Export limit exceeded: 21516 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (21516 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-32229 1 Bosch 17 Autodome 7000i, Autodome 7100 Ir, Autodome Inteox 7000i and 14 more 2024-12-12 4.9 Medium
Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option (signing of the video stream) with option MD5, SHA-1 or SHA-256.
CVE-2023-2686 1 Silabs 1 Gecko Software Development Kit 2024-12-12 9.8 Critical
Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payload onto the stack.
CVE-2024-43050 1 Qualcomm 109 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 106 more 2024-12-12 7.8 High
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.
CVE-2024-43048 1 Qualcomm 104 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6900 and 101 more 2024-12-12 7.8 High
Memory corruption when invalid input is passed to invoke GPU Headroom API call.
CVE-2024-33056 1 Qualcomm 662 205 Mobile Platform, 205 Mobile Platform Firmware, 315 5g Iot Modem and 659 more 2024-12-12 8.4 High
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
CVE-2024-33044 1 Qualcomm 425 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 422 more 2024-12-12 8.4 High
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
CVE-2023-2747 1 Silabs 1 Gecko Software Development Kit 2024-12-11 3.1 Low
The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.
CVE-2024-9978 1 Openatom 1 Openharmony 2024-12-11 5.5 Medium
in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVE-2024-12082 1 Openatom 1 Openharmony 2024-12-11 5.5 Medium
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVE-2023-35855 1 Valvesoftware 1 Counter-strike 2024-12-11 9.8 Critical
A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable.
CVE-2023-35856 1 Nintendo 1 Mario Kart Wii 2024-12-11 9.8 Critical
A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's machine via a crafted packet.
CVE-2023-35862 1 Libcoap 1 Libcoap 2024-12-11 6.5 Medium
libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c.
CVE-2024-33037 1 Qualcomm 104 C-v2x 9150, C-v2x 9150 Firmware, Fastconnect 6800 and 101 more 2024-12-11 6.1 Medium
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.
CVE-2024-8025 1 Nikon 1 Nef Codec 2024-12-11 7.8 High
Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NRW files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19873.
CVE-2024-12354 2 Razormist, Sourcecodester 2 Phone Contact Manager System, Phone Shop Sales Managements System Using Php With Source Code 2024-12-10 5.3 Medium
A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affected is the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
CVE-2024-12352 1 Totolink 2 Ex1800t, Ex1800t Firmware 2024-12-10 4.3 Medium
A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function sub_40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-12343 1 Tp-link 2 Vn020 F3v, Vn020 F3v Firmware 2024-12-10 6.5 Medium
A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request Handler. The manipulation of the argument NewConnectionType leads to buffer overflow. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used.
CVE-2023-36358 1 Tp-link 8 Tl-wr743nd, Tl-wr743nd Firmware, Tl-wr841n and 5 more 2024-12-10 7.7 High
TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
CVE-2023-36359 1 Tp-link 6 Tl-wr841n, Tl-wr841n Firmware, Tl-wr940n and 3 more 2024-12-10 7.5 High
TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
CVE-2020-20703 1 Vim 1 Vim 2024-12-10 9.8 Critical
Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter.