Browse CVEs

HIGH 7.8 CVE-2016-10340 In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler. Android Mitigation only Fix from $1,9502017-06-13 HIGH 7.8 CVE-2016-10342 In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler. Android No fix yet Fix from $1,9502017-06-13 HIGH 7.0 CVE-2017-7372 In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to… Android Patch available Fix from $1,9502017-06-13 HIGH 7.8 CVE-2017-8236 In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver. Android Patch available Fix from $1,9502017-06-13 HIGH 7.8 CVE-2017-8237 In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image. Android Patch available Fix from $1,9502017-06-13 HIGH 7.8 CVE-2017-8238 In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function. Android No fix yet Fix from $1,9502017-06-13 HIGH 7.8 CVE-2017-8241 In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect message length. Android Patch available Fix from $1,9502017-06-13 HIGH 7.8 CVE-2014-9960 In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. Android No fix yet Fix from $1,9502017-06-13 HIGH 7.8 CVE-2014-9963 In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM. Android No fix yet Fix from $1,9502017-06-13 HIGH 7.8 CVE-2015-9023 In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. Android No fix yet Fix from $1,9502017-06-13 HIGH 7.8 CVE-2015-9025 In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application. Android No fix yet Fix from $1,9502017-06-13 HIGH 7.8 CVE-2015-9028 In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine. Android Mitigation only Fix from $1,9502017-06-13 HIGH 7.5 CVE-2015-3220 The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash). Tlslite after 0.4.9 Fix from $1,9502017-06-13 MEDIUM 6.5 CVE-2017-6655 A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent at… Mds 9000 Nx Os Mitigation only Fix from $1,6002017-06-13 HIGH 8.8 CVE-2017-6892 In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access v… Libsndfile Patch available Fix from $1,9502017-06-12 CRITICAL 9.8 CVE-2014-9984 nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup… Glibc after 2.19 Fix from $2,3002017-06-12 MEDIUM 6.5 CVE-2017-8834 The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation error) v… Libcroco No fix yet Fix from $1,6002017-06-12 MEDIUM 6.5 CVE-2017-9126 The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overfl… Libquicktime No fix yet Fix from $1,6002017-06-12 MEDIUM 6.5 CVE-2017-9127EPSS 5% The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buf… Libquicktime No fix yet Fix from $1,6002017-06-12 HIGH 7.8 CVE-2016-7837 Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities. Bluez after 5.41 Fix from $1,9502017-06-09 HIGH 7.2 CVE-2016-7820 Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker w… Ts Wrlp Firmware after 1.01.02 Fix from $1,9502017-06-09 CRITICAL 9.9 CVE-2017-4901EPSS 20% The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory acc… Fusion Mitigation only Fix from $2,3002017-06-08 CRITICAL 9.8 CVE-2017-4907 VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-ov… Horizon View Mitigation only Fix from $2,3002017-06-08 HIGH 7.8 CVE-2017-4908 VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities in JPEG2… Horizon View Mitigation only Fix from $1,9502017-06-08 HIGH 7.8 CVE-2017-4909 VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in TrueType Font … Horizon View Mitigation only Fix from $1,9502017-06-08 HIGH 7.8 CVE-2016-4973 Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer ov… Libssp Mitigation only Fix from $1,9502017-06-07 HIGH 7.3 CVE-2017-7965 A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon… Somachine Hvac Mitigation only Fix from $1,9502017-06-07 HIGH 8.8 CVE-2017-4902 VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fus… Workstation Player 8.5.6 / 12.5.5+ Fix from $1,9502017-06-07 HIGH 8.8 CVE-2017-4903 VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 with… Workstation Player 8.5.6 / 12.5.5+ Fix from $1,9502017-06-07 HIGH 8.8 CVE-2017-4904 The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-20… Fusion 8.5.6 / 12.5.5+ Fix from $1,9502017-06-07