Browse CVEs

HIGH 8.8 CVE-2018-5881 Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdrago… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18 HIGH 7.8 CVE-2018-15998 Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier vers… Acrobat Dc after 19.008.20081 Fix from $1,9502019-01-18 HIGH 7.8 CVE-2018-15987 Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier vers… Acrobat Dc after 19.008.20081 Fix from $1,9502019-01-18 CRITICAL 9.8 CVE-2018-4281 In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation. Swiftnio 1.8.0+ Fix from $2,3002019-01-11 HIGH 7.8 CVE-2018-4330 In iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling. Iphone Os 11.4+ Fix from $1,9502019-01-11 HIGH 8.8 CVE-2018-4404EPSS 14% In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling. Iphone Os 10.13.5 / 11.4+ Fix from $1,9502019-01-11 CRITICAL 9.8 CVE-2018-4257 In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation. Mac Os X 10.13.5+ Fix from $2,3002019-01-11 CRITICAL 9.8 CVE-2018-4258 In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking. Mac Os X 10.13.5+ Fix from $2,3002019-01-11 HIGH 8.8 CVE-2018-4262 In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memory corrup… Safari 4.3.2 / 7.6+ Fix from $1,9502019-01-11 CRITICAL 9.8 CVE-2018-4189 In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, watchOS before 4.2.… Apple Tv 4.2.2 / 10.13.3+ Fix from $2,3002019-01-11 HIGH 7.8 CVE-2016-7576 In iOS before 9.3.3, a memory corruption issue existed in the kernel. This issue was addressed through improved memory handling. Iphone Os 9.3.3+ Fix from $1,9502019-01-11 CRITICAL 9.8 CVE-2018-4147 In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multiple memory corruption issues ex… Safari 7.3 / 11.0.3+ Fix from $2,3002019-01-11 HIGH 7.2 CVE-2018-0640 Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date para… Aterm Hc100rc Firmware after 1.0.1 Fix from $1,9502019-01-09 HIGH 7.2 CVE-2018-0641 Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via tools_system.cgi date p… Aterm Hc100rc Firmware after 1.0.1 Fix from $1,9502019-01-09 CRITICAL 9.8 CVE-2018-0651 Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, S… Idefine For Prosafe Rs Firmware Mitigation only Fix from $2,3002019-01-09 CRITICAL 9.8 CVE-2018-0668 Buffer overflow in INplc-RT 3.08 and earlier allows remote attackers to cause denial-of-service (DoS) condition that may result in executing arbtrary… Inplc Rt after 3.08 Fix from $2,3002019-01-09 MEDIUM 6.8 CVE-2018-0678 Buffer overflow in BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to execute arbitrary code via unspecif… Bn Sdwbp3 Firmware after 1.0.9 Fix from $1,6002019-01-09 HIGH 7.2 CVE-2018-0632 Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via HTTP request and respons… Aterm W300p Firmware after 1.0.13 Fix from $1,9502019-01-09 HIGH 7.2 CVE-2018-0633 Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via submit-url parameter. Aterm W300p Firmware after 1.0.13 Fix from $1,9502019-01-09 HIGH 7.4 CVE-2018-17470 A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentiall… Chrome 70.0.3538.67+ Fix from $1,9502019-01-09 HIGH 8.1 CVE-2018-4012 An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The function bc_http_read_hea… Brightcloud No fix yet Fix from $1,9502019-01-03 MEDIUM 5.5 CVE-2018-19523 DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x80002068) with a user defined buffer size. If the s… Driveagent Mitigation only Fix from $1,6002019-01-03 CRITICAL 9.8 CVE-2018-19861EPSS 13% Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request. NOTE: this product is… Minishare after 1.4.1 Fix from $2,3002019-01-03 CRITICAL 9.8 CVE-2018-19862EPSS 13% Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST request. NOTE: this product is… Minishare after 1.4.1 Fix from $2,3002019-01-03 CRITICAL 9.8 CVE-2018-17161 In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r342228), and 12.0-RELEASE-p1, insufficient validation of network-provided data … FreeBSD Patch available Fix from $2,3002019-01-03 HIGH 7.8 CVE-2017-18329 Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640… Mdm9615 Firmware Mitigation only Fix from $1,9502019-01-03 HIGH 7.5 CVE-2018-6337 folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children produ… Folly 3.26.3+ Fix from $1,9502018-12-31 HIGH 8.1 CVE-2018-18601 The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buffer Overf… Gz621w Firmware Mitigation only Fix from $1,9502018-12-31 HIGH 8.8 CVE-2018-20549 There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19. Ubuntu Linux No fix yet Fix from $1,9502018-12-28 MEDIUM 6.5 CVE-2018-20573 The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption… Yaml Cpp No fix yet Fix from $1,6002018-12-28