Browse CVEs

MEDIUM 5.5 CVE-2019-15142 In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup … Debian Linux Patch available Fix from $1,6002019-08-18 MEDIUM 6.7 CVE-2019-15090 An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-… Linux Kernel 5.1.12+ Fix from $1,6002019-08-16 HIGH 7.8 CVE-2019-13513 In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-of-bounds … Delta Industrial Automation Dopsoft after 4.00.06.15 Fix from $1,9502019-08-15 HIGH 7.1 CVE-2019-13222 An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service o… Debian Linux after 2019-03-04 Fix from $1,9502019-08-15 MEDIUM 5.5 CVE-2019-1153 An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who su… Office Patch available Fix from $1,6002019-08-14 MEDIUM 5.5 CVE-2019-1148 An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who su… Office Patch available Fix from $1,6002019-08-14 CRITICAL 9.1 CVE-2019-15058 stb_image.h (aka the stb image loader) 2.23 has a heap-based buffer over-read in stbi__tga_load, leading to Information Disclosure or Denial of Servi… Stb No fix yet Fix from $2,3002019-08-14 HIGH 8.8 CVE-2019-15047 An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the function AP4_BitReader::SkipBits at Core/Ap4Utils.cpp. Bento4 No fix yet Fix from $1,9502019-08-14 HIGH 8.8 CVE-2019-15049 An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4_Dec3Atom class at Core/Ap4Dec3Atom.cpp. Bento4 No fix yet Fix from $1,9502019-08-14 HIGH 8.8 CVE-2019-15050 An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4_AvccAtom class at Core/Ap4AvccAtom.cpp. Bento4 No fix yet Fix from $1,9502019-08-14 HIGH 7.1 CVE-2019-14975 Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a miss… Mupdf 1.16.0+ Fix from $1,9502019-08-14 HIGH 7.1 CVE-2019-11041 When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x belo… PHP 5.19.0 / 7.1.31+ Fix from $1,9502019-08-09 HIGH 7.1 CVE-2019-11042 When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x belo… PHP 5.19.0 / 7.1.31+ Fix from $1,9502019-08-09 MEDIUM 6.3 CVE-2017-18446 cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250). Cpanel 56.0.49 / 58.0.49+ Fix from $1,6002019-08-02 CRITICAL 9.8 CVE-2019-14531 An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an out of bounds read on iso9660 while parsing System Use Sharing Protocol data in fs… The Sleuth Kit No fix yet Fix from $2,3002019-08-02 HIGH 7.5 CVE-2019-14513 Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation be… Debian Linux 2.76+ Fix from $1,9502019-08-01 HIGH 8.2 CVE-2019-14491 An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvalua… Opencv 3.4.7 / 4.1.1+ Fix from $1,9502019-08-01 HIGH 7.5 CVE-2019-14492 An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::… Opencv 3.4.7 / 4.1.1+ Fix from $1,9502019-08-01 CRITICAL 9.1 CVE-2019-14463 An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_REGISTERS c… Fedora 3.0.7 / 3.1.5+ Fix from $2,3002019-07-31 CRITICAL 9.1 CVE-2019-14462 An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_COILS case,… Fedora 3.0.7 / 3.1.5+ Fix from $2,3002019-07-31 HIGH 7.8 CVE-2019-12750 Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c (12.… Endpoint Protection No fix yet Fix from $1,9502019-07-31 CRITICAL 9.1 CVE-2019-14197 An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply. U Boot after 2019.07 Fix from $2,3002019-07-31 MEDIUM 6.5 CVE-2019-14380 libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files. Debian Linux 0.4.5+ Fix from $1,6002019-07-30 MEDIUM 6.5 CVE-2019-10129 A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can read arbi… PostgreSQL 11.3+ Fix from $1,6002019-07-30 CRITICAL 9.8 CVE-2015-9290 In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of… Freetype 2.6.1+ Fix from $2,3002019-07-30 MEDIUM 6.5 CVE-2019-14370 In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp. It could result in denial of service. Debian Linux No fix yet Fix from $1,6002019-07-28 HIGH 7.8 CVE-2019-14373 An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers can trigger a heap-based buffer … Flif No fix yet Fix from $1,9502019-07-28 HIGH 7.8 CVE-2019-14368 Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp. Exiv2 No fix yet Fix from $1,9502019-07-28 MEDIUM 6.5 CVE-2019-14369 Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service (heap-based buffer over-read) via a … Debian Linux No fix yet Fix from $1,6002019-07-28 MEDIUM 5.5 CVE-2015-9289 In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size … Linux Kernel 4.1.4+ Fix from $1,6002019-07-27