Vulnerability index

Browse CVEs

414 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Yocto MEDIUM 6.7
CVE-2023-20804

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execut…

Mitigation only
Fix from $1,600 2023-08-07
Yocto MEDIUM 6.7
CVE-2023-20805

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execut…

Mitigation only
Fix from $1,600 2023-08-07
Yocto MEDIUM 6.5
CVE-2023-20800

In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege with System execution privile…

Mitigation only
Fix from $1,600 2023-08-07
Yocto MEDIUM 6.5
CVE-2023-20802

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execu…

Mitigation only
Fix from $1,600 2023-08-07
Yocto MEDIUM 6.5
CVE-2023-20803

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execu…

Mitigation only
Fix from $1,600 2023-08-07
Yocto MEDIUM 6.4
CVE-2023-20801

In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privile…

Mitigation only
Fix from $1,600 2023-08-07
Dapr HIGH 7.5
CVE-2023-37918

Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. A vulnerability has been found in Dapr that al…

Fix: 1.10.9 / 1.11.2+
Fix from $1,950 2023-07-21
Yocto HIGH 7.5
CVE-2022-32666

In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no ad…

Mitigation only
Fix from $1,950 2023-07-04
Yocto HIGH 7.5
CVE-2023-20689

In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution…

Mitigation only
Fix from $1,950 2023-07-04
Yocto HIGH 7.5
CVE-2023-20690

In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution…

Mitigation only
Fix from $1,950 2023-07-04
Yocto HIGH 7.5
CVE-2023-20691

In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution…

Mitigation only
Fix from $1,950 2023-07-04
Yocto HIGH 7.5
CVE-2023-20692

In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional executi…

Mitigation only
Fix from $1,950 2023-07-04
Yocto HIGH 7.5
CVE-2023-20693

In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional executi…

Mitigation only
Fix from $1,950 2023-07-04
Backstage CRITICAL 9.9
CVE-2023-35926

Backstage is an open platform for building developer portals. The Backstage scaffolder-backend plugin uses a templating library that requires sandbox…

Fix: 1.15.0+
Fix from $2,300 2023-06-22
Iot Yocto MEDIUM 6.7
CVE-2023-20743

In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privi…

Mitigation only
Fix from $1,600 2023-06-06
Iot Yocto MEDIUM 6.7
CVE-2023-20744

In vcu, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges ne…

Mitigation only
Fix from $1,600 2023-06-06
Iot Yocto MEDIUM 6.7
CVE-2023-20745

In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privi…

Mitigation only
Fix from $1,600 2023-06-06
Iot Yocto MEDIUM 6.7
CVE-2023-20746

In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privi…

Mitigation only
Fix from $1,600 2023-06-06
Iot Yocto MEDIUM 6.7
CVE-2023-20737

In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges…

Mitigation only
Fix from $1,600 2023-06-06
Iot Yocto MEDIUM 6.7
CVE-2023-20738

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…

Mitigation only
Fix from $1,600 2023-06-06
Iot Yocto MEDIUM 6.7
CVE-2023-20740

In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges…

Mitigation only
Fix from $1,600 2023-06-06
Iot Yocto MEDIUM 6.4
CVE-2023-20736

In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privi…

Mitigation only
Fix from $1,600 2023-06-06
Yocto MEDIUM 6.7
CVE-2023-20732

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution …

Mitigation only
Fix from $1,600 2023-06-06
Iot Yocto MEDIUM 6.7
CVE-2023-20733

In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges…

Mitigation only
Fix from $1,600 2023-06-06
Iot Yocto MEDIUM 6.7
CVE-2023-20734

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…

Mitigation only
Fix from $1,600 2023-06-06
Iot Yocto MEDIUM 6.7
CVE-2023-20735

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…

Mitigation only
Fix from $1,600 2023-06-06
Rekor MEDIUM 5.3
CVE-2023-33199

Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed…

Fix: 1.2.0+
Fix from $1,600 2023-05-26
Fluid HIGH 7.8
CVE-2023-30840

Fluid is an open source Kubernetes-native distributed dataset orchestrator and accelerator for data-intensive applications. Starting in version 0.7.0…

Fix: 0.8.6+
Fix from $1,950 2023-05-08
Rekor HIGH 7.5
CVE-2023-30551

Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due to out of memory (OOM) conditions caused b…

Fix: 1.1.1+
Fix from $1,950 2023-05-08
Baremetal Operator MEDIUM 5.5
CVE-2023-30841

Baremetal Operator (BMO) is a bare metal host provisioning integration for Kubernetes. Prior to version 0.3.0, ironic and ironic-inspector deployed w…

Fix: 0.3.0+
Fix from $1,600 2023-04-26