Browse CVEs

HIGH 8.8 CVE-2017-6741EPSS 6% A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely e… Ios Xe Mitigation only Fix from $1,9502017-07-17 HIGH 8.8 CVE-2017-6742 KEVEPSS 21% A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely e… iOS after 15.6 Fix from $1,9502017-07-17 HIGH 8.8 CVE-2017-6743 KEVEPSS 11% The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen… iOS after 15.6 Fix from $1,9502017-07-17 HIGH 8.8 CVE-2017-6744 KEVEPSS 7% The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen… iOS Mitigation only Fix from $1,9502017-07-17 HIGH 7.8 CVE-2017-9669 A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting … Alpine Linux No fix yet Fix from $1,9502017-07-17 HIGH 7.8 CVE-2017-9671 A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting… Alpine Linux No fix yet Fix from $1,9502017-07-17 HIGH 7.3 CVE-2017-9639 An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified (aka improper res… V Server after 3.3.22.0 Fix from $1,9502017-07-17 HIGH 7.5 CVE-2017-10978 An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service. Debian Linux 2.2.10 / 3.0.15+ Fix from $1,9502017-07-17 HIGH 7.5 CVE-2017-10983 An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of servic… Freeradius Patch available Fix from $1,9502017-07-17 HIGH 7.8 CVE-2017-2344 A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial o… Junos Mitigation only Fix from $1,9502017-07-17 CRITICAL 9.8 CVE-2017-11362 In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attack… PHP Mitigation only Fix from $2,3002017-07-17 HIGH 7.8 CVE-2017-11311 soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary… Libopenmpt after 1.26.12.00 Fix from $1,9502017-07-17 MEDIUM 5.5 CVE-2017-11328 Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET … Yara Patch available Fix from $1,6002017-07-17 MEDIUM 6.5 CVE-2017-11339 There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote deni… Exiv2 Mitigation only Fix from $1,6002017-07-17 HIGH 7.8 CVE-2017-11344 Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P… Rt Ac5300 Firmware after 3.0.0.4.380.7743 Fix from $1,9502017-07-17 HIGH 7.8 CVE-2017-11345 Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P,… Rt Ac5300 Firmware after 3.0.0.4.380.7743 Fix from $1,9502017-07-17 CRITICAL 9.8 CVE-2017-1000073 Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution. Gravity Patch available Fix from $2,3002017-07-17 CRITICAL 9.8 CVE-2017-1000074 Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function. Gravity Patch available Fix from $2,3002017-07-17 CRITICAL 9.8 CVE-2017-1000075 Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function Gravity Patch available Fix from $2,3002017-07-17 HIGH 7.8 CVE-2017-10602 A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and access to Junos CLI, to execute co… Junos Mitigation only Fix from $1,9502017-07-17 CRITICAL 9.8 CVE-2017-1000044 gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when rendering Gtk Vnc Patch available Fix from $2,3002017-07-17 HIGH 8.1 CVE-2017-0152EPSS 11% A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft brows… Edge Patch available Fix from $1,9502017-07-17 CRITICAL 9.8 CVE-2017-0028EPSS 19% A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could corrupt m… Edge Patch available Fix from $2,3002017-07-17 HIGH 8.8 CVE-2017-2814 An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an ima… Poppler Mitigation only Fix from $1,9502017-07-12 HIGH 8.8 CVE-2017-2818 An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an ove… Poppler Mitigation only Fix from $1,9502017-07-12 HIGH 7.8 CVE-2017-11190 unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enabled, might allow remote attackers to cause a denial of service (stack-based buffer overfl… Unrar Free No fix yet Fix from $1,9502017-07-12 HIGH 7.5 CVE-2017-8601EPSS 67% Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context… Edge Patch available Fix from $1,9502017-07-11 HIGH 7.5 CVE-2017-8603EPSS 9% Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of th… Edge Patch available Fix from $1,9502017-07-11 HIGH 7.5 CVE-2017-8604EPSS 9% Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of th… Edge Patch available Fix from $1,9502017-07-11 HIGH 7.5 CVE-2017-8605EPSS 9% Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context… Edge Patch available Fix from $1,9502017-07-11