Browse CVEs

HIGH 8.8 CVE-2018-14290 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is requ… Foxit Reader after 9.1.0.5096 Fix from $1,9502018-07-31 MEDIUM 5.5 CVE-2018-7992 Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0… Mediapad M3 Firmware 8.0.0.356 / 8.0.0.357+ Fix from $1,6002018-07-31 HIGH 7.5 CVE-2016-9597 It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml… Ubuntu Linux Mitigation only Fix from $1,9502018-07-30 HIGH 7.5 CVE-2018-14738 An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_rmessage_message in rmessage.c. Pbc after 2017-03-02 Fix from $1,9502018-07-30 HIGH 7.5 CVE-2018-14739 An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_pattern_set_default in pattern.c. Pbc after 2017-03-02 Fix from $1,9502018-07-30 HIGH 7.5 CVE-2018-14740 An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in set_field_one in bootstrap.c while making a query. Pbc after 2017-03-02 Fix from $1,9502018-07-30 HIGH 7.5 CVE-2018-14741 An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_pattern_pack in pattern.c. Pbc after 2017-03-02 Fix from $1,9502018-07-30 HIGH 7.5 CVE-2018-14742 An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in set_field_one in bootstrap.c during a memcpy. Pbc after 2017-03-02 Fix from $1,9502018-07-30 HIGH 7.5 CVE-2018-14743 An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in wiretype_decode in context.c. Pbc after 2017-03-02 Fix from $1,9502018-07-30 CRITICAL 9.9 CVE-2016-9603 A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a V… Xenserver Mitigation only Fix from $2,3002018-07-27 HIGH 8.8 CVE-2016-9577 A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to th… Debian Linux 0.13.90+ Fix from $1,9502018-07-27 CRITICAL 9.8 CVE-2017-15101 A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a den… Enterprise Linux Desktop 2.5.4+ Fix from $2,3002018-07-27 HIGH 7.5 CVE-2017-2634EPSS 5% It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_h… Linux Kernel 2.6.22.17+ Fix from $1,9502018-07-27 HIGH 8.8 CVE-2017-2630 A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw cou… Qemu 2.9+ Fix from $1,9502018-07-27 MEDIUM 5.5 CVE-2018-14615 An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncate_inline_inode() in fs/f2fs/inline.c when umounting… Linux Kernel after 4.17.10 Fix from $1,6002018-07-27 MEDIUM 5.5 CVE-2018-10881 A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of se… Ubuntu Linux 4.17.6+ Fix from $1,6002018-07-26 CRITICAL 9.8 CVE-2018-10628EPSS 5% AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially… Intouch 2014 Patch available Fix from $2,3002018-07-24 HIGH 8.8 CVE-2018-14586 An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Mpeg2TsAudioSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp, a different v… Bento4 No fix yet Fix from $1,9502018-07-24 HIGH 7.5 CVE-2018-14590 An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Processor::ProcessFragments in Core/Ap4Processor.cpp. Bento4 Mitigation only Fix from $1,9502018-07-24 CRITICAL 9.8 CVE-2017-3223EPSS 5% Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerab… Ip Camera Firmware 2.400.0000.14.r.20170713+ Fix from $2,3002018-07-24 HIGH 8.8 CVE-2018-1999011 FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asf_o format demuxer that can result in hea… Ffmpeg after 4.0.1 Fix from $1,9502018-07-23 CRITICAL 9.8 CVE-2018-14563 An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new[]" in the TaggingLearner class in … Thulac after 2018-02-25 Fix from $2,3002018-07-23 CRITICAL 9.8 CVE-2018-14564 An issue was discovered in libthulac.so in THULAC through 2018-02-25. A SEGV can occur in NGramFeature::find_bases in include/cb_ngram_feature.h. Thulac after 2018-02-25 Fix from $2,3002018-07-23 HIGH 8.8 CVE-2018-14521 An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_readframe in io/source_avcodec.c, as demonstrated by aubiomfc… Aubio No fix yet Fix from $1,9502018-07-23 HIGH 8.8 CVE-2018-14522 An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit in pitch/pitch.c, as demonstrated by aubionotes. Aubio No fix yet Fix from $1,9502018-07-23 CRITICAL 9.8 CVE-2018-14531 An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4_HvccAtom class in Core/Ap4HvccAtom.cpp. Bento4 No fix yet Fix from $2,3002018-07-23 HIGH 8.8 CVE-2018-5043EPSS 9% Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnera… Acrobat Dc after 18.011.20040 Fix from $1,9502018-07-20 HIGH 8.8 CVE-2018-5034EPSS 9% Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnera… Acrobat Dc after 18.011.20040 Fix from $1,9502018-07-20 HIGH 8.8 CVE-2018-5037EPSS 9% Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnera… Acrobat Dc after 18.011.20040 Fix from $1,9502018-07-20 CRITICAL 9.8 CVE-2018-12784EPSS 10% Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnera… Acrobat Dc after 18.011.20040 Fix from $2,3002018-07-20