Browse CVEs

HIGH 7.5 CVE-2023-34611 An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cycl… Mjson after 1.4.1 Fix from $1,9502023-06-14 HIGH 7.8 CVE-2023-2569 A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, elevation of privilege, and potentially kernel executio… Ecostruxure Foxboro Dcs Control Core Services Mitigation only Fix from $1,9502023-06-14 CRITICAL 9.8 CVE-2023-29562 TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale. Tl Wpa7510 Firmware No fix yet Fix from $2,3002023-06-13 CRITICAL 9.8 CVE-2022-28550 Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it d… Jhead Patch available Fix from $2,3002023-06-13 HIGH 7.8 CVE-2023-29160 Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information o… Frenic Rhc Loader after 1.1.0.3 Fix from $1,9502023-06-13 HIGH 7.8 CVE-2023-33124 A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visua… Jt2go 13.2.0.13 / 13.3.0.10+ Fix from $1,9502023-06-13 HIGH 7.8 CVE-2023-22639 A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.12, Fo… Fortiproxy after 7.2.3 Fix from $1,9502023-06-13 CRITICAL 9.8 CVE-2023-27997 KEVEPSS 86% A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version … Fortiproxy after 7.2.4 Fix from $2,3002023-06-13 CRITICAL 9.8 CVE-2023-33626 D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary. Dir 600 Firmware No fix yet Fix from $2,3002023-06-12 HIGH 7.5 CVE-2023-34940 Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NOTE: This vulnerability only a… Rt N10lx Firmware No fix yet Fix from $1,9502023-06-12 HIGH 7.5 CVE-2023-34942 Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only a… Rt N10lx Firmware No fix yet Fix from $1,9502023-06-12 HIGH 8.8 CVE-2023-28478 TP-Link EC-70 devices through 2.3.4 Build 20220902 rel.69498 have a Buffer Overflow. Ec70 Firmware after 2.3.4_build_20220902_rel.69498 Fix from $1,9502023-06-12 HIGH 7.8 CVE-2023-34488 NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages. Nanomq Patch available Fix from $1,9502023-06-12 CRITICAL 9.8 CVE-2023-34364 A buffer overflow was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. An overly large value for certain options of a… Datadirect Odbc Oracle Wire Protocol Driver 08.02.2770+ Fix from $2,3002023-06-09 CRITICAL 9.8 CVE-2023-34566 Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo. Ac10 Firmware Mitigation only Fix from $2,3002023-06-08 MEDIUM 6.7 CVE-2023-34567 Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg. Ac10 Firmware Mitigation only Fix from $1,6002023-06-08 MEDIUM 6.7 CVE-2023-34568 Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet. Ac10 Firmware Mitigation only Fix from $1,6002023-06-08 MEDIUM 6.7 CVE-2023-34569 Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList. Ac10 Firmware Mitigation only Fix from $1,6002023-06-08 MEDIUM 6.7 CVE-2023-34570 Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName. Ac10 Firmware Mitigation only Fix from $1,6002023-06-08 MEDIUM 6.7 CVE-2023-34571 Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet. Ac10 Firmware Mitigation only Fix from $1,6002023-06-08 HIGH 7.5 CVE-2023-33658 A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_msg_get_pub_pid() in the… Nanomq Patch available Fix from $1,9502023-06-08 HIGH 7.5 CVE-2023-33660 A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copyn_str() in the file mqtt… Nanomq Patch available Fix from $1,9502023-06-08 HIGH 7.8 CVE-2023-24014 Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to heap-based buffer overflow, which could allow an attacker to exec… Cncsoft B after 1.0.0.4 Fix from $1,9502023-06-07 HIGH 7.8 CVE-2023-1709 Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could … Jt2go 13.2.0.13 / 13.3.0.9+ Fix from $1,9502023-06-07 HIGH 8.1 CVE-2023-1388 A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory block, re… Agent 5.7.9+ Fix from $1,9502023-06-07 MEDIUM 6.5 CVE-2023-0666 Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to… Wireshark 4.0.6+ Fix from $1,6002023-06-07 MEDIUM 6.5 CVE-2023-0667 Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration,… Wireshark 4.0.6+ Fix from $1,6002023-06-07 MEDIUM 6.5 CVE-2023-0668 Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is suscep… Wireshark 3.6.14 / 4.0.6+ Fix from $1,6002023-06-07 MEDIUM 5.5 CVE-2023-2157 A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing. Imagemagick 7.1.1-9+ Fix from $1,6002023-06-06 MEDIUM 5.5 CVE-2023-33613 axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability allows atta… Axtls No fix yet Fix from $1,6002023-06-06