Browse CVEs

HIGH 8.8 CVE-2018-1000223 soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() that c… Soundtouch after 2.0.0 Fix from $1,9502018-08-20 HIGH 7.8 CVE-2018-1000657 Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later con… Rust 1.22.0+ Fix from $1,9502018-08-20 HIGH 7.8 CVE-2018-1000637 zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary… Debian Linux after 1.8 Fix from $1,9502018-08-20 CRITICAL 9.8 CVE-2018-15353EPSS 8% A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftway 24F2XG Router firmware 3.5.30.1118. 24f2xg Router Firmware after 3.5.30.1118 Fix from $2,3002018-08-17 HIGH 7.5 CVE-2018-15354 A Buffer Overflow exploited through web interface by remote attacker can cause denial of service in Kraftway 24F2XG Router firmware 3.5.30.1118. 24f2xg Router Firmware after 3.5.30.1118 Fix from $1,9502018-08-17 HIGH 8.8 CVE-2018-10873 A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds check… Debian Linux Patch available Fix from $1,9502018-08-17 MEDIUM 6.8 CVE-2018-14779 A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `yk… Piv Manager 1.4.2 / 1.6.0+ Fix from $1,6002018-08-15 HIGH 7.5 CVE-2018-15172EPSS 8% TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header. Tl Wr840n Firmware No fix yet Fix from $1,9502018-08-15 HIGH 7.8 CVE-2018-5925EPSS 11% A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stati… T8x44 Firmware No fix yet Fix from $1,9502018-08-13 CRITICAL 9.8 CVE-2018-6414 A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected dev… Ip Cameras Mitigation only Fix from $2,3002018-08-13 MEDIUM 6.5 CVE-2018-15191 PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last … Hotel Booking Script No fix yet Fix from $1,6002018-08-10 MEDIUM 6.5 CVE-2018-15188 PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript … Advanced Real Estate Script No fix yet Fix from $1,6002018-08-10 HIGH 7.8 CVE-2018-0429 Stack-based buffer overflow in the Cisco Thor decoder before commit 18de8f9f0762c3a542b1122589edb8af859d9813 allows local users to cause a denial of … Thor Video Codec 2018-8-8+ Fix from $1,9502018-08-09 HIGH 7.8 CVE-2018-15175 XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at Qt5Core!QVariant::~QVariant+0x0000000000000014 and a… Xnview No fix yet Fix from $1,9502018-08-08 HIGH 7.8 CVE-2018-15176 XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at MSVCR120!memcpy+0x0000000000000074 and application c… Xnview No fix yet Fix from $1,9502018-08-08 HIGH 7.8 CVE-2018-15174 XnView 2.45 allows remote attackers to cause a denial of service (Read Access Violation at the Instruction Pointer and application crash) or possibly… Xnview No fix yet Fix from $1,9502018-08-08 HIGH 7.5 CVE-2017-9003 Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time an… Arubaos Mitigation only Fix from $1,9502018-08-06 CRITICAL 9.8 CVE-2016-4402EPSS 16% A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely t… Keyview 11.2+ Fix from $2,3002018-08-06 CRITICAL 9.8 CVE-2016-4403EPSS 14% A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely t… Keyview 11.2+ Fix from $2,3002018-08-06 CRITICAL 9.8 CVE-2016-4404EPSS 15% A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely t… Keyview 11.2+ Fix from $2,3002018-08-06 HIGH 7.7 CVE-2017-14447 An exploitable buffer overflow vulnerability exists in the PubNub message handler for the 'ad' channel of Insteon Hub running firmware version 1012. … Hub Firmware No fix yet Fix from $1,9502018-08-06 CRITICAL 9.8 CVE-2018-14939 The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environments such as… Libreoffice after 6.0.5 Fix from $2,3002018-08-05 HIGH 8.8 CVE-2018-14946 An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routines (malloc versus operator d… Pdf2json No fix yet Fix from $1,9502018-08-05 HIGH 8.8 CVE-2018-14947 An issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched Memory Management Routines (operator new [] versus opera… Pdf2json No fix yet Fix from $1,9502018-08-05 HIGH 7.8 CVE-2018-14948 An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memory Management Routines (operato… Sound after 2017-11-27 Fix from $1,9502018-08-05 CRITICAL 9.9 CVE-2017-14444 An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles … Hub Firmware No fix yet Fix from $2,3002018-08-02 CRITICAL 9.8 CVE-2015-9262EPSS 6% _XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a… Debian Linux 1.1.15+ Fix from $2,3002018-08-01 HIGH 7.8 CVE-2016-8654 A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before… Debian Linux 2.0.0+ Fix from $1,9502018-08-01 HIGH 8.8 CVE-2018-3670 Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administra… Intel Smart Sound Technology 9.21.00.3541+ Fix from $1,9502018-08-01 HIGH 8.8 CVE-2016-9581 An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2. Openjpeg Patch available Fix from $1,9502018-08-01