Browse CVEs

MEDIUM 6.5 CVE-2017-13758 In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c. Imagemagick Patch available Fix from $1,6002017-08-29 MEDIUM 5.5 CVE-2017-13760 In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_read() in tsk/img/img_io.c in libtskimg.a. Debian Linux No fix yet Fix from $1,6002017-08-29 HIGH 7.5 CVE-2014-9497 Buffer overflow in mpg123 before 1.18.0. Mpg123 after 1.17.0 Fix from $1,9502017-08-29 CRITICAL 9.8 CVE-2017-12865EPSS 6% Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbit… Debian Linux after 1.34 Fix from $2,3002017-08-29 CRITICAL 9.8 CVE-2015-8299EPSS 6% Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute arbitrary code via a crafted … Ets No fix yet Fix from $2,3002017-08-29 MEDIUM 6.5 CVE-2017-13729 There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack. Ncurses No fix yet Fix from $1,6002017-08-29 MEDIUM 6.5 CVE-2017-13730 There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of servic… Ncurses No fix yet Fix from $1,6002017-08-29 MEDIUM 6.5 CVE-2017-13731 There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service… Ncurses No fix yet Fix from $1,6002017-08-29 MEDIUM 6.5 CVE-2017-13732 There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service att… Ncurses No fix yet Fix from $1,6002017-08-29 MEDIUM 6.5 CVE-2017-13733 There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attac… Ncurses No fix yet Fix from $1,6002017-08-29 MEDIUM 6.5 CVE-2017-13734 There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack. Ncurses Patch available Fix from $1,6002017-08-29 HIGH 8.8 CVE-2017-13739 There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function res… Liblouis Mitigation only Fix from $1,9502017-08-29 HIGH 8.8 CVE-2017-13740 There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to deni… Liblouis Mitigation only Fix from $1,9502017-08-29 MEDIUM 6.5 CVE-2017-13742 There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a r… Liblouis Mitigation only Fix from $1,6002017-08-29 MEDIUM 6.5 CVE-2017-13743 There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service at… Liblouis Mitigation only Fix from $1,6002017-08-29 HIGH 7.8 CVE-2017-12840 A kernel driver, namely DLMFENC.sys, bundled with the DESLock+ client application 4.8.16 and earlier contains a locally exploitable heap based buffer… Deslock\+ after 4.8.16 Fix from $1,9502017-08-28 MEDIUM 6.5 CVE-2017-12919 Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a c… Libfpx Mitigation only Fix from $1,6002017-08-28 CRITICAL 9.8 CVE-2015-1430 Buffer overflow in xymon 4.3.17-1. Xymon No fix yet Fix from $2,3002017-08-28 CRITICAL 9.8 CVE-2017-8380 Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors. Qemu Patch available Fix from $2,3002017-08-28 HIGH 7.8 CVE-2015-0114 Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1. I Access For Windows Patch available Fix from $1,9502017-08-28 CRITICAL 9.8 CVE-2017-12707 A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. Opening a maliciously crafted h… Scada Microbrowser after 1.6.30.144 Fix from $2,3002017-08-25 CRITICAL 9.8 CVE-2014-7859EPSS 21% Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before … Dns 322l Firmware after 2.00b07 Fix from $2,3002017-08-25 CRITICAL 9.8 CVE-2015-1801 The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to cause a denial of service (memory cor… Galaxy S4 Firmware Mitigation only Fix from $2,3002017-08-24 MEDIUM 6.5 CVE-2015-7896EPSS 7% LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via… Samsung Mobile No fix yet Fix from $1,6002017-08-24 MEDIUM 6.5 CVE-2017-13140 In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of servi… Imagemagick after 6.9.9-0 Fix from $1,6002017-08-23 CRITICAL 9.8 CVE-2017-12785EPSS 16% The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a… Noviware after 400.2.6 Fix from $2,3002017-08-22 CRITICAL 9.8 CVE-2017-12786EPSS 25% Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwi… Noviware after 400.2.6 Fix from $2,3002017-08-22 CRITICAL 9.8 CVE-2017-12787EPSS 25% A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on Novi… Noviware after 400.2.6 Fix from $2,3002017-08-22 MEDIUM 6.5 CVE-2017-13063 GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12. Debian Linux Mitigation only Fix from $1,6002017-08-22 MEDIUM 6.5 CVE-2017-13064 GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12. Debian Linux Mitigation only Fix from $1,6002017-08-22