Vulnerabilities (CVE)

Filtered by CWE-126
Total 221 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-1769 3 Apple, Fedoraproject, Vim 3 Macos, Fedora, Vim 2024-11-21 4.6 MEDIUM 7.8 HIGH
Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.
CVE-2022-1720 4 Apple, Debian, Fedoraproject and 1 more 4 Macos, Debian Linux, Fedora and 1 more 2024-11-21 6.8 MEDIUM 7.8 HIGH
Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
CVE-2022-1629 3 Apple, Fedoraproject, Vim 3 Macos, Fedora, Vim 2024-11-21 6.8 MEDIUM 7.8 HIGH
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution
CVE-2021-34584 1 Codesys 1 Codesys 2024-11-21 6.4 MEDIUM 9.1 CRITICAL
Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
CVE-2021-1373 1 Cisco 8 Catalyst 9300, Catalyst 9400, Catalyst 9500 and 5 more 2024-11-21 7.8 HIGH 8.6 HIGH
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of an affected device. The vulnerability is due to insufficient validation of CAPWAP packets. An attacker could exploit this vulnerability by sending a malformed CAPWAP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition.
CVE-2020-35511 1 Libpng 1 Pngcheck 2024-11-21 N/A 7.8 HIGH
A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.
CVE-2024-33014 1 Qualcomm 650 315 5g Iot Modem, 315 5g Iot Modem Firmware, 860 Mobile Platform and 647 more 2024-11-20 N/A 7.5 HIGH
Transient DOS while parsing ESP IE from beacon/probe response frame.
CVE-2024-33015 1 Qualcomm 390 Ar8035, Ar8035 Firmware, Csr8811 and 387 more 2024-11-20 N/A 7.5 HIGH
Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.
CVE-2024-33025 1 Qualcomm 338 Csr8811, Csr8811 Firmware, Fastconnect 6800 and 335 more 2024-11-20 N/A 7.5 HIGH
Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
CVE-2024-33018 1 Qualcomm 302 Ar8035, Ar8035 Firmware, Csr8811 and 299 more 2024-11-20 N/A 7.5 HIGH
Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.
CVE-2024-33026 1 Qualcomm 330 Ar8035, Ar8035 Firmware, Csr8811 and 327 more 2024-11-20 N/A 7.5 HIGH
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
CVE-2024-33020 1 Qualcomm 196 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 193 more 2024-11-20 N/A 7.5 HIGH
Transient DOS while processing TID-to-link mapping IE elements.
CVE-2024-33019 1 Qualcomm 298 Ar8035, Ar8035 Firmware, Csr8811 and 295 more 2024-11-20 N/A 7.5 HIGH
Transient DOS while parsing the received TID-to-link mapping action frame.
CVE-2024-49031 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2024-11-18 N/A 7.8 HIGH
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2024-9843 2024-11-13 N/A 5.0 MEDIUM
A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.
CVE-2024-38403 1 Qualcomm 156 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 153 more 2024-11-07 N/A 6.5 MEDIUM
Transient DOS while parsing BTM ML IE when per STA profile is not included.
CVE-2024-38405 1 Qualcomm 198 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 195 more 2024-11-07 N/A 6.5 MEDIUM
Transient DOS while processing the CU information from RNR IE.
CVE-2024-38265 1 Microsoft 6 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 3 more 2024-10-22 N/A 8.8 HIGH
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38261 1 Microsoft 6 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 3 more 2024-10-22 N/A 7.8 HIGH
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43595 1 Microsoft 1 Edge Chromium 2024-10-18 N/A 8.8 HIGH
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability