Libredwg No fix yet Fix from $1,9502023-06-23 HIGH 8.8 CVE-2023-36274 LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c. Libredwg after 0.12.5 Fix from $1,9502023-06-23 HIGH 7.8 CVE-2023-36192 Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c. Sngrep No fix yet Fix from $1,9502023-06-23 HIGH 7.8 CVE-2023-36193 Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguity_error component at /src/clp.c. Gifsicle Patch available Fix from $1,9502023-06-23 CRITICAL 9.8 CVE-2023-20894EPSS 34% The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network … Vcenter Server 7.0+ Fix from $2,3002023-06-22 CRITICAL 9.8 CVE-2023-20895 The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor with network acc… Vcenter Server 7.0+ Fix from $2,3002023-06-22 CRITICAL 9.8 CVE-2023-20892 The vCenter Server contains a heap overflow vulnerability due to the usage of uninitialized memory in the implementation of the DCERPC protocol. A ma… Vcenter Server 7.0+ Fix from $2,3002023-06-22 HIGH 8.8 CVE-2023-0972 Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack bu… Z\/ip Gateway Sdk after 7.18.01 Fix from $1,9502023-06-21 HIGH 8.8 CVE-2023-3110 Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buf… Unify Software Development Kit after 1.3.1 Fix from $1,9502023-06-21 MEDIUM 6.8 CVE-2023-0970 Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a … Z\/ip Gateway Sdk after 7.18.01 Fix from $1,6002023-06-21 HIGH 7.5 CVE-2023-2911 If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`… Debian Linux after 9.18.15 Fix from $1,9502023-06-21 HIGH 7.5 CVE-2022-48486 Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Emui No fix yet Fix from $1,9502023-06-19 CRITICAL 9.8 CVE-2023-34416 Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we… Firefox 102.12 / 114.0+ Fix from $2,3002023-06-19