Browse CVEs

HIGH 7.8 CVE-2019-15927 An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/… Linux Kernel 3.16.66 / 3.18.132+ Fix from $1,9502019-09-04 HIGH 7.8 CVE-2019-15925 An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_mode_vnet_base_cfg in the file… Linux Kernel 4.14.135 / 4.19.61+ Fix from $1,9502019-09-04 HIGH 7.8 CVE-2019-15918 An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are … Linux Kernel 4.14.166 / 4.19.73+ Fix from $1,9502019-09-04 HIGH 7.5 CVE-2019-15903EPSS 7% In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to… Python 2.2.8 / 2.7.17+ Fix from $1,9502019-09-04 HIGH 8.8 CVE-2015-9381 FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. Debian Linux 2.6.1+ Fix from $1,9502019-09-03 MEDIUM 6.5 CVE-2015-9382 FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face… Debian Linux 2.6.1+ Fix from $1,6002019-09-03 MEDIUM 6.5 CVE-2015-9383 FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c. Debian Linux 2.6.2+ Fix from $1,6002019-09-03 HIGH 7.5 CVE-2019-15026 memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c. Memcached Patch available Fix from $1,9502019-08-30 CRITICAL 9.8 CVE-2019-5608 In FreeBSD 12.0-STABLE before r350648, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350650, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2… FreeBSD Patch available Fix from $2,3002019-08-30 HIGH 7.5 CVE-2019-5610 In FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350638, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2… FreeBSD Patch available Fix from $1,9502019-08-30 HIGH 7.8 CVE-2019-14776 A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file. Debian Linux Patch available Fix from $1,9502019-08-29 HIGH 7.8 CVE-2019-14437 The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap… Debian Linux Patch available Fix from $1,9502019-08-29 HIGH 7.8 CVE-2019-14438 A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a… Debian Linux Patch available Fix from $1,9502019-08-29 CRITICAL 9.8 CVE-2019-15651 wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASN_BOOLEAN byte is misha… Wolfssl Mitigation only Fix from $2,3002019-08-26 HIGH 8.8 CVE-2019-7991 Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successful exploitation could lead to … Photoshop Cc after 20.0.5 Fix from $1,9502019-08-26 HIGH 8.8 CVE-2019-7995 Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successful exploitation could lead to … Photoshop Cc after 20.0.5 Fix from $1,9502019-08-26 HIGH 8.8 CVE-2019-7996 Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successful exploitation could lead to … Photoshop Cc after 20.0.5 Fix from $1,9502019-08-26 MEDIUM 6.5 CVE-2019-7999 Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successful exploitation could lead to … Photoshop Cc after 20.0.5 Fix from $1,6002019-08-26 MEDIUM 6.5 CVE-2019-8000 Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successful exploitation could lead to … Photoshop Cc after 20.0.5 Fix from $1,6002019-08-26 MEDIUM 6.5 CVE-2019-7981 Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successful exploitation could lead to … Photoshop Cc after 20.0.5 Fix from $1,6002019-08-26 MEDIUM 6.5 CVE-2019-7987 Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successful exploitation could lead to … Photoshop Cc after 20.0.5 Fix from $1,6002019-08-26 MEDIUM 6.5 CVE-2019-7977 Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successful exploitation could lead to … Photoshop Cc after 20.0.5 Fix from $1,6002019-08-26 HIGH 7.5 CVE-2019-15550 An issue was discovered in the simd-json crate before 0.1.15 for Rust. There is an out-of-bounds read and an incorrect crossing of a page boundary. Simdjson 0.1.15+ Fix from $1,9502019-08-26 MEDIUM 6.5 CVE-2019-15531 GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c. Debian Linux after 1.9 Fix from $1,6002019-08-23 CRITICAL 9.8 CVE-2019-15505EPSS 8% drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be r… Linux Kernel 3.16.77 / 4.4.194+ Fix from $2,3002019-08-23 HIGH 8.8 CVE-2019-5032 An exploitable out-of-bounds read vulnerability exists in the LabelSst record parser of Aspose Aspose.Cells 19.1.0 library. A specially crafted XLS f… Aspose.cells Mitigation only Fix from $1,9502019-08-21 HIGH 8.8 CVE-2019-5033 An exploitable out-of-bounds read vulnerability exists in the Number record parser of Aspose Aspose.Cells 19.1.0 library. A specially crafted XLS fil… Aspose.cells Mitigation only Fix from $1,9502019-08-21 MEDIUM 5.5 CVE-2019-3634 Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "… Data Loss Prevention Endpoint 11.3.2.82+ Fix from $1,6002019-08-21 MEDIUM 5.3 CVE-2019-5034 An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of … Nest Cam Iq Indoor Firmware No fix yet Fix from $1,6002019-08-20 HIGH 7.5 CVE-2019-8103 Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 201… Acrobat Dc 15.006.30499 / 17.011.30144+ Fix from $1,9502019-08-20