Browse CVEs

HIGH 7.8 CVE-2017-9694 While parsing Netlink attributes in QCA_WLAN_VENDOR_ATTR_EXTSCAN_BSSID_HOTLIST_PARAMS_LOST_AP_SAMPLE_SIZE in qcacld 2.0 before 2017-05-16, a buffer o… Qcacld 2.0 4.5.40.004+ Fix from $1,9502018-03-30 HIGH 7.8 CVE-2017-9723 The touchscreen driver synaptics_dsx in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-05, the size of a stack-allocated buffer … Android Patch available Fix from $1,9502018-03-30 HIGH 7.5 CVE-2017-14875 In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a hea… Android Patch available Fix from $1,9502018-03-30 CRITICAL 9.8 CVE-2017-14883 In the function wma_unified_power_debug_stats_event_handler() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-18, if the value… Android Patch available Fix from $2,3002018-03-30 HIGH 7.8 CVE-2017-15823 In spectral_create_samp_msg() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-11, some values from firmware are not properly v… Android Patch available Fix from $1,9502018-03-30 CRITICAL 9.8 CVE-2017-14912 In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile [VERSION]: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200, SD 210/SD 212/SD 2… Mdm9206 Firmware Mitigation only Fix from $2,3002018-03-30 CRITICAL 9.8 CVE-2018-9139 On Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution in a privileged process via a large fra… Samsung Mobile Mitigation only Fix from $2,3002018-03-30 HIGH 8.0 CVE-2018-0175 KEV Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Soft… iOS after 15.6.3m1 Fix from $1,9502018-03-28 CRITICAL 9.8 CVE-2018-0151 KEVEPSS 14% A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote atta… Ios Xe Mitigation only Fix from $2,3002018-03-28 HIGH 8.8 CVE-2018-0167 KEV Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisc… iOS 5.1.3+ Fix from $1,9502018-03-28 HIGH 7.8 CVE-2018-1083 Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a sp… Ubuntu Linux after 5.4.1 Fix from $1,9502018-03-28 MEDIUM 5.5 CVE-2018-1091 In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from … Linux Kernel after 4.13.4 Fix from $1,6002018-03-27 HIGH 7.5 CVE-2018-1205 Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially… Emc Scaleio 2.5+ Fix from $1,9502018-03-27 HIGH 7.8 CVE-2017-6278 NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or… Jetson Tx1 Firmware after 28.1 Fix from $1,9502018-03-26 MEDIUM 5.9 CVE-2018-1301EPSS 15% A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is re… HTTP Server after 2.4.29 Fix from $1,6002018-03-26 MEDIUM 6.5 CVE-2018-8977 In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote attackers to cause a denial of service (invalid memory … Exiv2 Patch available Fix from $1,6002018-03-25 MEDIUM 6.5 CVE-2017-18243 The unpack_parse_unit function in libavcodec/dirac_parser.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault) v… Libav Mitigation only Fix from $1,6002018-03-22 CRITICAL 9.8 CVE-2018-0541 Buffer overflow in Tiny FTP Daemon Ver0.52d allows an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code via unspecified… Tinyftp No fix yet Fix from $2,3002018-03-22 MEDIUM 5.5 CVE-2018-1427 IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker could overflow… Db2 Mitigation only Fix from $1,6002018-03-22 HIGH 7.8 CVE-2018-8882 Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read in the function ieee_shr in asm/float.c via a large shift value. Netwide Assembler Mitigation only Fix from $1,9502018-03-20 HIGH 7.8 CVE-2014-1215 Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from confi… Core Ftp after 1.2 Fix from $1,9502018-03-20 HIGH 7.8 CVE-2018-8822 Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in the Linux kernel through 4.15.11, and in drivers/stag… Linux Kernel 3.2.102 / 3.16.57+ Fix from $1,9502018-03-20 MEDIUM 5.3 CVE-2018-7511 In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow which, in turn, may… Elcsoft 2.04.02+ Fix from $1,6002018-03-20 CRITICAL 9.8 CVE-2018-7445 KEVEPSS 61% A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to th… Routeros 6.41.3+ Fix from $2,3002018-03-19 HIGH 7.5 CVE-2018-1218EPSS 14% In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the 'nsrd' daemon causes a buffer … Emc Networker 8.2.4.11 / 9.1.1.6+ Fix from $1,9502018-03-19 HIGH 7.8 CVE-2017-18061 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, potential buffer overflow can happen … Android Patch available Fix from $1,9502018-03-16 HIGH 7.8 CVE-2017-18062 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, potential buffer overflow can happen … Android Patch available Fix from $1,9502018-03-16 HIGH 7.0 CVE-2017-11082 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in a firmware… Android Patch available Fix from $1,9502018-03-16 HIGH 7.8 CVE-2017-14887 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of messages of type… Android Patch available Fix from $1,9502018-03-16 HIGH 7.8 CVE-2017-15830 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper ch_list array index initiali… Android Patch available Fix from $1,9502018-03-16