Browse CVEs

HIGH 8.8 CVE-2018-10494 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is requ… Foxit Reader after 9.0.1.1049 Fix from $1,9502018-05-17 CRITICAL 9.8 CVE-2018-7499 In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcc… Webaccess 8.3.1+ Fix from $2,3002018-05-15 HIGH 8.8 CVE-2018-7494 WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than the buffer can be read from a f… Wplsoft after 2.45.0 Fix from $1,9502018-05-04 CRITICAL 9.8 CVE-2018-8865EPSS 6% In Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been identified which may allow remote code execution. A CVSS v3 b… Ids 2102 Firmware Mitigation only Fix from $2,3002018-05-04 HIGH 7.8 CVE-2018-8839 Delta PMSoft versions 2.10 and prior have multiple stack-based buffer overflow vulnerabilities where a .ppm file can introduce a value larger than is… Pmsoft after 2.10 Fix from $1,9502018-04-30 MEDIUM 5.3 CVE-2018-7527 A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Bui… Levistudio Hmi Editor after 2017-11-11 Fix from $1,6002018-04-26 CRITICAL 9.8 CVE-2018-8840EPSS 8% A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and … Web Studio after 8.1 Fix from $2,3002018-04-18 HIGH 7.8 CVE-2018-7514 Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-P… Cx Flnet after 9.65 Fix from $1,9502018-04-17 CRITICAL 9.8 CVE-2017-9638 Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary … E Designer Mitigation only Fix from $2,3002018-04-17 MEDIUM 5.3 CVE-2018-7513 In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow. Cx Supervisor after 3.30 Fix from $1,6002018-03-21 HIGH 7.8 CVE-2017-16751 A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Stack… Delta Industrial Automation Screen Editor after 2.00.23.00 Fix from $1,9502018-03-15 HIGH 7.8 CVE-2018-5476 A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior. Stack-based bu… Delta Industrial Automation Dopsoft after 4.00.01 Fix from $1,9502018-03-15 CRITICAL 9.8 CVE-2017-12194EPSS 5% A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, coul… Spice Gtk after 0.34 Fix from $2,3002018-03-14 MEDIUM 5.5 CVE-2018-1071 zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local attacker could exploit this to cau… Debian Linux after 5.4.2 Fix from $1,6002018-03-09 HIGH 7.5 CVE-2018-5452 A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWave Micro [… Controlwave Micro Firmware after 05.78.00 Fix from $1,9502018-03-07 CRITICAL 9.8 CVE-2018-5475 A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. Multiple stack-base… D60 Line Distance Relay Firmware after 7.11 Fix from $2,3002018-02-19 CRITICAL 9.8 CVE-2018-5440 A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web… Codesys Runtime System 1.1.9.19+ Fix from $2,3002018-02-15 CRITICAL 9.8 CVE-2018-1161EPSS 67% This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication i… Netvault Backup Mitigation only Fix from $2,3002018-02-08 CRITICAL 9.8 CVE-2018-5442 A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buffer overflow vulnerability has… V Server Vpr Firmware after 4.0.1.0 Fix from $2,3002018-02-05 HIGH 7.8 CVE-2017-16739 An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially-crafted malicious files may be able to cause stack-ba… Levistudio Hmi Editor Firmware after 1.8.29 Fix from $1,9502018-01-12 CRITICAL 9.8 CVE-2017-16724 A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple instances of a vulnerability that… Webaccess 8.3+ Fix from $2,3002018-01-05 HIGH 8.8 CVE-2017-3193EPSS 6% Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web … Dir 850l Firmware Patch available Fix from $1,9502017-12-16 CRITICAL 9.8 CVE-2017-3195EPSS 21% Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulner… Edge Patch available Fix from $2,3002017-12-16 CRITICAL 9.8 CVE-2017-15088EPSS 8% plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which allows re… Kerberos 5 after 1.15.2 Fix from $2,3002017-11-23 MEDIUM 6.3 CVE-2017-14016EPSS 16% A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of… Webaccess 8.2_20170817+ Fix from $1,6002017-11-06 HIGH 8.8 CVE-2017-13089EPSS 80% The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget b… Debian Linux after 1.19.1 Fix from $1,9502017-10-27 CRITICAL 9.8 CVE-2017-13999 A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vulnerabili… Levi Studio Hmi Editor after 1.8.1 Fix from $2,3002017-10-17 HIGH 7.8 CVE-2017-12188 arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to reso… Linux Kernel 4.9.57 / 4.13.8+ Fix from $1,9502017-10-11 MEDIUM 6.8 CVE-2017-12732 A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next packet len… Intelligent Platforms Proficy Hmi\/scada Cimplicity after 9.0 Fix from $1,6002017-10-05 CRITICAL 9.8 CVE-2017-12706 A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulne… Webaccess after 8.2 Fix from $2,3002017-08-30