Vulnerabilities > Out-of-bounds Write
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-10 | CVE-2023-51971 | Out-of-bounds Write vulnerability in Tenda Ax1803 Firmware 1.0.0.1 Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo. | 9.8 |
| 2024-01-10 | CVE-2023-49427 | Out-of-bounds Write vulnerability in Tenda Ax12 Firmware 22.03.01.46 Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via list parameter in SetNetControlList function. | 7.5 |
| 2024-01-09 | CVE-2023-37293 | Out-of-bounds Write vulnerability in AMI Megarac Sp-X 12/13 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. | 8.8 |
| 2024-01-09 | CVE-2023-37294 | Out-of-bounds Write vulnerability in AMI Megarac Sp-X 12/13 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. | 8.8 |
| 2024-01-09 | CVE-2023-37295 | Out-of-bounds Write vulnerability in AMI Megarac Sp-X 12/13 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. | 8.8 |
| 2024-01-09 | CVE-2023-37296 | Out-of-bounds Write vulnerability in AMI Megarac Sp-X 12/13 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network. | 8.8 |
| 2024-01-09 | CVE-2023-37297 | Out-of-bounds Write vulnerability in AMI Megarac Sp-X 12/13 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. | 8.8 |
| 2024-01-09 | CVE-2023-3043 | Out-of-bounds Write vulnerability in AMI Megarac Sp-X 12/13 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. | 8.8 |
| 2024-01-09 | CVE-2023-6129 | Out-of-bounds Write vulnerability in Openssl Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker can influence whether the POLY1305 MAC algorithm is used, the application state might be corrupted with various application dependent consequences. The POLY1305 MAC (message authentication code) implementation in OpenSSL for PowerPC CPUs restores the contents of vector registers in a different order than they are saved. | 6.5 |
| 2024-01-09 | CVE-2023-7222 | Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20221212.1452 A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. | 9.8 |