Browse CVEs

HIGH 7.8 CVE-2018-15951 Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a buffer errors vulnera… Acrobat Dc after 18.011.20063 Fix from $1,9502018-10-12 HIGH 7.8 CVE-2018-12853 Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a buffer errors vulnera… Acrobat Dc after 18.011.20063 Fix from $1,9502018-10-12 HIGH 7.8 CVE-2018-12855 Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a buffer errors vulnera… Acrobat Dc after 18.011.20063 Fix from $1,9502018-10-12 MEDIUM 6.5 CVE-2018-12541 In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake,… Vert.x 3.5.4+ Fix from $1,6002018-10-10 HIGH 7.8 CVE-2018-12152 Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 2… Graphics Driver Mitigation only Fix from $1,9502018-10-10 HIGH 7.8 CVE-2018-8423EPSS 33% A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerabi… Windows 10 Patch available Fix from $1,9502018-10-10 CRITICAL 9.8 CVE-2018-7631 Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leading "/" an… Epicentro No fix yet Fix from $2,3002018-10-09 HIGH 7.5 CVE-2018-7632 Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with… Epicentro No fix yet Fix from $1,9502018-10-09 HIGH 7.5 CVE-2018-17962 Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used. Ubuntu Linux No fix yet Fix from $1,9502018-10-09 HIGH 8.8 CVE-2018-18193 An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big pWavePoolTable heap request) in DLS::File::File in DLS.cpp. Libgig No fix yet Fix from $1,9502018-10-09 CRITICAL 9.8 CVE-2018-18197 An issue was discovered in libgig 4.1.0. There is an operator new[] failure (due to a big pSampleLoops heap request) in DLS::Sampler::Sampler in DLS.… Libgig No fix yet Fix from $2,3002018-10-09 CRITICAL 9.8 CVE-2018-1000804EPSS 6% contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query Language) database engine that can result in Attacker can perfor… Contiki Ng Patch available Fix from $2,3002018-10-08 HIGH 8.6 CVE-2018-0470 A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on… Ios Xe Mitigation only Fix from $1,9502018-10-05 HIGH 8.1 CVE-2018-0423EPSS 7% A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, … Rv110w Firmware Mitigation only Fix from $1,9502018-10-05 HIGH 7.5 CVE-2018-17540 The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate. Debian Linux 5.7.1+ Fix from $1,9502018-10-03 HIGH 7.6 CVE-2017-7908 A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML f… Proessentials after 5 Fix from $1,9502018-10-02 HIGH 7.8 CVE-2018-9515 In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation … Android No fix yet Fix from $1,9502018-10-02 HIGH 7.8 CVE-2018-3984 An exploitable uninitialized length vulnerability exists within the Word document-parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specia… Atlantis Word Processor No fix yet Fix from $1,9502018-10-01 CRITICAL 9.8 CVE-2018-14794 Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the… Alpha5 Smart Loader Firmware after 3.7 Fix from $2,3002018-10-01 CRITICAL 9.8 CVE-2018-14802 Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does… Frenic Loader 3.3 Firmware Mitigation only Fix from $2,3002018-10-01 HIGH 7.5 CVE-2018-17847 The html package (aka x/net/html) through 2018-09-25 in Go mishandles <svg><template><desc><t><svg></template>, leading to a "panic: runtime error" (… Net after 2018-09-25 Fix from $1,9502018-10-01 HIGH 8.8 CVE-2018-16711 IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to sen… Advanced Systemcare after 1.2.0.5 Fix from $1,9502018-09-26 MEDIUM 6.5 CVE-2018-16713 IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to sen… Advanced Systemcare after 1.2.0.5 Fix from $1,6002018-09-26 MEDIUM 6.5 CVE-2018-6038 Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted… Chrome 64.0.3282.119+ Fix from $1,6002018-09-25 HIGH 7.8 CVE-2018-17407 An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling … Ubuntu Linux 2018-09-21+ Fix from $1,9502018-09-23 MEDIUM 5.5 CVE-2018-17358 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exist… Binutils No fix yet Fix from $1,6002018-09-23 MEDIUM 5.5 CVE-2018-17359 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exist… Binutils No fix yet Fix from $1,6002018-09-23 CRITICAL 9.9 CVE-2018-3873 An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Fir… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-09-21 CRITICAL 9.9 CVE-2018-3874 An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Fir… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-09-21 CRITICAL 9.9 CVE-2018-3877 An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Fir… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-09-21