Browse CVEs

HIGH 7.8 CVE-2018-1978 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an … Db2 Patch available Fix from $1,9502019-03-11 HIGH 7.8 CVE-2018-1980 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an … Db2 Patch available Fix from $1,9502019-03-11 HIGH 7.5 CVE-2019-1616 A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a buffer over… Nx Os 6.2 / 7.0+ Fix from $1,9502019-03-11 HIGH 8.1 CVE-2019-9675EPSS 6% An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long… PHP 7.1.27 / 7.3.3+ Fix from $1,9502019-03-11 HIGH 7.8 CVE-2019-1605 A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vul… Nx Os 6.0 / 7.0+ Fix from $1,9502019-03-08 HIGH 7.8 CVE-2017-12447 GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack c… Gdk Pixbuf No fix yet Fix from $1,9502019-03-07 HIGH 8.8 CVE-2019-3712 Dell WES Wyse Device Agent versions prior to 14.1.2.9 and Dell Wyse ThinLinux HAgent versions prior to 5.4.55 00.10 contain a buffer overflow vulnera… Windows Embedded Standard Wyse Device Agent 5.4.55_00.10 / 14.1.2.9+ Fix from $1,9502019-03-07 HIGH 7.8 CVE-2019-9588 There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for e… Xpdfreader No fix yet Fix from $1,9502019-03-06 HIGH 8.8 CVE-2019-0613EPSS 15% A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a fil… .net Framework Patch available Fix from $1,9502019-03-05 HIGH 7.5 CVE-2018-11793 When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 … Mesos 1.4.3 / 1.5.2+ Fix from $1,9502019-03-05 HIGH 8.8 CVE-2019-6224EPSS 9% A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.… Iphone Os 5.1.3 / 10.14.3+ Fix from $1,9502019-03-05 HIGH 7.8 CVE-2019-6213EPSS 5% A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A… Iphone Os 5.1.3 / 10.14.3+ Fix from $1,9502019-03-05 CRITICAL 9.8 CVE-2019-1663EPSS 96% A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, … Rv110w Firmware 1.0.3.45 / 1.2.2.1+ Fix from $2,3002019-02-28 CRITICAL 9.8 CVE-2018-12405 Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence o… Firefox 60.4.0 / 64.0+ Fix from $2,3002019-02-28 HIGH 8.8 CVE-2018-12406 Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption a… Firefox 64.0+ Fix from $1,9502019-02-28 CRITICAL 9.8 CVE-2018-12407 A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, when working with the VertexBu… Firefox 64.0+ Fix from $2,3002019-02-28 CRITICAL 9.8 CVE-2018-18493 A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bi… Firefox 60.4.0 / 64.0+ Fix from $2,3002019-02-28 HIGH 8.8 CVE-2018-12388 Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory corruption a… Firefox 63.0+ Fix from $1,9502019-02-28 HIGH 8.8 CVE-2018-12389 Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corrup… Firefox 60.3.0+ Fix from $1,9502019-02-28 CRITICAL 9.8 CVE-2018-12390 Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence o… Firefox 60.3.0 / 63.0+ Fix from $2,3002019-02-28 MEDIUM 5.3 CVE-2019-3598 Buffer Access with Incorrect Length Value in McAfee Agent (MA) 5.x allows remote unauthenticated users to potentially cause a denial of service via s… Agent after 5.5.2 Fix from $1,6002019-02-28 HIGH 7.8 CVE-2019-5669 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential… Gpu Driver Patch available Fix from $1,9502019-02-27 HIGH 7.8 CVE-2019-5670 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential… Gpu Driver Patch available Fix from $1,9502019-02-27 MEDIUM 6.5 CVE-2018-20797 An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofo_calloc in base/PdfMemoryManagement.cpp w… Podofo No fix yet Fix from $1,6002019-02-27 HIGH 7.8 CVE-2018-11289 Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in Snapdragon A… Ipq8074 Firmware Mitigation only Fix from $1,9502019-02-25 HIGH 7.8 CVE-2018-11938 Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute… Ipq8074 Firmware Mitigation only Fix from $1,9502019-02-25 MEDIUM 5.5 CVE-2018-13912 Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT… Snapdragon Auto Firmware Patch available Fix from $1,6002019-02-25 HIGH 7.8 CVE-2018-13914 Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapd… Snapdragon Auto Firmware Patch available Fix from $1,9502019-02-25 CRITICAL 9.8 CVE-2019-8375EPSS 16% The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script… Ubuntu Linux after 2.23.90 Fix from $2,3002019-02-24 MEDIUM 6.8 CVE-2019-9019 The British Airways Entertainment System, as installed on Boeing 777-36N(ER) and possibly other aircraft, does not prevent the USB charging/data-tran… Entertainment System No fix yet Fix from $1,6002019-02-22