Browse CVEs

MEDIUM 5.5 CVE-2017-6832 Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0… Debian Linux Patch available Fix from $1,6002017-03-20 MEDIUM 5.5 CVE-2017-6834 Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1… Debian Linux Patch available Fix from $1,6002017-03-20 MEDIUM 5.5 CVE-2017-6836 Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, … Debian Linux Patch available Fix from $1,6002017-03-20 CRITICAL 9.8 CVE-2014-9847 The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact. Ubuntu Linux Patch available Fix from $2,3002017-03-20 HIGH 7.8 CVE-2012-5361 Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file. Ffmpeg after 0.10.15 Fix from $1,9502017-03-20 CRITICAL 9.8 CVE-2014-9843 The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors. Ubuntu Linux Patch available Fix from $2,3002017-03-20 MEDIUM 5.5 CVE-2014-9845 The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file. Ubuntu Linux Patch available Fix from $1,6002017-03-20 CRITICAL 9.8 CVE-2014-9846 Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact. Ubuntu Linux Patch available Fix from $2,3002017-03-20 HIGH 7.8 CVE-2017-7187 The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer ove… Linux Kernel 3.18.50 / 4.1.40+ Fix from $1,9502017-03-20 HIGH 7.5 CVE-2017-7186EPSS 5% libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and ap… Pcre Patch available Fix from $1,9502017-03-20 CRITICAL 9.8 CVE-2016-10253 An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions… Erlang\/otp Patch available Fix from $2,3002017-03-18 MEDIUM 5.8 CVE-2017-3870 A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote … Web Security Appliance Mitigation only Fix from $1,6002017-03-17 MEDIUM 5.3 CVE-2017-3878 A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could … Nx Os Mitigation only Fix from $1,6002017-03-17 MEDIUM 5.3 CVE-2017-3879 A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow … Nx Os Mitigation only Fix from $1,6002017-03-17 CRITICAL 9.8 CVE-2017-6880EPSS 14% Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified othe… Cerberus Ftp Server No fix yet Fix from $2,3002017-03-17 MEDIUM 5.5 CVE-2017-6965 readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a … Binutils No fix yet Fix from $1,6002017-03-17 HIGH 7.5 CVE-2017-0150EPSS 15% A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft brow… Edge Patch available Fix from $1,9502017-03-17 HIGH 7.5 CVE-2017-0151EPSS 15% A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft brow… Edge Patch available Fix from $1,9502017-03-17 HIGH 7.5 CVE-2017-0131EPSS 15% A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft brow… Edge Patch available Fix from $1,9502017-03-17 HIGH 7.5 CVE-2017-0132EPSS 15% A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft brow… Edge Patch available Fix from $1,9502017-03-17 HIGH 7.5 CVE-2017-0133EPSS 26% A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft brow… Edge Patch available Fix from $1,9502017-03-17 HIGH 7.5 CVE-2017-0134EPSS 26% A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft brow… Edge Patch available Fix from $1,9502017-03-17 HIGH 7.5 CVE-2017-0136EPSS 15% A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft brow… Edge Patch available Fix from $1,9502017-03-17 HIGH 7.5 CVE-2017-0137EPSS 15% A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft brow… Edge Patch available Fix from $1,9502017-03-17 HIGH 7.5 CVE-2017-0138EPSS 15% A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft brow… Edge Patch available Fix from $1,9502017-03-17 HIGH 8.8 CVE-2017-0084EPSS 37% Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Windows 10 Patch available Fix from $1,9502017-03-17 HIGH 7.5 CVE-2017-0094EPSS 32% A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft brow… Edge Patch available Fix from $1,9502017-03-17 HIGH 7.8 CVE-2017-0101 KEVEPSS 57% The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Se… Windows 7 Patch available Fix from $1,9502017-03-17 HIGH 7.8 CVE-2017-0102 Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 … Windows 10 Mitigation only Fix from $1,9502017-03-17 HIGH 7.8 CVE-2017-0108EPSS 50% The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeti… Live Meeting Patch available Fix from $1,9502017-03-17