Browse CVEs

HIGH 7.5 CVE-2018-19077 An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote atta… I5 Application Firmware No fix yet Fix from $1,9502018-11-07 MEDIUM 6.5 CVE-2018-19059 An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonst… Ubuntu Linux No fix yet Fix from $1,6002018-11-07 HIGH 7.5 CVE-2018-9448 In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information d… Android Patch available Fix from $1,9502018-11-06 MEDIUM 5.5 CVE-2018-9451 In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa… Android Patch available Fix from $1,6002018-11-06 MEDIUM 5.5 CVE-2018-9453 In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo… Android Patch available Fix from $1,6002018-11-06 MEDIUM 5.5 CVE-2018-9454 In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… Android Mitigation only Fix from $1,6002018-11-06 HIGH 7.5 CVE-2018-9455 In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial o… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9358 In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9359 In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9360 In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9361 In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9436 In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclos… Android Patch available Fix from $1,9502018-11-06 MEDIUM 5.5 CVE-2018-9437 In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no add… Android Patch available Fix from $1,6002018-11-06 CRITICAL 9.1 CVE-2018-18933 The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of s… Foxit Reader Patch available Fix from $2,3002018-11-05 HIGH 7.8 CVE-2018-16847 An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device… Ubuntu Linux after 3.0.0 Fix from $1,9502018-11-02 CRITICAL 9.1 CVE-2018-16842 Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in informatio… Curl after 7.61.1 Fix from $2,3002018-10-31 MEDIUM 6.5 CVE-2018-18827 There exists a heap-based buffer over-read in ff_vc1_pred_dc in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a … Libav No fix yet Fix from $1,6002018-10-30 MEDIUM 6.5 CVE-2018-17622 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction… Phantompdf after 9.2.0.9297 Fix from $1,6002018-10-29 MEDIUM 5.5 CVE-2017-18281 A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases… Android Patch available Fix from $1,6002018-10-29 CRITICAL 9.1 CVE-2018-18764 An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffe… Mongoose No fix yet Fix from $2,3002018-10-29 CRITICAL 9.1 CVE-2018-18765 An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffe… Mongoose No fix yet Fix from $2,3002018-10-29 MEDIUM 5.5 CVE-2018-18662 There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool. Mupdf No fix yet Fix from $1,6002018-10-26 MEDIUM 5.5 CVE-2018-18605 A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka … Debian Linux No fix yet Fix from $1,6002018-10-23 HIGH 7.8 CVE-2017-18304 Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobi… Fsm9055 Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 7.8 CVE-2017-18294 While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small … Fsm9055 Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 8.8 CVE-2018-18581 An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lupng.c. Lupng after 2017-03-10 Fix from $1,9502018-10-22 HIGH 8.1 CVE-2018-18224 A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers cou… Drawings Sdk Mitigation only Fix from $1,9502018-10-19 MEDIUM 6.5 CVE-2018-18480 A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash. Libopencad No fix yet Fix from $1,6002018-10-18 MEDIUM 6.5 CVE-2018-18481 A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadCHAR function in lib/dwg/io.cpp, resulting in an application crash. Libopencad No fix yet Fix from $1,6002018-10-18 MEDIUM 6.5 CVE-2018-12366 An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak p… Enterprise Linux Desktop Mitigation only Fix from $1,6002018-10-18