Browse CVEs

HIGH 7.8 CVE-2017-3024EPSS 5% Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerabi… Acrobat after 15.023.20070 Fix from $1,9502017-04-12 HIGH 7.5 CVE-2017-0093EPSS 14% A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory in Micros… Edge Patch available Fix from $1,9502017-04-12 HIGH 7.8 CVE-2017-0106EPSS 28% Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitr… Outlook Patch available Fix from $1,9502017-04-12 CRITICAL 9.8 CVE-2016-10311 Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to t… Netweaver Mitigation only Fix from $2,3002017-04-10 HIGH 8.8 CVE-2017-7617EPSS 6% Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 be… Asterisk after 13.13-cert2 Fix from $1,9502017-04-10 CRITICAL 9.8 CVE-2015-7272 Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows attackers to cause a denial of service (buffer overfl… Integrated Remote Access Controller Firmware after 2.20.20.20 Fix from $2,3002017-04-10 CRITICAL 9.8 CVE-2015-7292 Stack-based buffer overflow in the havok_write function in drivers/staging/havok/havok.c in Amazon Fire OS before 2016-01-15 allows attackers to caus… Fire Os after 5.0 Fix from $2,3002017-04-10 MEDIUM 5.5 CVE-2017-7593 tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive informat… Libtiff Mitigation only Fix from $1,6002017-04-09 HIGH 7.8 CVE-2017-0538 A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption dur… Android Patch available Fix from $1,9502017-04-07 HIGH 7.8 CVE-2017-0539 A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption du… Android Patch available Fix from $1,9502017-04-07 HIGH 7.8 CVE-2017-0540 A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption du… Android Patch available Fix from $1,9502017-04-07 HIGH 7.8 CVE-2017-0541 A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption du… Android Patch available Fix from $1,9502017-04-07 HIGH 7.8 CVE-2017-0542 A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption dur… Android Patch available Fix from $1,9502017-04-07 HIGH 7.8 CVE-2017-0543 A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption dur… Android Patch available Fix from $1,9502017-04-07 MEDIUM 5.5 CVE-2017-0548 A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This i… Android Mitigation only Fix from $1,6002017-04-07 HIGH 7.8 CVE-2017-7584 Memory Corruption Vulnerability in Foxit PDF Toolkit before 2.1 allows an attacker to cause Denial of Service & Remote Code Execution when a victim o… Foxit Pdf Toolkit after 2.0 Fix from $1,9502017-04-07 MEDIUM 5.5 CVE-2017-7585 In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a spe… Libsndfile after 1.0.27 Fix from $1,6002017-04-07 MEDIUM 5.5 CVE-2017-7586 In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffe… Libsndfile after 1.0.27 Fix from $1,6002017-04-07 HIGH 7.8 CVE-2017-7578 Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or … Libming Patch available Fix from $1,9502017-04-07 HIGH 8.8 CVE-2017-6956 On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authentication response, leading to… Hardmac Wi Fi Soc Firmware Mitigation only Fix from $1,9502017-04-05 MEDIUM 6.8 CVE-2017-6975 Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point. NOTE: because an oper… Iphone Os after 10.3 Fix from $1,6002017-04-05 HIGH 7.8 CVE-2016-3740EPSS 15% Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute … Foxit Reader Mitigation only Fix from $1,9502017-04-04 HIGH 7.8 CVE-2016-10317 The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of ser… Ghostscript Patch available Fix from $1,9502017-04-03 MEDIUM 5.5 CVE-2017-5950 The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption … Yaml Cpp Mitigation only Fix from $1,6002017-04-03 HIGH 7.8 CVE-2017-6194 The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and ap… Radare2 Patch available Fix from $1,9502017-04-03 HIGH 7.8 CVE-2017-6448 The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer … Radare2 Patch available Fix from $1,9502017-04-03 HIGH 7.8 CVE-2016-8759 Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1… P9 Firmware Mitigation only Fix from $1,9502017-04-02 HIGH 7.8 CVE-2016-8760 Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_… P9 Firmware Mitigation only Fix from $1,9502017-04-02 HIGH 7.8 CVE-2016-8761 Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1… P9 Firmware Mitigation only Fix from $1,9502017-04-02 MEDIUM 6.7 CVE-2016-8774 The HIFI driver in Huawei Mate 8 phones with software versions before NXT-AL10C00B386, versions before NXT-CL00C92B386, versions before NXT-DL00C17B3… Mate 8 Firmware Mitigation only Fix from $1,6002017-04-02