Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Debian Linux MEDIUM 6.5
CVE-2015-1547

The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIF…

Fix: after 4.0.6
Fix from $1,600 2016-04-13
Debian Linux MEDIUM 6.5
CVE-2014-9655

The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a de…

Fix: after 4.0.6
Fix from $1,600 2016-04-13
Pillow CRITICAL 9.8
CVE-2016-4009EPSS 7%

Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecifie…

Fix: after 3.1.0
Fix from $2,300 2016-04-13
Debian Linux HIGH 8.8
CVE-2016-3982

Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bo…

Fix: after 0.7.5
Fix from $1,950 2016-04-13
Ubuntu Linux HIGH 7.8
CVE-2016-3981EPSS 8%

Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (…

Fix: after 0.7.5
Fix from $1,950 2016-04-13
Pillow MEDIUM 6.5
CVE-2016-2533

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remo…

Fix: after 3.1.0
Fix from $1,600 2016-04-13
Ubuntu Linux MEDIUM 6.5
CVE-2016-2191

The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write …

Patch available
Fix from $1,600 2016-04-13
Debian Linux CRITICAL 9.8
CVE-2016-2054EPSS 5%

Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary cod…

Patch available
Fix from $2,300 2016-04-13
Pillow MEDIUM 6.5
CVE-2016-0775

Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of servic…

Fix: after 3.1.0
Fix from $1,600 2016-04-13
Pillow MEDIUM 6.5
CVE-2016-0740

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory vi…

Fix: after 3.1.0
Fix from $1,600 2016-04-13
Foxit Reader HIGH 7.4
CVE-2015-8843

The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin i…

Patch available
Fix from $1,950 2016-04-13
Fedora MEDIUM 5.5
CVE-2015-7555

Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and …

Fix: after 5.1.1
Fix from $1,600 2016-04-13
Mate S Firmware HIGH 7.8
CVE-2016-1495

Integer overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B…

Mitigation only
Fix from $1,950 2016-04-13
Avast Free Antivirus HIGH 7.8
CVE-2015-8620

Heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus bef…

Fix: after 11.1.2245
Fix from $1,950 2016-04-13
P7 Firmware HIGH 7.8
CVE-2015-8304

Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application…

Mitigation only
Fix from $1,950 2016-04-13
Edge HIGH 7.5
CVE-2016-0157EPSS 16%

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Micros…

Mitigation only
Fix from $1,950 2016-04-12
Edge HIGH 7.5
CVE-2016-0156EPSS 18%

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Micros…

Mitigation only
Fix from $1,950 2016-04-12
Edge HIGH 7.5
CVE-2016-0155EPSS 10%

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Micros…

Mitigation only
Fix from $1,950 2016-04-12
Edge HIGH 7.5
CVE-2016-0154EPSS 14%

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Mitigation only
Fix from $1,950 2016-04-12
.net Framework HIGH 8.8
CVE-2016-0145EPSS 38%

The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…

No fix yet
Fix from $1,950 2016-04-12
Excel HIGH 7.8
CVE-2016-0139EPSS 14%

Microsoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Mi…

Mitigation only
Fix from $1,950 2016-04-12
Excel HIGH 7.8
CVE-2016-0136EPSS 18%

Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoi…

Mitigation only
Fix from $1,950 2016-04-12
Windows 10 HIGH 8.4
CVE-2016-0135

The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Secondary Log…

Mitigation only
Fix from $1,950 2016-04-12
Office HIGH 7.8
CVE-2016-0127EPSS 17%

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation…

Mitigation only
Fix from $1,950 2016-04-12
Excel HIGH 7.8
CVE-2016-0122EPSS 31%

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel …

No fix yet
Fix from $1,950 2016-04-12
Pan Os HIGH 7.5
CVE-2016-3656

The GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote…

Fix: 5.0.18 / 5.1.11+
Fix from $1,950 2016-04-12
Pan Os CRITICAL 9.8
CVE-2016-3657

Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.…

Fix: 5.0.18 / 5.1.11+
Fix from $2,300 2016-04-12
Gpu Driver R340 HIGH 8.4
CVE-2016-2558

The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows lo…

Mitigation only
Fix from $1,950 2016-04-12
Avast HIGH 7.8
CVE-2016-3986EPSS 10%

Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file, related to …

No fix yet
Fix from $1,950 2016-04-12
Ubuntu Linux HIGH 8.4
CVE-2016-2857

The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and c…

Mitigation only
Fix from $1,950 2016-04-12