Browse CVEs

MEDIUM 6.7 CVE-2023-20804 In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execut… Yocto Mitigation only Fix from $1,6002023-08-07 MEDIUM 6.7 CVE-2023-20805 In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execut… Yocto Mitigation only Fix from $1,6002023-08-07 MEDIUM 6.5 CVE-2023-20800 In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege with System execution privile… Yocto Mitigation only Fix from $1,6002023-08-07 MEDIUM 6.5 CVE-2023-20802 In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execu… Yocto Mitigation only Fix from $1,6002023-08-07 MEDIUM 6.5 CVE-2023-20803 In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execu… Yocto Mitigation only Fix from $1,6002023-08-07 MEDIUM 6.4 CVE-2023-20801 In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privile… Yocto Mitigation only Fix from $1,6002023-08-07 HIGH 7.5 CVE-2023-37918 Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. A vulnerability has been found in Dapr that al… Dapr 1.10.9 / 1.11.2+ Fix from $1,9502023-07-21 HIGH 7.5 CVE-2022-32666 In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no ad… Yocto Mitigation only Fix from $1,9502023-07-04 HIGH 7.5 CVE-2023-20689 In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution… Yocto Mitigation only Fix from $1,9502023-07-04 HIGH 7.5 CVE-2023-20690 In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution… Yocto Mitigation only Fix from $1,9502023-07-04 HIGH 7.5 CVE-2023-20691 In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution… Yocto Mitigation only Fix from $1,9502023-07-04 HIGH 7.5 CVE-2023-20692 In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional executi… Yocto Mitigation only Fix from $1,9502023-07-04 HIGH 7.5 CVE-2023-20693 In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional executi… Yocto Mitigation only Fix from $1,9502023-07-04 CRITICAL 9.9 CVE-2023-35926 Backstage is an open platform for building developer portals. The Backstage scaffolder-backend plugin uses a templating library that requires sandbox… Backstage 1.15.0+ Fix from $2,3002023-06-22 MEDIUM 6.7 CVE-2023-20743 In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privi… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20744 In vcu, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges ne… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20745 In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privi… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20746 In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privi… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20737 In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20738 In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20740 In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.4 CVE-2023-20736 In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privi… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20732 In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution … Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20733 In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20734 In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20735 In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Iot Yocto Mitigation only Fix from $1,6002023-06-06 MEDIUM 5.3 CVE-2023-33199 Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed… Rekor 1.2.0+ Fix from $1,6002023-05-26 HIGH 7.8 CVE-2023-30840 Fluid is an open source Kubernetes-native distributed dataset orchestrator and accelerator for data-intensive applications. Starting in version 0.7.0… Fluid 0.8.6+ Fix from $1,9502023-05-08 HIGH 7.5 CVE-2023-30551 Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due to out of memory (OOM) conditions caused b… Rekor 1.1.1+ Fix from $1,9502023-05-08 MEDIUM 5.5 CVE-2023-30841 Baremetal Operator (BMO) is a bare metal host provisioning integration for Kubernetes. Prior to version 0.3.0, ironic and ironic-inspector deployed w… Baremetal Operator 0.3.0+ Fix from $1,6002023-04-26