Browse CVEs

HIGH 7.5 CVE-2020-5861 On BIG-IP 12.1.0-12.1.5, the TMM process may produce a core file in some cases when Ram Cache incorrectly optimizes stored data resulting in memory e… Big Ip Access Policy Manager after 12.1.5 Fix from $1,9502020-03-27 HIGH 7.5 CVE-2019-5105 An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService.… Codesys No fix yet Fix from $1,9502020-03-26 HIGH 8.8 CVE-2020-3776 Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful expl… Photoshop 2020 after 21.1 Fix from $1,9502020-03-25 HIGH 8.8 CVE-2020-3772 Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful expl… Photoshop 2020 after 21.1 Fix from $1,9502020-03-25 HIGH 8.8 CVE-2020-3774 Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful expl… Photoshop 2020 after 21.1 Fix from $1,9502020-03-25 CRITICAL 9.8 CVE-2020-3775 Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful expl… Photoshop 2020 after 21.1 Fix from $2,3002020-03-25 CRITICAL 9.8 CVE-2020-10848 An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos 9810 chipsets) software. Arbitrary memory mapping exists i… Android Mitigation only Fix from $2,3002020-03-24 HIGH 7.1 CVE-2020-3264 A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The … Sd Wan Firmware 18.4.5 / 19.2.2+ Fix from $1,9502020-03-19 CRITICAL 9.8 CVE-2020-5542 Buffer error vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and ea… Iu1 1m20 D Firmware after 1.0.7 Fix from $2,3002020-03-16 HIGH 7.8 CVE-2020-10565 grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command (read_* or… FreeBSD 525916_2020-02-12+ Fix from $1,9502020-03-14 CRITICAL 10.0 CVE-2020-0796 KEVEPSS 100% A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka … Windows 10 1903 Patch available Fix from $2,3002020-03-12 HIGH 7.8 CVE-2020-0033 In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502020-03-10 HIGH 8.1 CVE-2020-5254 In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue. Nethack 3.6.6+ Fix from $1,9502020-03-10 HIGH 8.8 CVE-2020-3846 A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3… Icloud 6.1.2 / 7.17+ Fix from $1,9502020-02-27 HIGH 7.8 CVE-2020-3840 An off by one issue existed in the handling of racoon configuration files. This issue was addressed through improved bounds checking. This issue is f… Ipados 10.15.3 / 13.3.1+ Fix from $1,9502020-02-27 CRITICAL 10.0 CVE-2015-0565EPSS 14% NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible. Native Client Mitigation only Fix from $2,3002020-02-25 MEDIUM 5.5 CVE-2016-3182 The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via … Openjpeg 2.1.1+ Fix from $1,6002020-02-20 MEDIUM 5.3 CVE-2020-1814 Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600,… Nip6800 Firmware Mitigation only Fix from $1,6002020-02-18 HIGH 7.5 CVE-2014-3208 A Denial of Service vulnerability exists in askpop3d 0.7.7 in free (pszQuery), Askpop3d Mitigation only Fix from $1,9502020-02-13 CRITICAL 9.8 CVE-2020-3752EPSS 5% Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier … Acrobat Dc after 19.021.20061 Fix from $2,3002020-02-13 CRITICAL 9.8 CVE-2020-3754 Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier … Acrobat Dc after 19.021.20061 Fix from $2,3002020-02-13 MEDIUM 5.5 CVE-2020-0020 In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect bounds ch… Android Patch available Fix from $1,6002020-02-13 HIGH 7.8 CVE-2019-17135EPSS 5% This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is r… Phantompdf Mitigation only Fix from $1,9502020-02-08 HIGH 7.8 CVE-2014-9630 The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a stack-allocation approach with… Vlc Media Player 2.1.6+ Fix from $1,9502020-01-24 MEDIUM 6.5 CVE-2019-20391 An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used insid… Libyang Patch available Fix from $1,6002020-01-22 MEDIUM 6.5 CVE-2019-20392 An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used insid… Libyang Patch available Fix from $1,6002020-01-22 MEDIUM 6.5 CVE-2019-20396 A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing. Libyang Patch available Fix from $1,6002020-01-22 CRITICAL 9.8 CVE-2019-14004 Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… Apq8009 Firmware Patch available Fix from $2,3002020-01-21 CRITICAL 9.8 CVE-2019-14006 Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdrag… Apq8009 Firmware Mitigation only Fix from $2,3002020-01-21 HIGH 7.8 CVE-2013-7185 PotPlayer 1.5.40688: .avi File Memory Corruption Potplayer No fix yet Fix from $1,9502020-01-14