Browse CVEs

HIGH 7.8 CVE-2018-16302 MediaComm Zip-n-Go before 4.95 has a Buffer Overflow via a crafted file. Zip N Go 4.95+ Fix from $1,9502018-09-01 CRITICAL 9.8 CVE-2018-12810EPSS 6% Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability. Successful exploitation could lead … Photoshop Cc after 19.1.5 Fix from $2,3002018-08-29 CRITICAL 9.8 CVE-2018-12811EPSS 6% Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability. Successful exploitation could lead … Photoshop Cc after 19.1.5 Fix from $2,3002018-08-29 MEDIUM 6.5 CVE-2018-15897 PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last… Website Seller Script No fix yet Fix from $1,6002018-08-28 MEDIUM 6.5 CVE-2017-15396 A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior … Chrome 60.2 / 62.0.3202.75+ Fix from $1,6002018-08-28 CRITICAL 9.8 CVE-2017-15398 A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a ma… Chrome 62.0.3202.89+ Fix from $2,3002018-08-28 HIGH 8.8 CVE-2017-15406 A stack buffer overflow in V8 in Google Chrome prior to 62.0.3202.75 allowed a remote attacker to perform an out of bounds memory read via a crafted … Chrome 62.0.3202.75+ Fix from $1,9502018-08-28 MEDIUM 5.3 CVE-2017-15417 Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origi… Chrome 63.0.3239.84+ Fix from $1,6002018-08-28 MEDIUM 6.5 CVE-2017-15416 Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafte… Enterprise Linux Desktop 63.0.3239.84+ Fix from $1,6002018-08-28 MEDIUM 6.5 CVE-2017-15415 Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML pag… Debian Linux 63.0.3239.84+ Fix from $1,6002018-08-28 HIGH 8.8 CVE-2017-15409 Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 63.0.3239.84+ Fix from $1,9502018-08-28 HIGH 8.8 CVE-2017-15408 Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 63.0.3239.84+ Fix from $1,9502018-08-28 CRITICAL 9.8 CVE-2018-15839EPSS 45% D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header. Dir 615 Firmware No fix yet Fix from $2,3002018-08-28 MEDIUM 6.5 CVE-2018-15870 An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentat… Libming 0.4.8+ Fix from $1,6002018-08-25 MEDIUM 6.5 CVE-2018-15871 An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability c… Libming 0.4.8+ Fix from $1,6002018-08-25 MEDIUM 6.5 CVE-2018-15120EPSS 11% libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application cra… Ubuntu Linux after 1.42.3 Fix from $1,6002018-08-24 CRITICAL 9.8 CVE-2017-11563EPSS 5% D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions su… Eyeon Baby Monitor Firmware Mitigation only Fix from $2,3002018-08-24 CRITICAL 9.9 CVE-2018-3872 An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - F… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 MEDIUM 6.5 CVE-2018-1159 Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability. An authenticated remote attacker can crash the HTTP se… Routeros 6.40.9 / 6.42.7+ Fix from $1,6002018-08-23 HIGH 8.8 CVE-2017-14452 An exploitable buffer overflow vulnerability exists in the PubNub message handler for the "control" channel of Insteon Hub running firmware version 1… Hub Firmware No fix yet Fix from $1,9502018-08-23 CRITICAL 9.9 CVE-2018-3905 An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3917 On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" … Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3925 An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 HIGH 8.8 CVE-2017-14453 On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on … Hub 2245 222 Firmware Mitigation only Fix from $1,9502018-08-23 HIGH 8.8 CVE-2017-14455 On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on … Hub 2245 222 Firmware Mitigation only Fix from $1,9502018-08-23 CRITICAL 9.9 CVE-2018-3878 Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 MEDIUM 6.5 CVE-2017-2575 A vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due to missing check of the return value of function mal… Libbpg Mitigation only Fix from $1,6002018-08-22 HIGH 8.8 CVE-2018-10858 A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use th… Debian Linux 4.6.16 / 4.7.9+ Fix from $1,9502018-08-22 HIGH 8.8 CVE-2018-14793 DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to allow arbitra… Deltav Mitigation only Fix from $1,9502018-08-21 CRITICAL 9.8 CVE-2018-1000221 pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can result in dequote() function returns 1-byte allocation … Pkgconf after 1.5.2 Fix from $2,3002018-08-20