Browse CVEs

HIGH 7.8 CVE-2018-17911 LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remote code execution. Laquis Scada after 4.1.0.3870 Fix from $1,9502018-10-17 MEDIUM 6.5 CVE-2018-10839 Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. I… Ubuntu Linux after 3.0.0 Fix from $1,6002018-10-16 HIGH 7.8 CVE-2018-17929 In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by p… Tpeditor after 1.90 Fix from $1,9502018-10-11 CRITICAL 9.8 CVE-2018-14818 WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerab… Pi Studio after 4.2.34 Fix from $2,3002018-10-08 HIGH 7.8 CVE-2018-14800 Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application to read past the boundary al… Ispsoft after 3.0.5 Fix from $1,9502018-10-03 CRITICAL 9.8 CVE-2018-14802 Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does… Frenic Loader 3.3 Firmware Mitigation only Fix from $2,3002018-10-01 CRITICAL 9.8 CVE-2018-14823 Fuji Electric V-Server 4.0.3.0 and prior, A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution. V Server Firmware after 4.0.3.0 Fix from $2,3002018-09-26 HIGH 8.8 CVE-2018-10602 WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vulnerabilities that can be exploited when the application proc… Levistudiou Mitigation only Fix from $1,9502018-09-26 HIGH 7.0 CVE-2018-14633EPSS 9% A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request f… Linux Kernel 3.16.59 / 3.18.124+ Fix from $1,9502018-09-25 HIGH 8.8 CVE-2018-14318 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S8 G950FXXU1AQL5. User interaction… Galaxy S8 Firmware Mitigation only Fix from $1,9502018-09-24 CRITICAL 9.8 CVE-2018-14829EPSS 16% Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed C… Rslinx after 4.00.01 Fix from $2,3002018-09-20 MEDIUM 6.3 CVE-2018-14792 WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files. Plc Editor Mitigation only Fix from $1,6002018-09-19 HIGH 8.8 CVE-2018-10907 It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size… Virtualization Host 3.12.14 / 4.1.4+ Fix from $1,9502018-09-04 HIGH 8.8 CVE-2018-14793 DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to allow arbitra… Deltav Mitigation only Fix from $1,9502018-08-21 HIGH 8.8 CVE-2018-10636EPSS 10% CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the sof… Cncsoft after 1.00.83 Fix from $1,9502018-08-13 CRITICAL 9.8 CVE-2017-15118EPSS 12% A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of… Ubuntu Linux 2.11+ Fix from $2,3002018-07-27 CRITICAL 9.8 CVE-2017-15101 A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a den… Enterprise Linux Desktop 2.5.4+ Fix from $2,3002018-07-27 HIGH 8.8 CVE-2017-2630 A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw cou… Qemu 2.9+ Fix from $1,9502018-07-27 CRITICAL 9.8 CVE-2018-10628EPSS 5% AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially… Intouch 2014 Patch available Fix from $2,3002018-07-24 CRITICAL 9.8 CVE-2017-3223EPSS 5% Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerab… Ip Camera Firmware 2.400.0000.14.r.20170713+ Fix from $2,3002018-07-24 CRITICAL 9.8 CVE-2018-10620 AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted pack… Indusoft Web Studio No fix yet Fix from $2,3002018-07-19 HIGH 7.8 CVE-2018-1046 pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS Authoritative, replaying a sp… Pdns 4.1.2+ Fix from $1,9502018-07-16 CRITICAL 9.8 CVE-2016-6563EPSS 80% Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulner… Dir 823 Firmware No fix yet Fix from $2,3002018-07-13 CRITICAL 9.8 CVE-2018-8847EPSS 7% Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution. 9000x Firmware after 2.0.29 Fix from $2,3002018-07-13 HIGH 7.8 CVE-2018-5002 KEVEPSS 25% Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary … Enterprise Linux Desktop after 29.0.0.171 Fix from $1,9502018-07-09 CRITICAL 9.8 CVE-2018-10594EPSS 69% Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, S… Commgr after 1.08 Fix from $2,3002018-06-26 HIGH 8.8 CVE-2018-11447 A vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port 443/tcp could allow a Cross-Site Request Forgery (CSRF… Scalance M875 Firmware Mitigation only Fix from $1,9502018-06-26 CRITICAL 9.8 CVE-2018-10621 Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer where a value larger than the bu… Delta Industrial Automation Dopsoft after 4.00.04 Fix from $2,3002018-06-18 HIGH 8.2 CVE-2018-10601 IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M an… Intellivue Mp2 Firmware Mitigation only Fix from $1,9502018-06-05 HIGH 7.5 CVE-2018-1125 procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat… Ubuntu Linux 3.3.15+ Fix from $1,9502018-05-23