Browse CVEs

MEDIUM 6.5 CVE-2016-5317 Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, … Libtiff Mitigation only Fix from $1,6002017-01-20 MEDIUM 6.5 CVE-2016-5318 Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafte… Libtiff after 4.0.6 Fix from $1,6002017-01-20 MEDIUM 6.5 CVE-2016-5319 Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file. Libtiff after 4.0.6 Fix from $1,6002017-01-20 MEDIUM 6.5 CVE-2016-5321 The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff im… Opensuse after 4.0.6 Fix from $1,6002017-01-20 HIGH 8.8 CVE-2016-5199 An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, a… Chrome after 54.0.2840.87 Fix from $1,9502017-01-19 HIGH 8.8 CVE-2016-5200 V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectl… Chrome after 54.0.2840.87 Fix from $1,9502017-01-19 CRITICAL 9.8 CVE-2016-9679 Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer. Provisioning Services Mitigation only Fix from $2,3002017-01-18 CRITICAL 9.8 CVE-2016-9676 Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors. Provisioning Services Mitigation only Fix from $2,3002017-01-18 HIGH 7.5 CVE-2016-2233EPSS 35% Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of servi… Hexchat No fix yet Fix from $1,9502017-01-18 HIGH 7.5 CVE-2016-7564 Heap-based buffer overflow in the Fp_toString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service (crash)… Mujs No fix yet Fix from $1,9502017-01-18 CRITICAL 9.8 CVE-2016-7996 Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a col… Graphicsmagick after 1.3.25 Fix from $2,3002017-01-18 CRITICAL 9.8 CVE-2016-2090 Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigge… Fedora 0.8.2+ Fix from $2,3002017-01-13 HIGH 7.8 CVE-2017-5364 Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code Execution when the victim ope… Foxit Pdf Toolkit Patch available Fix from $1,9502017-01-13 CRITICAL 9.8 CVE-2016-8459 Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: … Linux Kernel Mitigation only Fix from $2,3002017-01-12 CRITICAL 9.8 CVE-2016-8439 Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions:… Linux Kernel Mitigation only Fix from $2,3002017-01-12 CRITICAL 9.8 CVE-2016-8440 Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite. Product… Linux Kernel Mitigation only Fix from $2,3002017-01-12 HIGH 7.8 CVE-2016-8441 Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions: Kernel … Linux Kernel No fix yet Fix from $1,9502017-01-12 HIGH 8.8 CVE-2017-5225 LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample valu… Libtiff Patch available Fix from $1,9502017-01-12 CRITICAL 9.8 CVE-2016-7480EPSS 42% The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows … PHP 7.0.11+ Fix from $2,3002017-01-11 HIGH 7.8 CVE-2017-2963 Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerabi… Acrobat after 15.020.20042 Fix from $1,9502017-01-11 HIGH 7.8 CVE-2017-2964 Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerabi… Acrobat after 15.020.20042 Fix from $1,9502017-01-11 HIGH 7.8 CVE-2017-2965 Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerabi… Acrobat after 15.020.20042 Fix from $1,9502017-01-11 HIGH 7.8 CVE-2017-2966EPSS 11% Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability… Acrobat after 15.020.20042 Fix from $1,9502017-01-11 HIGH 7.8 CVE-2017-2967 Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerabi… Acrobat after 15.020.20042 Fix from $1,9502017-01-11 HIGH 7.8 CVE-2017-2945EPSS 7% Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability… Acrobat after 15.020.20042 Fix from $1,9502017-01-11 HIGH 7.8 CVE-2017-2946EPSS 24% Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability… Acrobat after 15.020.20042 Fix from $1,9502017-01-11 HIGH 7.8 CVE-2017-2948EPSS 7% Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow… Acrobat after 15.020.20042 Fix from $1,9502017-01-11 HIGH 7.8 CVE-2017-2949EPSS 20% Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability… Acrobat after 15.020.20042 Fix from $1,9502017-01-11 HIGH 7.8 CVE-2017-2952EPSS 8% Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow… Acrobat after 15.020.20042 Fix from $1,9502017-01-11 HIGH 7.8 CVE-2017-2953 Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerabi… Acrobat after 15.020.20042 Fix from $1,9502017-01-11