Browse CVEs

MEDIUM 6.5 CVE-2018-10480 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interactio… Foxit Reader after 9.0.1.1049 Fix from $1,6002018-05-17 MEDIUM 6.5 CVE-2018-10481 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interactio… Foxit Reader after 9.0.1.1049 Fix from $1,6002018-05-17 MEDIUM 6.5 CVE-2018-10482 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interactio… Foxit Reader after 9.0.1.1049 Fix from $1,6002018-05-17 MEDIUM 6.5 CVE-2018-10485 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interactio… Foxit Reader after 9.0.1.1049 Fix from $1,6002018-05-17 MEDIUM 6.5 CVE-2018-10486 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interactio… Foxit Reader after 9.0.1.1049 Fix from $1,6002018-05-17 MEDIUM 6.5 CVE-2018-10487 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interactio… Foxit Reader after 9.0.1.1049 Fix from $1,6002018-05-17 HIGH 8.1 CVE-2018-11205 A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or informati… Hdf5 No fix yet Fix from $1,9502018-05-16 HIGH 8.1 CVE-2018-11206 An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a rem… Hdf5 No fix yet Fix from $1,9502018-05-16 CRITICAL 9.8 CVE-2018-11210 TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined … Tinyxml2 Mitigation only Fix from $2,3002018-05-16 MEDIUM 6.5 CVE-2018-10999 An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read. Debian Linux No fix yet Fix from $1,6002018-05-12 HIGH 7.5 CVE-2018-8139EPSS 61% A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine … Edge after 1.8.3 Fix from $1,9502018-05-09 HIGH 7.8 CVE-2018-10778 Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a deni… Mp3gain after 1.5.2 Fix from $1,9502018-05-07 MEDIUM 6.5 CVE-2018-10779 TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff. Ubuntu Linux No fix yet Fix from $1,6002018-05-07 MEDIUM 6.5 CVE-2018-10780 Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read. Exiv2 No fix yet Fix from $1,6002018-05-07 MEDIUM 6.5 CVE-2018-10767 There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 beca… Ansible Tower after 0.3.0 Fix from $1,6002018-05-06 MEDIUM 6.5 CVE-2018-10733 There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a rem… Ansible Tower after 0.3.0 Fix from $1,6002018-05-04 HIGH 7.5 CVE-2017-2591 389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniqueness_entry_to_config() function in the "attribute … Enterprise Linux 1.3.6+ Fix from $1,9502018-04-30 HIGH 8.8 CVE-2018-10549EPSS 7% An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exif_read_data in ext/exif/exif.c has… PHP 5.6.36 / 7.0.30+ Fix from $1,9502018-04-29 HIGH 8.8 CVE-2018-10529 An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F property table list implementation in libraw_x3f.cpp and l… Ubuntu Linux Patch available Fix from $1,9502018-04-29 HIGH 8.8 CVE-2018-10392 mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial … Debian Linux No fix yet Fix from $1,9502018-04-26 HIGH 7.5 CVE-2018-10393 bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. Debian Linux Mitigation only Fix from $1,9502018-04-26 MEDIUM 5.5 CVE-2018-10372 process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application… Enterprise Linux Desktop No fix yet Fix from $1,6002018-04-25 MEDIUM 5.3 CVE-2017-17252 Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C2… Ar120 S Firmware Mitigation only Fix from $1,6002018-04-24 HIGH 7.5 CVE-2017-17253 Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C2… Ar120 S Firmware Mitigation only Fix from $1,9502018-04-24 HIGH 7.8 CVE-2018-10254 Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage … Netwide Assembler No fix yet Fix from $1,9502018-04-21 MEDIUM 5.5 CVE-2018-10186 In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c). Remote attackers could leverage this vulner… Radare2 No fix yet Fix from $1,6002018-04-17 MEDIUM 5.5 CVE-2018-10187 In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this … Radare2 No fix yet Fix from $1,6002018-04-17 HIGH 7.5 CVE-2018-6798 An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and… Debian Linux after 5.26 Fix from $1,9502018-04-17 CRITICAL 9.8 CVE-2018-3594 In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650… Mdm9206 Firmware Mitigation only Fix from $2,3002018-04-11 CRITICAL 9.8 CVE-2017-18130 In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650… Mdm9206 Firmware Mitigation only Fix from $2,3002018-04-11