Browse CVEs

MEDIUM 6.5 CVE-2018-14443 get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV). Libredwg 0.6+ Fix from $1,6002018-07-20 MEDIUM 6.7 CVE-2018-0342 A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbi… Vbond Orchestrator 18.3.0+ Fix from $1,6002018-07-18 HIGH 7.5 CVE-2018-0346 A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial… Vbond Orchestrator 18.3.0+ Fix from $1,9502018-07-18 HIGH 7.8 CVE-2018-0379 Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files… Webex Meetings Online 1.3.35 / 32.15+ Fix from $1,9502018-07-18 MEDIUM 5.5 CVE-2018-7546 wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file. Jinshan Pdf Mitigation only Fix from $1,6002018-07-18 CRITICAL 9.8 CVE-2018-14362 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with m… Ubuntu Linux Patch available Fix from $2,3002018-07-17 HIGH 8.1 CVE-2018-14338 samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not… Exiv2 Patch available Fix from $1,9502018-07-17 CRITICAL 9.8 CVE-2016-6563EPSS 80% Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulner… Dir 823 Firmware No fix yet Fix from $2,3002018-07-13 CRITICAL 9.8 CVE-2016-6559 Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or writ… FreeBSD Mitigation only Fix from $2,3002018-07-13 HIGH 8.8 CVE-2018-10018EPSS 6% The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument. Total Security No fix yet Fix from $1,9502018-07-13 MEDIUM 5.5 CVE-2018-10098 In MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x83002… Escan Internet Security Suite Mitigation only Fix from $1,6002018-07-13 MEDIUM 5.5 CVE-2018-14047 An issue has been found in PNGwriter 0.7.0. It is a SEGV in pngwriter::readfromfile in pngwriter.cc. NOTE: there is a "Warning: PNGwriter was never d… Pngwriter No fix yet Fix from $1,6002018-07-13 MEDIUM 5.5 CVE-2018-14015 The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via… Radare2 after 2.7.0 Fix from $1,6002018-07-12 HIGH 7.5 CVE-2018-13997 Genann through 2018-07-08 has a SEGV in genann_run in genann.c. Genann after 2018-07-08 Fix from $1,9502018-07-12 CRITICAL 9.8 CVE-2017-7467 A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could potentiall… Minicom 2.7.1+ Fix from $2,3002018-07-11 CRITICAL 9.8 CVE-2018-13869 An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c. Hdf5 No fix yet Fix from $2,3002018-07-10 HIGH 8.8 CVE-2018-3628 Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7… Active Management Technology Firmware after 11.22.70 Fix from $1,9502018-07-10 MEDIUM 6.5 CVE-2018-3629 Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, … Active Management Technology Firmware after 11.22.70 Fix from $1,6002018-07-10 MEDIUM 5.5 CVE-2018-10872 A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During th… Enterprise Linux Patch available Fix from $1,6002018-07-10 HIGH 7.5 CVE-2018-13847 An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StcoAtom::AdjustChunkOffsets in Core/Ap4StcoAtom.cpp. Bento4 Mitigation only Fix from $1,9502018-07-10 HIGH 7.5 CVE-2018-13848 An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp. Bento4 No fix yet Fix from $1,9502018-07-10 HIGH 8.8 CVE-2018-4998EPSS 9% Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier have a Memory corruption vul… Acrobat after 18.009.20050 Fix from $1,9502018-07-09 HIGH 7.8 CVE-2018-6857 Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Esca… Safeguard Easy Device Encryption Client Patch available Fix from $1,9502018-07-09 HIGH 7.8 CVE-2018-6851 Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Esca… Safeguard Easy Device Encryption Client Patch available Fix from $1,9502018-07-09 HIGH 7.8 CVE-2018-6852 Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Esca… Safeguard Easy Device Encryption Client Patch available Fix from $1,9502018-07-09 HIGH 7.8 CVE-2018-6853 Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Esca… Safeguard Easy Device Encryption Client Patch available Fix from $1,9502018-07-09 HIGH 7.8 CVE-2018-6854 Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Esca… Safeguard Easy Device Encryption Client Patch available Fix from $1,9502018-07-09 HIGH 7.8 CVE-2018-6855 Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Esca… Safeguard Easy Device Encryption Client Patch available Fix from $1,9502018-07-09 HIGH 7.8 CVE-2018-6856 Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Esca… Safeguard Easy Device Encryption Client Patch available Fix from $1,9502018-07-09 HIGH 7.8 CVE-2018-5858 In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch… Android Mitigation only Fix from $1,9502018-07-06