Search Results (40752 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-2686 1 Silabs 1 Gecko Software Development Kit 2024-12-12 9.8 Critical
Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payload onto the stack.
CVE-2024-50089 2024-12-12 5.5 Medium
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-50018 1 Redhat 1 Enterprise Linux 2024-12-12 4.4 Medium
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-43053 1 Qualcomm 40 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 37 more 2024-12-12 7.8 High
Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.
CVE-2024-43050 1 Qualcomm 109 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 106 more 2024-12-12 7.8 High
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.
CVE-2024-43049 1 Qualcomm 38 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 35 more 2024-12-12 7.8 High
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.
CVE-2024-43048 1 Qualcomm 104 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6900 and 101 more 2024-12-12 7.8 High
Memory corruption when invalid input is passed to invoke GPU Headroom API call.
CVE-2024-33063 1 Qualcomm 250 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 247 more 2024-12-12 7.5 High
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.
CVE-2024-33056 1 Qualcomm 662 205 Mobile Platform, 205 Mobile Platform Firmware, 315 5g Iot Modem and 659 more 2024-12-12 8.4 High
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
CVE-2024-33044 1 Qualcomm 425 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 422 more 2024-12-12 8.4 High
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
CVE-2023-2747 1 Silabs 1 Gecko Software Development Kit 2024-12-11 3.1 Low
The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.
CVE-2024-44306 1 Apple 1 Macos 2024-12-11 7.8 High
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges.
CVE-2024-44307 1 Apple 1 Macos 2024-12-11 7.8 High
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges.
CVE-2024-25610 1 Liferay 2 Digital Experience Platform, Liferay Portal 2024-12-11 9 Critical
In Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions, the default configuration does not sanitize blog entries of JavaScript, which allows remote authenticated users to inject arbitrary web script or HTML (XSS) via a crafted payload injected into a blog entry’s content text field.
CVE-2024-9978 1 Openatom 1 Openharmony 2024-12-11 5.5 Medium
in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVE-2024-12082 1 Openatom 1 Openharmony 2024-12-11 5.5 Medium
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVE-2023-35855 1 Valvesoftware 1 Counter-strike 2024-12-11 9.8 Critical
A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable.
CVE-2023-35856 1 Nintendo 1 Mario Kart Wii 2024-12-11 9.8 Critical
A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's machine via a crafted packet.
CVE-2023-35862 1 Libcoap 1 Libcoap 2024-12-11 6.5 Medium
libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c.
CVE-2024-33037 1 Qualcomm 104 C-v2x 9150, C-v2x 9150 Firmware, Fastconnect 6800 and 101 more 2024-12-11 6.1 Medium
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.