Browse CVEs

CRITICAL 9.8 CVE-2019-3561 Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory. This affects all supported versions of HHVM… Hhvm after 4.0.3 Fix from $2,3002019-04-29 CRITICAL 9.8 CVE-2019-11577EPSS 53% dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses. Dhcpcd 7.2.1+ Fix from $2,3002019-04-28 HIGH 8.8 CVE-2019-9810EPSS 30% Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This v… Firefox 60.6.1 / 66.0.1+ Fix from $1,9502019-04-26 MEDIUM 5.9 CVE-2019-9793 A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. Th… Firefox 60.6 / 66.0+ Fix from $1,6002019-04-26 HIGH 7.8 CVE-2019-11493 VeryPDF 4.1 has a Memory Overflow leading to Code Execution because pdfocx!CxImageTIF::operator in pdfocx.ocx (used by pdfeditor.exe and pdfcmd.exe) … Verypdf No fix yet Fix from $1,9502019-04-26 HIGH 7.5 CVE-2018-14557 An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9)… Ac7 Firmware after 15.03.06.44_cn Fix from $1,9502019-04-25 HIGH 7.5 CVE-2018-14559 An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9)… Ac7 Firmware after 15.03.06.44_cn Fix from $1,9502019-04-25 CRITICAL 9.8 CVE-2018-19442EPSS 8% A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute… Botvac Connected Firmware No fix yet Fix from $2,3002019-04-25 HIGH 8.1 CVE-2018-10055 Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from… Tensorflow 1.7.1+ Fix from $1,9502019-04-24 HIGH 8.8 CVE-2018-8825 Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). Tensorflow after 1.7.0 Fix from $1,9502019-04-23 CRITICAL 9.8 CVE-2019-11418 apply.cgi on the TRENDnet TEW-632BRP 1.010B32 router has a buffer overflow via long strings to the SOAPACTION:HNAP1 interface. Tew 632brp Firmware Mitigation only Fix from $2,3002019-04-22 CRITICAL 9.8 CVE-2018-20818 A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and OpenPLC_v3 versions. It occurs in the modbus.cpp mapU… Openplc V2 Firmware Mitigation only Fix from $2,3002019-04-22 CRITICAL 9.8 CVE-2018-20817 SV_SteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is missing a size check when reading authBlob data into a… Call Of Duty\ No fix yet Fix from $2,3002019-04-19 HIGH 7.5 CVE-2019-10245 In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causi… Satellite 0.14.0+ Fix from $1,9502019-04-19 HIGH 8.8 CVE-2017-7773 Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor. Firefox 1.3.10 / 54.0+ Fix from $1,9502019-04-15 HIGH 8.8 CVE-2017-7777 Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function. Firefox 1.3.10 / 54.0+ Fix from $1,9502019-04-15 HIGH 8.8 CVE-2017-7772 Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function. Firefox 1.3.10 / 54.0+ Fix from $1,9502019-04-12 CRITICAL 9.8 CVE-2017-14199 A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0. Zephyr Patch available Fix from $2,3002019-04-12 CRITICAL 9.8 CVE-2005-3590 The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if … Glibc 2.3.5+ Fix from $2,3002019-04-10 HIGH 7.8 CVE-2018-13918 kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operati… Mdm9150 Firmware Mitigation only Fix from $1,9502019-04-04 HIGH 7.8 CVE-2018-4461 A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS … Iphone Os 5.1.2 / 10.14.2+ Fix from $1,9502019-04-03 HIGH 7.8 CVE-2018-4463 A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2. Mac Os X 10.14.2+ Fix from $1,9502019-04-03 HIGH 8.8 CVE-2018-4464 Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchO… Safari 5.1.2 / 7.9+ Fix from $1,9502019-04-03 HIGH 7.8 CVE-2018-4465 A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 1… Iphone Os 10.14.2 / 12.1.1+ Fix from $1,9502019-04-03 HIGH 8.8 CVE-2018-4441EPSS 13% A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, … Safari 5.1.2 / 7.9+ Fix from $1,9502019-04-03 HIGH 8.8 CVE-2018-4442EPSS 6% A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, … Safari 5.1.2 / 7.9+ Fix from $1,9502019-04-03 HIGH 8.8 CVE-2018-4443EPSS 6% A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, … Safari 5.1.2 / 7.9+ Fix from $1,9502019-04-03 HIGH 7.8 CVE-2018-4447 A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS … Iphone Os 5.1.2 / 10.14.2+ Fix from $1,9502019-04-03 HIGH 7.8 CVE-2018-4449 A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2. Mac Os X 10.14.2+ Fix from $1,9502019-04-03 HIGH 7.8 CVE-2018-4450 A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2. Mac Os X 10.14.2+ Fix from $1,9502019-04-03