Browse CVEs

HIGH 7.8 CVE-2017-14690 STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting A… Stdu Viewer Mitigation only Fix from $1,9502017-09-22 HIGH 7.8 CVE-2017-14691 STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data… Stdu Viewer Mitigation only Fix from $1,9502017-09-22 HIGH 7.8 CVE-2017-14692 STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV… Stdu Viewer Mitigation only Fix from $1,9502017-09-22 HIGH 7.8 CVE-2017-14693 IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "… Irfanview Mitigation only Fix from $1,9502017-09-22 CRITICAL 9.8 CVE-2017-14637 In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal addre… Sam2p No fix yet Fix from $2,3002017-09-22 HIGH 7.8 CVE-2017-14685 Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data … Mupdf No fix yet Fix from $1,9502017-09-22 HIGH 7.8 CVE-2017-14686 Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV … Mupdf No fix yet Fix from $1,9502017-09-22 HIGH 7.8 CVE-2017-14687 Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data … Mupdf No fix yet Fix from $1,9502017-09-22 HIGH 8.8 CVE-2017-14682 GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and applicat… Imagemagick Patch available Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-10997 In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption… Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-10998 In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffer length, which is user input… Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-10999 In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in ipa wan dr… Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-11000 In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check ma… Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.0 CVE-2017-8280 In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there … Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-9677 In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, variable "ddp->params_length" cou… Android after 8.0 Fix from $1,9502017-09-21 HIGH 8.8 CVE-2017-14160 The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and … Debian Linux Mitigation only Fix from $1,9502017-09-21 CRITICAL 9.8 CVE-2017-14628 In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp. Sam2p No fix yet Fix from $2,3002017-09-21 CRITICAL 9.8 CVE-2017-14631 In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow. Sam2p No fix yet Fix from $2,3002017-09-21 CRITICAL 9.8 CVE-2017-14632EPSS 6% Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi… Debian Linux Mitigation only Fix from $2,3002017-09-21 MEDIUM 6.5 CVE-2017-6720 A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker t… Sf302 08pp Firmware 1.4.8.06+ Fix from $1,6002017-09-21 HIGH 7.5 CVE-2017-12837EPSS 6% Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to… Perl after 5.24.2 Fix from $1,9502017-09-19 CRITICAL 9.1 CVE-2017-12883EPSS 6% Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disc… Perl after 5.24.2 Fix from $2,3002017-09-19 HIGH 7.5 CVE-2017-14033EPSS 8% The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of… Ruby Patch available Fix from $1,9502017-09-19 HIGH 7.5 CVE-2015-0689 Cisco Cloud Web Security before 3.0.1.7 allows remote attackers to bypass intended filtering protection mechanisms by leveraging improper handling of… Cloud Web Security after 3.0.1.2 Fix from $1,9502017-09-19 HIGH 7.8 CVE-2017-14561 STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instructi… Stdu Viewer Mitigation only Fix from $1,9502017-09-18 HIGH 7.8 CVE-2017-14562 STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to an "E… Stdu Viewer Mitigation only Fix from $1,9502017-09-18 HIGH 7.8 CVE-2017-14563 STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violat… Stdu Viewer Mitigation only Fix from $1,9502017-09-18 HIGH 7.8 CVE-2017-14564 STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data… Stdu Viewer Mitigation only Fix from $1,9502017-09-18 HIGH 7.8 CVE-2017-14565 STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Po… Stdu Viewer Mitigation only Fix from $1,9502017-09-18 HIGH 7.8 CVE-2017-14566 STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV… Stdu Viewer Mitigation only Fix from $1,9502017-09-18