Browse CVEs

MEDIUM 6.5 CVE-2015-1547 The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIF… Debian Linux after 4.0.6 Fix from $1,6002016-04-13 MEDIUM 6.5 CVE-2014-9655 The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a de… Debian Linux after 4.0.6 Fix from $1,6002016-04-13 CRITICAL 9.8 CVE-2016-4009EPSS 7% Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecifie… Pillow after 3.1.0 Fix from $2,3002016-04-13 HIGH 8.8 CVE-2016-3982 Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bo… Debian Linux after 0.7.5 Fix from $1,9502016-04-13 HIGH 7.8 CVE-2016-3981EPSS 8% Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (… Ubuntu Linux after 0.7.5 Fix from $1,9502016-04-13 MEDIUM 6.5 CVE-2016-2533 Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remo… Pillow after 3.1.0 Fix from $1,6002016-04-13 MEDIUM 6.5 CVE-2016-2191 The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write … Ubuntu Linux Patch available Fix from $1,6002016-04-13 CRITICAL 9.8 CVE-2016-2054EPSS 5% Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary cod… Debian Linux Patch available Fix from $2,3002016-04-13 MEDIUM 6.5 CVE-2016-0775 Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of servic… Pillow after 3.1.0 Fix from $1,6002016-04-13 MEDIUM 6.5 CVE-2016-0740 Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory vi… Pillow after 3.1.0 Fix from $1,6002016-04-13 HIGH 7.4 CVE-2015-8843 The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin i… Foxit Reader Patch available Fix from $1,9502016-04-13 MEDIUM 5.5 CVE-2015-7555 Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and … Fedora after 5.1.1 Fix from $1,6002016-04-13 HIGH 7.8 CVE-2016-1495 Integer overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B… Mate S Firmware Mitigation only Fix from $1,9502016-04-13 HIGH 7.8 CVE-2015-8620 Heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus bef… Avast Free Antivirus after 11.1.2245 Fix from $1,9502016-04-13 HIGH 7.8 CVE-2015-8304 Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application… P7 Firmware Mitigation only Fix from $1,9502016-04-13 HIGH 7.5 CVE-2016-0157EPSS 16% Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Micros… Edge Mitigation only Fix from $1,9502016-04-12 HIGH 7.5 CVE-2016-0156EPSS 18% Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Micros… Edge Mitigation only Fix from $1,9502016-04-12 HIGH 7.5 CVE-2016-0155EPSS 10% Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Micros… Edge Mitigation only Fix from $1,9502016-04-12 HIGH 7.5 CVE-2016-0154EPSS 14% Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory cor… Edge Mitigation only Fix from $1,9502016-04-12 HIGH 8.8 CVE-2016-0145EPSS 38% The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win… .net Framework No fix yet Fix from $1,9502016-04-12 HIGH 7.8 CVE-2016-0139EPSS 14% Microsoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Mi… Excel Mitigation only Fix from $1,9502016-04-12 HIGH 7.8 CVE-2016-0136EPSS 18% Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoi… Excel Mitigation only Fix from $1,9502016-04-12 HIGH 8.4 CVE-2016-0135 The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Secondary Log… Windows 10 Mitigation only Fix from $1,9502016-04-12 HIGH 7.8 CVE-2016-0127EPSS 17% Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation… Office Mitigation only Fix from $1,9502016-04-12 HIGH 7.8 CVE-2016-0122EPSS 31% Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel … Excel No fix yet Fix from $1,9502016-04-12 HIGH 7.5 CVE-2016-3656 The GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote… Pan Os 5.0.18 / 5.1.11+ Fix from $1,9502016-04-12 CRITICAL 9.8 CVE-2016-3657 Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.… Pan Os 5.0.18 / 5.1.11+ Fix from $2,3002016-04-12 HIGH 8.4 CVE-2016-2558 The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows lo… Gpu Driver R340 Mitigation only Fix from $1,9502016-04-12 HIGH 7.8 CVE-2016-3986EPSS 10% Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file, related to … Avast No fix yet Fix from $1,9502016-04-12 HIGH 8.4 CVE-2016-2857 The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and c… Ubuntu Linux Mitigation only Fix from $1,9502016-04-12