Browse CVEs

HIGH 7.8 CVE-2021-46524 Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs_json.c. Mjs Patch available Fix from $1,9502022-01-27 HIGH 7.8 CVE-2021-46527 Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c. Mjs Patch available Fix from $1,9502022-01-27 HIGH 7.8 CVE-2021-46518 Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c. Mjs No fix yet Fix from $1,9502022-01-27 HIGH 7.8 CVE-2021-46519 Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c. Mjs No fix yet Fix from $1,9502022-01-27 HIGH 7.8 CVE-2021-46520 Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src/mjs_util.c. Mjs No fix yet Fix from $1,9502022-01-27 HIGH 7.8 CVE-2022-0361 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Debian Linux 8.2.4215 / 12.6+ Fix from $1,9502022-01-26 HIGH 7.8 CVE-2022-0359 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Debian Linux 8.2.4214 / 12.6+ Fix from $1,9502022-01-26 HIGH 7.2 CVE-2021-36347 iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated rem… Integrated Dell Remote Access Controller 8 Firmware 2.82.82.82 / 5.00.20.00+ Fix from $1,9502022-01-25 HIGH 7.8 CVE-2021-46482 Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c. Jsish Patch available Fix from $1,9502022-01-25 HIGH 7.8 CVE-2021-46483 Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c. Jsish Patch available Fix from $1,9502022-01-25 MEDIUM 5.5 CVE-2021-46474 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c. This vulnerability can lead to a Denial of Service… Jsish Patch available Fix from $1,6002022-01-25 MEDIUM 5.5 CVE-2021-46475 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Ser… Jsish Patch available Fix from $1,6002022-01-25 MEDIUM 5.5 CVE-2021-46477 Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of S… Jsish Patch available Fix from $1,6002022-01-25 MEDIUM 5.5 CVE-2021-46478 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service … Jsish Patch available Fix from $1,6002022-01-25 MEDIUM 5.5 CVE-2021-46480 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Serv… Jsish Patch available Fix from $1,6002022-01-25 HIGH 7.8 CVE-2022-23850 xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document. Epub2txt after 2.02 Fix from $1,9502022-01-23 MEDIUM 5.5 CVE-2021-46238 GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegraph.c. This vulnerability can l… Gpac Patch available Fix from $1,6002022-01-21 CRITICAL 9.8 CVE-2022-0318 Heap-based Buffer Overflow in vim/vim prior to 8.2. Debian Linux 8.2.4151 / 13.0+ Fix from $2,3002022-01-21 HIGH 7.8 CVE-2022-21933 ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interru… Vc65 C1 Firmware 601 / 902+ Fix from $1,9502022-01-21 HIGH 7.8 CVE-2022-22893 Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c. Jerryscript Patch available Fix from $1,9502022-01-21 HIGH 7.8 CVE-2022-22894 Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache.c. Jerryscript Patch available Fix from $1,9502022-01-21 HIGH 7.8 CVE-2022-22895 Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conv… Jerryscript Patch available Fix from $1,9502022-01-21 HIGH 7.8 CVE-2022-22888 Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c. Jerryscript Patch available Fix from $1,9502022-01-20 HIGH 7.8 CVE-2021-46324 Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString. Espruino No fix yet Fix from $1,9502022-01-20 HIGH 7.8 CVE-2021-46325 Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf. Espruino Patch available Fix from $1,9502022-01-20 HIGH 7.8 CVE-2021-46326 Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy. Moddable Sdk Patch available Fix from $1,9502022-01-20 HIGH 7.8 CVE-2021-46328 Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main. Moddable Sdk Patch available Fix from $1,9502022-01-20 HIGH 7.8 CVE-2021-46332 Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter. Moddable Sdk No fix yet Fix from $1,9502022-01-20 HIGH 7.8 CVE-2021-46334 Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat. Moddable Sdk No fix yet Fix from $1,9502022-01-20 HIGH 7.8 CVE-2021-45417 AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of… Ovirt Node after 0.17.3 Fix from $1,9502022-01-20