Total
7966 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2021-21905 | 1 Garrett | 1 Ic Module Cma | 2022-08-31 | 8.5 HIGH | 7.2 HIGH |
Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is used at various locations. The Garrett iC Module exposes an authenticated CLI over TCP port 6877. This interface is used by a secondary GUI client, called “CMA Connect”, to interact with the iC Module on behalf of the user. After a client successfully authenticates, they can send plaintext commands to manipulate the device. | |||||
CVE-2020-6066 | 1 Accusoft | 1 Imagegear | 2022-08-31 | 6.8 MEDIUM | 8.8 HIGH |
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG SOFx parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. | |||||
CVE-2020-6069 | 1 Accusoft | 1 Imagegear | 2022-08-31 | 6.8 MEDIUM | 8.8 HIGH |
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG jpegread precision parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. | |||||
CVE-2020-6067 | 1 Accusoft | 1 Imagegear | 2022-08-31 | 6.8 MEDIUM | 8.8 HIGH |
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted TIFF file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. | |||||
CVE-2020-6068 | 1 Accusoft | 1 Imagegear | 2022-08-31 | 6.8 MEDIUM | 8.8 HIGH |
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG pngread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. | |||||
CVE-2020-28596 | 1 Prusa3d | 1 Prusaslicer | 2022-08-31 | 6.8 MEDIUM | 7.8 HIGH |
A stack-based buffer overflow vulnerability exists in the Objparser::objparse() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. | |||||
CVE-2020-28595 | 1 Prusa3d | 1 Prusaslicer | 2022-08-31 | 6.8 MEDIUM | 7.8 HIGH |
An out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. | |||||
CVE-2022-2991 | 1 Linux | 1 Linux Kernel | 2022-08-30 | N/A | 6.7 MEDIUM |
A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and execute arbitrary code in the context of the kernel. The attacker must first obtain the ability to execute high-privileged code on the target system to exploit this vulnerability. | |||||
CVE-2022-1483 | 1 Google | 1 Chrome | 2022-08-30 | N/A | 8.8 HIGH |
Heap buffer overflow in WebGPU in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. | |||||
CVE-2022-1484 | 1 Google | 1 Chrome | 2022-08-30 | N/A | 8.8 HIGH |
Heap buffer overflow in Web UI Settings in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | |||||
CVE-2016-6207 | 4 Debian, Libgd, Opensuse and 1 more | 4 Debian Linux, Libgd, Leap and 1 more | 2022-08-29 | 4.3 MEDIUM | 6.5 MEDIUM |
Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors. | |||||
CVE-2021-4040 | 2 Apache, Redhat | 2 Activemq Artemis, Amq Broker | 2022-08-29 | N/A | 5.3 MEDIUM |
A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability. | |||||
CVE-2022-36511 | 1 H3c | 2 Gr-1200w, Gr-1200w Firmware | 2022-08-29 | N/A | 9.8 CRITICAL |
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditApAdvanceInfo. | |||||
CVE-2022-36513 | 1 H3c | 2 Gr-1200w, Gr-1200w Firmware | 2022-08-29 | N/A | 9.8 CRITICAL |
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist. | |||||
CVE-2022-36514 | 1 H3c | 2 Gr-1200w, Gr-1200w Firmware | 2022-08-29 | N/A | 9.8 CRITICAL |
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function WanModeSetMultiWan. | |||||
CVE-2022-36515 | 1 H3c | 2 Gr-1200w, Gr-1200w Firmware | 2022-08-29 | N/A | 9.8 CRITICAL |
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function addactionlist. | |||||
CVE-2022-36517 | 1 H3c | 2 Gr-1200w, Gr-1200w Firmware | 2022-08-29 | N/A | 9.8 CRITICAL |
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debug_wlan_advance. | |||||
CVE-2022-36516 | 1 H3c | 2 Gr-1200w, Gr-1200w Firmware | 2022-08-29 | N/A | 9.8 CRITICAL |
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function ap_version_check. | |||||
CVE-2022-36518 | 1 H3c | 2 Gr-1200w, Gr-1200w Firmware | 2022-08-29 | N/A | 9.8 CRITICAL |
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList. | |||||
CVE-2022-36519 | 1 H3c | 2 Gr-1200w, Gr-1200w Firmware | 2022-08-29 | N/A | 9.8 CRITICAL |
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function AddWlanMacList. |