Archive
1 May 2024
Vulnerabilities first published on this day (UTC), newest first.
16 results · Clear filters · Feed
-
Critical 9.0
JFrog Artifactory Improper input validation within token creation flow
An Improper input validation vulnerability that could potentially lead to privilege escalation was discovered in JFrog Artifactory. Due to this vulnerability, users with low privileges may gain administrative access to the system. This issue can also be explo…
-
Critical 9.8
A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially craf…
-
Critical 9.8
A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. …
-
Critical 9.8CVE-2024-33512 EPSS 15%
There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead t…
-
Critical 9.8CVE-2024-33511 EPSS 15%
There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticat…
-
Critical 9.8CVE-2024-26305 EPSS 15%
There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote cod…
-
Critical 9.8
There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated …
-
Critical 9.8
SUNRPC: fix some memleaks in gssx_dec_option_array
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssx_dec_option_array The creds and oa->data need to be freed in the error-handling paths after their allocation. So this patch add these deallocations in the cor…
-
Critical 9.0
Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap c…
-
Critical 9.8
Buffer overflows in RIOT
RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The size check in the `gcoap_dns_server_proxy_get()` function contains a small typo that may lead to a buffer o…
-
Critical 9.8
net: esp: fix bad handling of pages from page_pool
In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from page_pool When the skb is reorganized during esp_output (!esp->inline), the pages coming from the original skb fragments are supposed to be released b…
-
Critical 9.8
An issue was discovered in Teledyne FLIR M300 2.00-19. Unauthenticated remote code execution can occur in the web serve…
-
Critical 9.8
libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c.
-
Critical 9.8
Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to …
-
Critical 9.8
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the remoteIp parameter from formSetSafeWanWebMan function.
-
Critical 9.8
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.