Browse CVEs

MEDIUM 6.3 CVE-2018-14855 Buffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galax… Galaxy S6 Firmware No fix yet Fix from $1,6002018-12-17 MEDIUM 6.3 CVE-2018-14856 Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Gala… Galaxy S6 Firmware No fix yet Fix from $1,6002018-12-17 CRITICAL 9.8 CVE-2018-19036 An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauth… Common Product Platform 4 Firmware Patch available Fix from $2,3002018-12-17 MEDIUM 5.5 CVE-2018-18096 Improper memory handling in Intel QuickAssist Technology for Linux (all versions) may allow an authenticated user to potentially enable a denial of s… Quickassist Technology For Linux Mitigation only Fix from $1,6002018-12-14 MEDIUM 5.5 CVE-2018-12206 Improper configuration of hardware access in Intel QuickAssist Technology for Linux (all versions) may allow an authenticated user to potentially ena… Quickassist Technology For Linux Mitigation only Fix from $1,6002018-12-14 HIGH 7.8 CVE-2018-11463 A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4… Sinumerik 808d V4.7 Firmware after 4.8 Fix from $1,9502018-12-12 MEDIUM 6.5 CVE-2018-20097 There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote… Debian Linux Patch available Fix from $1,6002018-12-12 HIGH 8.8 CVE-2017-16909 An error related to the "LibRaw::panasonic_load_raw()" function (dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause a hea… Ubuntu Linux 0.18.6+ Fix from $1,9502018-12-07 CRITICAL 9.8 CVE-2018-18314EPSS 6% Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations. Perl 5.26.3+ Fix from $2,3002018-12-07 HIGH 7.8 CVE-2017-14888 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Userspace can pass IEs to the host driver … Android Patch available Fix from $1,9502018-12-07 CRITICAL 9.8 CVE-2018-11905 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in WLAN function … Android Patch available Fix from $2,3002018-12-07 MEDIUM 5.5 CVE-2018-19886 An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The… Freeware Advanced Audio Coder No fix yet Fix from $1,6002018-12-06 MEDIUM 5.5 CVE-2018-19887 An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The… Freeware Advanced Audio Coder No fix yet Fix from $1,6002018-12-06 MEDIUM 5.5 CVE-2018-19888 An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The… Freeware Advanced Audio Coder No fix yet Fix from $1,6002018-12-06 MEDIUM 5.5 CVE-2018-19889 An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The… Freeware Advanced Audio Coder No fix yet Fix from $1,6002018-12-06 MEDIUM 5.5 CVE-2018-19890 An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The… Freeware Advanced Audio Coder No fix yet Fix from $1,6002018-12-06 MEDIUM 5.5 CVE-2018-19891 An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The… Freeware Advanced Audio Coder No fix yet Fix from $1,6002018-12-06 CRITICAL 9.8 CVE-2018-18312EPSS 12% Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. Perl 5.26.3 / 5.28.1+ Fix from $2,3002018-12-05 CRITICAL 9.8 CVE-2018-19864EPSS 25% NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer ov… Nvrmini2 Firmware after 3.9.1 Fix from $2,3002018-12-05 CRITICAL 9.8 CVE-2018-7114EPSS 33% HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. … Intelligent Management Center 7.3+ Fix from $2,3002018-12-03 MEDIUM 5.3 CVE-2018-7115EPSS 13% HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in dbman.exe opcode 10001 on Windo… Intelligent Management Center 7.3+ Fix from $1,6002018-12-03 HIGH 7.5 CVE-2018-7116EPSS 10% HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename… Intelligent Management Center 7.3+ Fix from $1,9502018-12-03 MEDIUM 6.7 CVE-2018-19792 The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service (buffer overflow) or possibly have unspecified… Openlitespeed after 1.4.41 Fix from $1,6002018-12-03 HIGH 7.2 CVE-2018-3951 An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server. A specially craf… Tl R600vpn Firmware No fix yet Fix from $1,9502018-12-01 HIGH 8.8 CVE-2018-18983 VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file (which is already in memory) into another heap-based buffer,… Vt Designer No fix yet Fix from $1,9502018-11-30 CRITICAL 9.8 CVE-2018-14749 Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier v… Qts Mitigation only Fix from $2,3002018-11-28 HIGH 7.8 CVE-2018-11264 Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automo… Mdm9206 Firmware Mitigation only Fix from $1,9502018-11-28 HIGH 7.8 CVE-2018-5870 While loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in versions SD 835, SDA660, SDX24. Sd 835 Firmware Mitigation only Fix from $1,9502018-11-28 HIGH 7.8 CVE-2018-5877 In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdrago… Mdm9206 Firmware Mitigation only Fix from $1,9502018-11-28 HIGH 7.8 CVE-2018-5912 Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996A… Msm8996au Firmware Mitigation only Fix from $1,9502018-11-28