Browse CVEs

CRITICAL 9.8 CVE-2023-26806 Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime, W20e Firmware No fix yet Fix from $2,3002023-03-19 CRITICAL 9.8 CVE-2023-28116 Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write… Contiki Ng after 4.8 Fix from $2,3002023-03-17 CRITICAL 9.8 CVE-2022-43604EPSS 14% An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commi… Opener 2022-10-18+ Fix from $2,3002023-03-16 CRITICAL 9.8 CVE-2022-43605EPSS 14% An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commi… Opener 2022-10-18+ Fix from $2,3002023-03-16 HIGH 7.5 CVE-2023-25281 A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a denial of service via the next… Dir 820l Firmware No fix yet Fix from $1,9502023-03-16 HIGH 8.8 CVE-2023-25267 An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component's 2FASe… Kerio Connect No fix yet Fix from $1,9502023-03-15 MEDIUM 6.5 CVE-2023-25282 A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dro… Dir 820l Firmware No fix yet Fix from $1,6002023-03-15 HIGH 8.8 CVE-2023-27103 Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc. Libde265 No fix yet Fix from $1,9502023-03-15 HIGH 7.8 CVE-2023-27781 jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c. Jpegoptim Patch available Fix from $1,9502023-03-15 CRITICAL 9.8 CVE-2023-27239 Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet. Ax3 Firmware No fix yet Fix from $2,3002023-03-15 HIGH 7.8 CVE-2023-27590 Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into… Rizin after 0.5.1 Fix from $1,9502023-03-14 HIGH 7.8 CVE-2023-27400 A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds wr… Tecnomatix Plant Simulation 2201.0006+ Fix from $1,9502023-03-14 HIGH 7.8 CVE-2023-27403 A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption… Tecnomatix Plant Simulation 2201.0006+ Fix from $1,9502023-03-14 HIGH 7.8 CVE-2023-27404 A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based… Tecnomatix Plant Simulation 2201.0006+ Fix from $1,9502023-03-14 HIGH 7.8 CVE-2023-27406 A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based… Tecnomatix Plant Simulation 2201.0006+ Fix from $1,9502023-03-14 HIGH 7.8 CVE-2023-27398 A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds wr… Tecnomatix Plant Simulation 2201.0006+ Fix from $1,9502023-03-14 HIGH 7.8 CVE-2023-27399 A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds wr… Tecnomatix Plant Simulation 2201.0006+ Fix from $1,9502023-03-14 CRITICAL 9.8 CVE-2023-26073 An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exyno… Exynos 850 Firmware No fix yet Fix from $2,3002023-03-13 CRITICAL 9.8 CVE-2023-26074 An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exyno… Exynos 850 Firmware No fix yet Fix from $2,3002023-03-13 HIGH 7.5 CVE-2023-25283 A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parame… Dir 820l Firmware No fix yet Fix from $1,9502023-03-13 CRITICAL 9.8 CVE-2023-26072 An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exyno… Exynos 850 Firmware No fix yet Fix from $2,3002023-03-13 MEDIUM 5.5 CVE-2022-47457 In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Android Mitigation only Fix from $1,6002023-03-10 MEDIUM 5.5 CVE-2022-47459 In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Android Mitigation only Fix from $1,6002023-03-10 HIGH 7.8 CVE-2022-33260 Memory corruption due to stack based buffer overflow in core while sending command from USB of large size. Aqt1000 Firmware Mitigation only Fix from $1,9502023-03-10 HIGH 7.8 CVE-2023-27117 WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator. Webassembly No fix yet Fix from $1,9502023-03-10 HIGH 7.8 CVE-2023-0622 Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper… Cscape Envision Rv Mitigation only Fix from $1,9502023-03-09 HIGH 7.8 CVE-2023-0623 Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper… Cscape Envision Rv Mitigation only Fix from $1,9502023-03-09 CRITICAL 9.9 CVE-2023-26489 wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where a… Cranelift Codegen 0.91.1 / 4.0.1+ Fix from $2,3002023-03-08 MEDIUM 6.5 CVE-2023-1217 Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the rendere… Chrome 111.0.5563.64+ Fix from $1,6002023-03-07 HIGH 8.8 CVE-2023-1219 Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 111.0.5563.64+ Fix from $1,9502023-03-07