Browse CVEs

CRITICAL 9.8 CVE-2016-5179 Chrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot. Chrome Os 53.0.2785.144+ Fix from $2,3002018-03-07 HIGH 7.8 CVE-2018-1000100 GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avc_ext.c lines 2417 to 2420 that can result in Heap c… Ubuntu Linux after 0.7.1 Fix from $1,9502018-03-06 MEDIUM 6.5 CVE-2018-7725 An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability c… Ubuntu Linux No fix yet Fix from $1,6002018-03-06 MEDIUM 6.5 CVE-2018-7726 An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverag… Ubuntu Linux No fix yet Fix from $1,6002018-03-06 MEDIUM 5.5 CVE-2017-17136 PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; … Dp300 Firmware Mitigation only Fix from $1,6002018-03-05 MEDIUM 5.3 CVE-2017-17142 SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC… Dp300 Firmware Mitigation only Fix from $1,6002018-03-05 MEDIUM 5.3 CVE-2017-17143 SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC… Dp300 Firmware Mitigation only Fix from $1,6002018-03-05 MEDIUM 5.3 CVE-2017-17144 Backup feature of SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC5… Dp300 Firmware Mitigation only Fix from $1,6002018-03-05 HIGH 7.5 CVE-2018-5453 An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An… Oncell G3110 Hspa Firmware after 1.4 Fix from $1,9502018-03-05 CRITICAL 9.8 CVE-2018-7648 An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when… Openjpeg Patch available Fix from $2,3002018-03-02 HIGH 7.5 CVE-2017-15134 A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain L… Enterprise Linux 1.3.6.13 / 1.3.7.9+ Fix from $1,9502018-03-01 HIGH 7.8 CVE-2018-7587 An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in load_bmp in CImg.h. Cimg No fix yet Fix from $1,9502018-03-01 CRITICAL 9.8 CVE-2018-7584EPSS 87% In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an … PHP 7.0.28+ Fix from $2,3002018-03-01 CRITICAL 9.8 CVE-2018-7573EPSS 69% An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to c… Ftpshell Client No fix yet Fix from $2,3002018-03-01 CRITICAL 9.8 CVE-2018-7552 There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead t… Debian Linux No fix yet Fix from $2,3002018-02-28 CRITICAL 9.8 CVE-2014-10071 In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax. Ubuntu Linux 5.0.7+ Fix from $2,3002018-02-27 CRITICAL 9.8 CVE-2014-10072 In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links. Zsh 5.0.6+ Fix from $2,3002018-02-27 CRITICAL 9.8 CVE-2017-18206 In utils.c in zsh before 5.4, symlink expansion had a buffer overflow. Ubuntu Linux 5.4+ Fix from $2,3002018-02-27 CRITICAL 9.8 CVE-2018-6481EPSS 21% A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sendin… Disksavvy No fix yet Fix from $2,3002018-02-27 CRITICAL 9.8 CVE-2018-7485 The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to caus… Unixodbc Patch available Fix from $2,3002018-02-26 MEDIUM 6.5 CVE-2018-7470 An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service … Imagemagick No fix yet Fix from $1,6002018-02-25 HIGH 7.8 CVE-2017-14884 In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable "data_len" from the fu… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-17767 In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component and then … Android Mitigation only Fix from $1,9502018-02-23 HIGH 8.8 CVE-2018-7339 The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers … Mp4v2 after 2.0.0 Fix from $1,9502018-02-23 CRITICAL 9.8 CVE-2018-7409 In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c. Unixodbc 2.3.5+ Fix from $2,3002018-02-22 MEDIUM 5.5 CVE-2017-18193 fs/f2fs/extent_cache.c in the Linux kernel before 4.13 mishandles extent trees, which allows local users to cause a denial of service (BUG) via an ap… Linux Kernel 4.13+ Fix from $1,6002018-02-22 HIGH 7.5 CVE-2018-7284EPSS 58% A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.1… Debian Linux after 15.2.1 Fix from $1,9502018-02-22 HIGH 7.5 CVE-2018-0204 A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a deni… Prime Collaboration Provisioning Mitigation only Fix from $1,9502018-02-22 MEDIUM 5.9 CVE-2015-5314 The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough fo… Debian Linux 2.6+ Fix from $1,6002018-02-21 MEDIUM 5.9 CVE-2015-5315 The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for … Debian Linux 2.6+ Fix from $1,6002018-02-21