Filtered by CWE-125
Total 7200 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-22349 1 Jtekt 1 Screen Creator Advance 2 2024-08-02 7.8 High
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing screen management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
CVE-2023-22321 1 Datakit 1 Crosscadware 2024-08-02 3.3 Low
Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.
CVE-2023-22347 1 Jtekt 1 Screen Creator Advance 2 2024-08-02 7.8 High
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing file structure information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
CVE-2023-22353 1 Jtekt 1 Screen Creator Advance 2 2024-08-02 7.8 High
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing control management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
CVE-2023-22295 1 Datakit 1 Crosscadware 2024-08-02 3.3 Low
Datakit CrossCadWare_x64.dll contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.
CVE-2023-22231 3 Adobe, Apple, Microsoft 3 Bridge, Macos, Windows 2024-08-02 5.5 Medium
Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-22045 4 Debian, Netapp, Oracle and 1 more 16 Debian Linux, 7-mode Transition Tool, Active Iq Unified Manager and 13 more 2024-08-02 3.7 Low
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
CVE-2023-21729 1 Microsoft 21 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 18 more 2024-08-02 4.3 Medium
Remote Procedure Call Runtime Information Disclosure Vulnerability
CVE-2023-21798 1 Microsoft 21 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 18 more 2024-08-02 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2023-21769 1 Microsoft 21 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 18 more 2024-08-02 7.5 High
Microsoft Message Queuing Denial of Service Vulnerability
CVE-2023-21741 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2024-08-02 7.1 High
Microsoft Office Visio Information Disclosure Vulnerability
CVE-2023-21702 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2024-08-02 7.5 High
Windows iSCSI Service Denial of Service Vulnerability
CVE-2023-21693 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2024-08-02 5.7 Medium
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-21699 1 Microsoft 17 Windows 10, Windows 10 1507, Windows 10 1607 and 14 more 2024-08-02 5.3 Medium
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
CVE-2023-21669 1 Qualcomm 122 Aqt1000, Aqt1000 Firmware, Flight Rb5 5g Platform and 119 more 2024-08-02 8.2 High
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
CVE-2023-21658 1 Qualcomm 302 Ar8035, Ar8035 Firmware, Ar9380 and 299 more 2024-08-02 7.5 High
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
CVE-2023-21661 1 Qualcomm 230 Ar8035, Ar8035 Firmware, Ar9380 and 227 more 2024-08-02 7.5 High
Transient DOS while parsing WLAN beacon or probe-response frame.
CVE-2023-21687 1 Microsoft 5 Windows 11 21h2, Windows 11 21h2, Windows 11 22h2 and 2 more 2024-08-02 5.5 Medium
HTTP.sys Information Disclosure Vulnerability
CVE-2023-21659 1 Qualcomm 540 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 537 more 2024-08-02 7.5 High
Transient DOS in WLAN Firmware while processing frames with missing header fields.
CVE-2023-21714 1 Microsoft 2 365 Apps, Office Long Term Servicing Channel 2024-08-02 5.5 Medium
Microsoft Office Information Disclosure Vulnerability