Total
10985 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2022-34884 | 1 Lenovo | 196 Thinkagile Hx1021, Thinkagile Hx1021 Firmware, Thinkagile Hx1320 and 193 more | 2024-11-21 | N/A | 7.2 HIGH |
A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service. | |||||
CVE-2022-34835 | 1 Denx | 1 U-boot | 2024-11-21 | 7.5 HIGH | 9.8 CRITICAL |
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function. | |||||
CVE-2022-34759 | 1 Schneider-electric | 4 Opc Ua Module For M580, Opc Ua Module For M580 Firmware, X80 Advanced Rtu Module and 1 more | 2024-11-21 | N/A | 7.5 HIGH |
A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improper parsing of the HTTP Headers. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V1.0), OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior) | |||||
CVE-2022-34748 | 1 Siemens | 1 Simcenter Femap | 2024-11-21 | 6.8 MEDIUM | 7.8 HIGH |
A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17293) | |||||
CVE-2022-34742 | 1 Huawei | 3 Emui, Harmonyos, Magic Ui | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. | |||||
CVE-2022-34671 | 1 Nvidia | 7 Geforce, Gpu Display Driver, Nvs and 4 more | 2024-11-21 | N/A | 8.5 HIGH |
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of service. | |||||
CVE-2022-34667 | 3 Linux, Microsoft, Nvidia | 3 Linux Kernel, Windows, Cuda Toolkit | 2024-11-21 | N/A | 4.4 MEDIUM |
NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally, which may lead to a limited denial of service and some loss of data integrity for the local user. | |||||
CVE-2022-34610 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app. | |||||
CVE-2022-34609 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp. | |||||
CVE-2022-34608 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ajaxmsg parameter at /AJAX/ajaxget. | |||||
CVE-2022-34607 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp. | |||||
CVE-2022-34606 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditvsList parameter at /dotrace.asp. | |||||
CVE-2022-34605 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /dotrace.asp. | |||||
CVE-2022-34604 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp. | |||||
CVE-2022-34603 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. | |||||
CVE-2022-34602 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. | |||||
CVE-2022-34601 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. | |||||
CVE-2022-34600 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. | |||||
CVE-2022-34599 | 1 H3c | 2 Magic R200, Magic R200 Firmware | 2024-11-21 | N/A | 9.8 CRITICAL |
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. | |||||
CVE-2022-34528 | 1 Dlink | 2 Dsl-3782, Dsl-3782 Firmware | 2024-11-21 | N/A | 8.8 HIGH |
D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue. |