Browse CVEs

CRITICAL 9.8 CVE-2015-3166 The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does no… PostgreSQL 9.0.20 / 9.1.16+ Fix from $2,3002019-11-20 CRITICAL 9.8 CVE-2013-7087 ClamAV before 0.97.7 has WWPack corrupt heap memory Debian Linux 0.97.7+ Fix from $2,3002019-11-15 MEDIUM 6.7 CVE-2019-0151 Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to po… Xeon E 2276m Firmware Mitigation only Fix from $1,6002019-11-14 MEDIUM 6.7 CVE-2019-0152 Insufficient memory protection in System Management Mode (SMM) and Intel(R) TXT for certain Intel(R) Xeon(R) Processors may allow a privileged user t… Xeon Platinum 8253 Firmware Mitigation only Fix from $1,6002019-11-14 MEDIUM 5.5 CVE-2019-2275 While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoke… Mdm9150 Firmware Mitigation only Fix from $1,6002019-11-06 CRITICAL 9.8 CVE-2019-2324 When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapd… Mdm9150 Firmware Patch available Fix from $2,3002019-11-06 CRITICAL 9.8 CVE-2019-10541 Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapd… Mdm9206 Firmware Mitigation only Fix from $2,3002019-11-06 HIGH 7.8 CVE-2019-10502 Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Msm8909w Firmware Patch available Fix from $1,9502019-11-06 HIGH 7.8 CVE-2017-5332 The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cau… Enterprise Linux Patch available Fix from $1,9502019-11-04 CRITICAL 9.8 CVE-2013-2739 MiniDLNA has heap-based buffer overflow Debian Linux 1.1.0+ Fix from $2,3002019-11-01 CRITICAL 9.8 CVE-2019-13508 FreeTDS through 1.1.11 has a Buffer Overflow. Ubuntu Linux after 1.1.11 Fix from $2,3002019-10-31 MEDIUM 5.3 CVE-2010-0749 Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame. Debian Linux 1.92+ Fix from $1,6002019-10-30 HIGH 7.8 CVE-2017-5731 Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local a… Edk2 2017-11-07+ Fix from $1,9502019-10-28 CRITICAL 9.8 CVE-2017-14742 Buffer overflow in LabF nfsAxe FTP client 3.7 allows an attacker to execute code remotely. Nfsaxe No fix yet Fix from $2,3002019-10-25 CRITICAL 9.8 CVE-2019-11933 A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attac… Libpl Droidsonroids Gif 1.2.19 / 2.19.291+ Fix from $2,3002019-10-23 CRITICAL 9.8 CVE-2019-8205 Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, a… Acrobat Dc 15.006.30504 / 17.011.30150+ Fix from $2,3002019-10-17 CRITICAL 9.8 CVE-2019-8195EPSS 23% Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, a… Acrobat Dc 15.006.30504 / 17.011.30150+ Fix from $2,3002019-10-17 CRITICAL 9.8 CVE-2019-8196EPSS 23% Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, a… Acrobat Dc 15.006.30504 / 17.011.30150+ Fix from $2,3002019-10-17 HIGH 8.8 CVE-2019-8174 Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, a… Acrobat Dc 15.006.30504 / 17.011.30150+ Fix from $1,9502019-10-17 HIGH 8.0 CVE-2019-15249 Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary… Spa112 Firmware 1.4.1+ Fix from $1,9502019-10-16 HIGH 8.0 CVE-2019-15250 Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary… Spa112 Firmware 1.4.1+ Fix from $1,9502019-10-16 HIGH 8.0 CVE-2019-15251 Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary… Spa112 Firmware 1.4.1+ Fix from $1,9502019-10-16 HIGH 8.0 CVE-2019-15252 Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary… Spa112 Firmware 1.4.1+ Fix from $1,9502019-10-16 HIGH 8.0 CVE-2019-15240 Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary… Spa112 Firmware 1.4.1+ Fix from $1,9502019-10-16 HIGH 8.0 CVE-2019-15241 Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary… Spa112 Firmware 1.4.1+ Fix from $1,9502019-10-16 HIGH 8.0 CVE-2019-15242 Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary… Spa112 Firmware 1.4.1+ Fix from $1,9502019-10-16 HIGH 8.0 CVE-2019-15243 Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary… Spa112 Firmware 1.4.1+ Fix from $1,9502019-10-16 HIGH 8.0 CVE-2019-15244 Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary… Spa112 Firmware 1.4.1+ Fix from $1,9502019-10-16 HIGH 8.0 CVE-2019-15245 Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary… Spa112 Firmware 1.4.1+ Fix from $1,9502019-10-16 HIGH 8.0 CVE-2019-15246 Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary… Spa112 Firmware 1.4.1+ Fix from $1,9502019-10-16