Browse CVEs

CRITICAL 9.8 CVE-2015-3249EPSS 5% The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service (out-of-bounds acces… Traffic Server Mitigation only Fix from $2,3002017-10-30 CRITICAL 9.1 CVE-2017-15597 An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accompanied by a suitable page refer… Xen after 4.9.0 Fix from $2,3002017-10-30 HIGH 7.8 CVE-2017-15996 elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspeci… Binutils Patch available Fix from $1,9502017-10-29 MEDIUM 5.5 CVE-2017-15953 bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE (.cue) file. Debian Linux Patch available Fix from $1,6002017-10-28 MEDIUM 5.5 CVE-2017-15954 bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow (with a resultant invalid free) and crash when processin… Debian Linux Patch available Fix from $1,6002017-10-28 HIGH 7.5 CVE-2017-15938 dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in th… Binutils Patch available Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-13089EPSS 80% The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget b… Debian Linux after 1.19.1 Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-13090EPSS 37% The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser … Debian Linux after 1.19.1 Fix from $1,9502017-10-27 MEDIUM 5.9 CVE-2017-6162 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 1… Big Ip Local Traffic Manager after 11.5.4 Fix from $1,6002017-10-27 MEDIUM 5.9 CVE-2017-6163 In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual… Big Ip Local Traffic Manager after 11.5.4 Fix from $1,6002017-10-27 HIGH 8.8 CVE-2017-5112EPSS 5% Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox… Chrome 61.0.3163.79+ Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5114 Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allo… Chrome 61.0.3163.79 / 61.0.3163.81+ Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5122 Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds… Chrome 61.0.3163.100+ Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5052 An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for And… Chrome 57.0.2987.132 / 57.0.2987.133+ Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5064 Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap c… Chrome 58.0.3029.81+ Fix from $1,9502017-10-27 HIGH 7.8 CVE-2017-12705 A Heap-Based Buffer Overflow issue was discovered in Advantech WebOP. A maliciously crafted project file may be able to trigger a heap-based buffer o… Webop Mitigation only Fix from $1,9502017-10-25 HIGH 8.8 CVE-2017-13772EPSS 53% Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary co… Wr940n Firmware No fix yet Fix from $1,9502017-10-23 HIGH 7.5 CVE-2017-14328 Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot. Extremexos Mitigation only Fix from $1,9502017-10-23 HIGH 8.8 CVE-2017-7117EPSS 10% An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected.… Safari after 12.6.2 Fix from $1,9502017-10-23 HIGH 8.8 CVE-2017-7120 An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected.… Safari after 12.6.2 Fix from $1,9502017-10-23 HIGH 7.8 CVE-2017-7127 An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. iCloud before 7.0 on Windows is affecte… Iphone Os after 10.12.6 Fix from $1,9502017-10-23 CRITICAL 9.8 CVE-2017-7128 An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS bef… Iphone Os after 10.12.6 Fix from $2,3002017-10-23 CRITICAL 9.8 CVE-2017-7129 An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS bef… Iphone Os after 10.12.6 Fix from $2,3002017-10-23 CRITICAL 9.8 CVE-2017-7130 An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS bef… Iphone Os after 10.12.6 Fix from $2,3002017-10-23 HIGH 7.8 CVE-2017-7134 An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to… Xcode after 8.3.3 Fix from $1,9502017-10-23 HIGH 7.8 CVE-2017-7135 An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to… Xcode after 8.3.3 Fix from $1,9502017-10-23 HIGH 7.8 CVE-2017-7136 An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to… Xcode after 8.3.3 Fix from $1,9502017-10-23 HIGH 7.8 CVE-2017-7137 An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to… Xcode after 8.3.3 Fix from $1,9502017-10-23 HIGH 8.8 CVE-2017-7091 An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected.… Safari after 12.6.2 Fix from $1,9502017-10-23 HIGH 8.8 CVE-2017-7092EPSS 5% An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected.… Safari after 12.6.2 Fix from $1,9502017-10-23