Browse CVEs

MEDIUM 6.5 CVE-2018-20574 The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumpti… Yaml Cpp No fix yet Fix from $1,6002018-12-28 MEDIUM 6.5 CVE-2018-20534 There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties d… Ubuntu Linux after 0.7.2 Fix from $1,6002018-12-28 HIGH 8.8 CVE-2018-20542 There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c (function libxsmm_sparse_csc_reader) in LIBXSMM 1.10, a different vulnerabilit… Libxsmm Patch available Fix from $1,9502018-12-28 HIGH 8.1 CVE-2018-20547 There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data. Ubuntu Linux Patch available Fix from $1,9502018-12-28 HIGH 8.8 CVE-2018-20548 There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data. Ubuntu Linux Patch available Fix from $1,9502018-12-28 CRITICAL 9.8 CVE-2018-19873 An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data. Debian Linux 5.11.3+ Fix from $2,3002018-12-26 HIGH 8.8 CVE-2018-20452 The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (application crash) or po… Libxls No fix yet Fix from $1,9502018-12-25 CRITICAL 9.8 CVE-2018-20248 In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref table pointers or … Quick Pdf Library 16.12+ Fix from $2,3002018-12-24 HIGH 8.8 CVE-2018-20249 In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the … Quick Pdf Library 16.12+ Fix from $1,9502018-12-24 HIGH 7.5 CVE-2018-18959 An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. On the 'Air Print Setting' web page, if the d… Epson Workforce Wf 2861 Firmware No fix yet Fix from $1,9502018-12-24 MEDIUM 6.3 CVE-2018-7796 A Buffer Error vulnerability exists in PowerSuite 2, all released versions (VW3A8104 & Patches), which could cause an overflow in the memcpy function… Powersuite 2 Mitigation only Fix from $1,6002018-12-24 HIGH 7.8 CVE-2018-20331 Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-priv… Anti Virus Lab Atool No fix yet Fix from $1,9502018-12-23 MEDIUM 5.5 CVE-2018-20358 An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio Decoder 2 (FAAD… Freeware Advanced Audio Decoder 2 No fix yet Fix from $1,6002018-12-22 MEDIUM 5.5 CVE-2018-20359 An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2… Freeware Advanced Audio Decoder 2 No fix yet Fix from $1,6002018-12-22 MEDIUM 5.5 CVE-2018-20360 An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (F… Debian Linux 2.9.0+ Fix from $1,6002018-12-22 MEDIUM 5.5 CVE-2018-20361 An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) … Freeware Advanced Audio Decoder 2 No fix yet Fix from $1,6002018-12-22 CRITICAL 9.8 CVE-2018-19240 Buffer overflow in network.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows a… Tv Ip110wn Firmware No fix yet Fix from $2,3002018-12-20 HIGH 7.5 CVE-2018-19241 Buffer overflow in video.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows att… Tv Ip110wn Firmware No fix yet Fix from $1,9502018-12-20 HIGH 8.8 CVE-2018-19242 Buffer overflow in apply.cgi on TRENDnet TEW-632BRP 1.010B32 and TEW-673GRU devices allows attackers to hijack the control flow to any attacker-speci… Tew 632brp Firmware No fix yet Fix from $1,9502018-12-20 MEDIUM 5.5 CVE-2018-1000886 nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering en… Netwide Assembler No fix yet Fix from $1,6002018-12-20 MEDIUM 6.5 CVE-2018-1000880 libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: Improper Input Validation vuln… Ubuntu Linux 3.4.0+ Fix from $1,6002018-12-20 HIGH 7.8 CVE-2018-11986 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFO… Android Patch available Fix from $1,9502018-12-20 HIGH 7.8 CVE-2018-11961 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possibility of accessing out of bound vect… Android Patch available Fix from $1,9502018-12-20 HIGH 7.8 CVE-2018-1771 IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arg… Domino after 9.0.1.10 Fix from $1,9502018-12-20 HIGH 7.8 CVE-2018-5200 KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is t… Kmplayer after 4.2.2.15 Fix from $1,9502018-12-20 MEDIUM 6.5 CVE-2018-20304 wbook_addworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service (SEGV) via a long second argument. NOTE… Libexcel No fix yet Fix from $1,6002018-12-20 CRITICAL 9.8 CVE-2018-20299 An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. A malicio… 360 Indoor Camera Firmware 6.52.4+ Fix from $2,3002018-12-19 HIGH 7.5 CVE-2018-20213 wbook_addworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service (SEGV) via a long name. NOTE: this is n… Libexcel No fix yet Fix from $1,9502018-12-18 MEDIUM 6.3 CVE-2018-14852 Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-… Galaxy S6 Firmware No fix yet Fix from $1,6002018-12-17 MEDIUM 6.3 CVE-2018-14854 Buffer overflow in dhd_bus_flow_ring_delete_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Gala… Galaxy S6 Firmware No fix yet Fix from $1,6002018-12-17