Browse CVEs

HIGH 7.8 CVE-2022-27470 SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggere… Fedora after 2.0.18 Fix from $1,9502022-05-04 MEDIUM 6.7 CVE-2022-20105 In MM service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with Sy… Linux Kernel Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.7 CVE-2022-20106 In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local escalation of privilege with Sys… Linux Kernel Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.7 CVE-2022-20108 In voice service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with… Linux Kernel Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.7 CVE-2022-20087 In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.7 CVE-2022-20094 In imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.7 CVE-2022-20095 In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002022-05-03 HIGH 7.8 CVE-2022-20099 In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System… Android Mitigation only Fix from $1,9502022-05-03 HIGH 7.1 CVE-2022-23400 A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-craft… Imagegear No fix yet Fix from $1,9502022-05-03 CRITICAL 9.8 CVE-2022-28560 There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router. An attac… Ac9 Firmware No fix yet Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2022-28561EPSS 10% There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router. An attacker… Ax12 Firmware No fix yet Fix from $2,3002022-05-03 HIGH 7.1 CVE-2022-20737 A vulnerability in the handler for HTTP authentication for resources accessed through the Clientless SSL VPN portal of Cisco Adaptive Security Applia… Adaptive Security Appliance Software 9.12.4.38 / 9.14.4+ Fix from $1,9502022-05-03 HIGH 7.8 CVE-2021-42529 XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code exec… Debian Linux after 2021.07 Fix from $1,9502022-05-02 HIGH 7.8 CVE-2021-42530 XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code exec… Debian Linux after 2021.07 Fix from $1,9502022-05-02 HIGH 7.8 CVE-2021-42531 XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code exec… Debian Linux after 2021.07 Fix from $1,9502022-05-02 HIGH 7.8 CVE-2021-46790 ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecat… Debian Linux after 2021.8.22 Fix from $1,9502022-05-02 HIGH 7.8 CVE-2022-1403 ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds wri… Asda Soft after 5.4.1.0 Fix from $1,9502022-04-29 MEDIUM 6.6 CVE-2022-1015 A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out… Linux Kernel 5.16.18+ Fix from $1,6002022-04-29 MEDIUM 5.6 CVE-2022-28193 NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may al… Jetson Linux 32.7.2+ Fix from $1,6002022-04-27 MEDIUM 6.5 CVE-2022-22312 IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused… Security Verify Password Synchronization 10.0.4+ Fix from $1,6002022-04-27 MEDIUM 6.5 CVE-2022-22323 IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused… Security Verify Password Synchronization 10.0.4+ Fix from $1,6002022-04-27 MEDIUM 5.3 CVE-2021-34587 In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack va… Ibm Rational Lifecycle Integration Adapter For Windchill 5.11.2 / 5.12.5+ Fix from $1,6002022-04-27 HIGH 7.8 CVE-2022-27239 In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining… Debian Linux 6.15+ Fix from $1,9502022-04-27 HIGH 7.8 CVE-2022-28085 A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution… Htmldoc 1.9.16+ Fix from $1,9502022-04-27 MEDIUM 5.5 CVE-2022-27135 xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (S… Xpdf No fix yet Fix from $1,6002022-04-25 MEDIUM 5.5 CVE-2022-28506 There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45. Fedora No fix yet Fix from $1,6002022-04-25 CRITICAL 9.8 CVE-2022-29077 A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a ri… Rippled 1.8.5+ Fix from $2,3002022-04-25 MEDIUM 5.5 CVE-2021-3721 A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an attacker with local access to tr… Pcmanager 4.0.10282+ Fix from $1,6002022-04-22 HIGH 7.1 CVE-2022-1437 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented … Radare2 5.7.0+ Fix from $1,9502022-04-22 CRITICAL 9.8 CVE-2022-27404 FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face. Fedora 2.12.0+ Fix from $2,3002022-04-22