Browse CVEs

MEDIUM 5.3 CVE-2017-17316 Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00… Dp300 Firmware Mitigation only Fix from $1,6002018-07-02 CRITICAL 9.8 CVE-2018-13026 An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Type. Gpmf Parser Mitigation only Fix from $2,3002018-06-30 CRITICAL 9.8 CVE-2018-13011 An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Validate. Gpmf Parser No fix yet Fix from $2,3002018-06-29 CRITICAL 9.8 CVE-2018-13005 An issue was discovered in MP4Box in GPAC 0.7.1. The function urn_Read in isomedia/box_code_base.c has a heap-based buffer over-read. Debian Linux No fix yet Fix from $2,3002018-06-29 CRITICAL 9.8 CVE-2018-13006 An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/box_dump.c function hdlr_dump. Debian Linux Patch available Fix from $2,3002018-06-29 CRITICAL 9.8 CVE-2018-13007 An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Next, related to certain c… Gpmf Parser No fix yet Fix from $2,3002018-06-29 CRITICAL 9.8 CVE-2018-13008 An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Next, related to certain c… Gpmf Parser No fix yet Fix from $2,3002018-06-29 CRITICAL 9.8 CVE-2018-13009 An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Next, related to certain c… Gpmf Parser No fix yet Fix from $2,3002018-06-29 HIGH 7.8 CVE-2018-12983 A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by … Podofo No fix yet Fix from $1,9502018-06-29 CRITICAL 9.8 CVE-2018-12915 In libpbc.a in PBC through 2017-03-02, there is a buffer over-read in calc_hash in map.c. Pbc after 20170302 Fix from $2,3002018-06-27 CRITICAL 9.8 CVE-2018-12917 In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in _pbcM_ip_new in map.c. Pbc after 20170302 Fix from $2,3002018-06-27 HIGH 7.1 CVE-2018-12684 Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information … Civetweb after 1.10 Fix from $1,9502018-06-22 CRITICAL 9.8 CVE-2018-0310 A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacke… Nx Os 1.1.4.179 / 2.0.1.153+ Fix from $2,3002018-06-21 CRITICAL 9.8 CVE-2018-0304EPSS 9% A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacke… Nexus 7000 Firmware Mitigation only Fix from $2,3002018-06-20 HIGH 7.5 CVE-2018-10945 The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read and appli… Mongoose No fix yet Fix from $1,9502018-06-19 MEDIUM 5.5 CVE-2018-11723 The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an info… Libpff after 20180428 Fix from $1,6002018-06-19 HIGH 8.8 CVE-2018-11724 The mobi_pk1_decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or pos… Libmobi No fix yet Fix from $1,9502018-06-19 MEDIUM 6.5 CVE-2018-11725 The mobi_parse_index_entry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure (heap-based buffer over-read… Libmobi No fix yet Fix from $1,6002018-06-19 MEDIUM 5.5 CVE-2018-11727 The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an informati… Libfsntfs after 20180420 Fix from $1,6002018-06-19 MEDIUM 5.5 CVE-2018-11728 The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to … Libfsntfs after 20180420 Fix from $1,6002018-06-19 MEDIUM 5.5 CVE-2018-11729 The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information… Libfsntfs after 20180420 Fix from $1,6002018-06-19 MEDIUM 5.5 CVE-2018-11731 The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an informa… Libfsntfs after 20180420 Fix from $1,6002018-06-19 MEDIUM 5.5 CVE-2018-12096 The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause an informa… Liblnk after 20180419 Fix from $1,6002018-06-19 MEDIUM 5.5 CVE-2018-12097 The liblnk_location_information_read_data function in liblnk_location_information.c in liblnk through 2018-04-19 allows remote attackers to cause an … Liblnk after 20180419 Fix from $1,6002018-06-19 MEDIUM 5.5 CVE-2018-12098 The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (h… Liblnk after 20180419 Fix from $1,6002018-06-19 CRITICAL 9.8 CVE-2018-10623 Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the position can be… Delta Industrial Automation Dopsoft after 4.00.04 Fix from $2,3002018-06-18 CRITICAL 9.8 CVE-2018-12503 tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h. Tinyexr Mitigation only Fix from $2,3002018-06-16 MEDIUM 5.5 CVE-2018-12495 The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer ove… Debian Linux No fix yet Fix from $1,6002018-06-15 HIGH 7.8 CVE-2018-12034 In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/e… Yara after 3.7.1 Fix from $1,9502018-06-15 HIGH 7.8 CVE-2018-12321 There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java binary file. Radare2 Patch available Fix from $1,9502018-06-13