Browse CVEs

CRITICAL 9.8 CVE-2017-12424 In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may l… Debian Linux 4.5+ Fix from $2,3002017-08-04 CRITICAL 9.8 CVE-2017-11721 Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified o… Ioquake3 after 2017-07-31 Fix from $2,3002017-08-03 MEDIUM 6.8 CVE-2017-2282 Buffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors. Wn Ax1167gr Firmware Mitigation only Fix from $1,6002017-08-02 MEDIUM 5.5 CVE-2017-12141 In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denia… Ytnef Patch available Fix from $1,6002017-08-02 HIGH 7.8 CVE-2017-8663EPSS 20% Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a remote… Outlook Patch available Fix from $1,9502017-08-01 MEDIUM 6.5 CVE-2017-11552EPSS 7% mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service (m… Mad Libmad No fix yet Fix from $1,6002017-08-01 MEDIUM 5.5 CVE-2017-11548 The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a c… Libao No fix yet Fix from $1,6002017-07-31 MEDIUM 5.5 CVE-2017-11551 The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file. Libid3tag Mitigation only Fix from $1,6002017-07-31 MEDIUM 5.5 CVE-2017-11115 The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-base… Openexif No fix yet Fix from $1,6002017-07-31 MEDIUM 5.5 CVE-2017-11331 The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error)… Vorbis Tools No fix yet Fix from $1,6002017-07-31 MEDIUM 5.5 CVE-2017-11732 A heap-based buffer overflow vulnerability was found in the function dcputs (called from decompileIMPLEMENTS) in util/decompile.c in Ming 0.4.8, whic… Debian Linux Mitigation only Fix from $1,6002017-07-29 MEDIUM 6.5 CVE-2017-6260 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer helper function where an incorrect calculation of string length m… Gpu Driver Mitigation only Fix from $1,6002017-07-28 HIGH 7.8 CVE-2017-8870EPSS 14% Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file. Audiocoder No fix yet Fix from $1,9502017-07-27 HIGH 7.8 CVE-2016-10402EPSS 10% Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative v… Antivirus after 8.3.36.59 Fix from $1,9502017-07-27 HIGH 7.8 CVE-2017-8869EPSS 16% Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file. Mediacoder No fix yet Fix from $1,9502017-07-27 MEDIUM 5.5 CVE-2017-11674 Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE file, related to a "Read Acce… Web Vulnerability Scanner No fix yet Fix from $1,6002017-07-27 MEDIUM 5.5 CVE-2017-9412 The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memory read and… Lame No fix yet Fix from $1,6002017-07-27 HIGH 8.8 CVE-2017-9614EPSS 8% The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service (invalid memory access and a… Libjpeg Turbo No fix yet Fix from $1,9502017-07-27 HIGH 7.8 CVE-2017-9618 The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (buffer ov… Ghostscript Ghostxps No fix yet Fix from $1,9502017-07-26 HIGH 7.8 CVE-2017-9619 The xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (… Ghostscript Ghostxps No fix yet Fix from $1,9502017-07-26 CRITICAL 9.8 CVE-2017-11636 GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frames that have non-identical wid… Graphicsmagick Mitigation only Fix from $2,3002017-07-26 MEDIUM 6.5 CVE-2017-11640 When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/t… Imagemagick Patch available Fix from $1,6002017-07-26 CRITICAL 9.8 CVE-2017-11643 GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical w… Graphicsmagick Mitigation only Fix from $2,3002017-07-26 HIGH 7.8 CVE-2017-11628 In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zend_ini_pars… PHP after 5.6.30 Fix from $1,9502017-07-25 HIGH 8.6 CVE-2017-6612 A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow… Asr 5000 Series Software Mitigation only Fix from $1,9502017-07-25 HIGH 8.8 CVE-2017-6753EPSS 6% A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute ar… Webex Event Center Mitigation only Fix from $1,9502017-07-25 HIGH 8.8 CVE-2015-1332 The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a … Ubuntu Linux after 1.9.0 Fix from $1,9502017-07-25 HIGH 7.8 CVE-2015-1438 Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges v… Panda Antivirus Pro 2015 No fix yet Fix from $1,9502017-07-25 HIGH 7.8 CVE-2015-6585 hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" … Hangul Word Processor Mitigation only Fix from $1,9502017-07-25 HIGH 7.8 CVE-2017-7980 Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary… Ubuntu Linux Patch available Fix from $1,9502017-07-25