Browse CVEs

HIGH 7.5 CVE-2019-9098 An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB31… Mb3170 Firmware after 4.0 Fix from $1,9502020-03-11 CRITICAL 9.8 CVE-2019-14086 Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit integer which can lead to unexp… Apq8098 Firmware Mitigation only Fix from $2,3002020-03-05 HIGH 8.8 CVE-2015-8751 Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 im… Jasper 1.900.4+ Fix from $1,9502020-02-17 HIGH 7.8 CVE-2020-8844EPSS 24% This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction is requi… Reader after 9.7.0.29478 Fix from $1,9502020-02-14 HIGH 8.8 CVE-2014-4607EPSS 5% Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute … Liblzo2 2.07+ Fix from $1,9502020-02-12 HIGH 8.8 CVE-2020-6381 Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap c… Chrome 80.0.3987.87+ Fix from $1,9502020-02-11 HIGH 7.8 CVE-2019-11484 Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie. Ubuntu Linux No fix yet Fix from $1,9502020-02-08 HIGH 7.8 CVE-2019-14051 Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then to buffer overflow in Snapdr… Mdm9206 Firmware Mitigation only Fix from $1,9502020-02-07 MEDIUM 6.5 CVE-2020-3120 A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow a… Firepower Extensible Operating System 2.6.1.187 / 2.7.1.106+ Fix from $1,6002020-02-05 HIGH 8.2 CVE-2020-6059 An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP reques… Minisnmpd No fix yet Fix from $1,9502020-02-04 MEDIUM 6.8 CVE-2014-4859 Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically pr… Edk2 Mitigation only Fix from $1,6002020-01-31 MEDIUM 6.8 CVE-2014-4860 Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow phys… Edk2 Mitigation only Fix from $1,6002020-01-31 CRITICAL 9.6 CVE-2013-3486 IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability Flashpix Plugin Mitigation only Fix from $2,3002020-01-27 CRITICAL 9.8 CVE-2013-3493 XnView 2.03 has an integer overflow vulnerability Xnview Mitigation only Fix from $2,3002020-01-27 HIGH 7.8 CVE-2015-1530 media/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute arbitrary code with media_server privileges or cause a denia… Android 5.1+ Fix from $1,9502020-01-24 CRITICAL 9.8 CVE-2015-4042 Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (ap… Coreutils after 8.23 Fix from $2,3002020-01-24 HIGH 7.8 CVE-2012-5340EPSS 6% SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file. Sumatrapdf No fix yet Fix from $1,9502020-01-23 HIGH 7.5 CVE-2019-19413 There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could expl… Dbs3900 Tdd Lte Firmware Mitigation only Fix from $1,9502020-01-21 HIGH 7.5 CVE-2019-19414 There is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation, a remote attacker could expl… Dbs3900 Tdd Lte Firmware No fix yet Fix from $1,9502020-01-21 CRITICAL 9.8 CVE-2019-14016 Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… Apq8009 Firmware Patch available Fix from $2,3002020-01-21 HIGH 7.8 CVE-2019-10585 Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in … Apq8009 Firmware Patch available Fix from $1,9502020-01-21 HIGH 8.8 CVE-2014-4609EPSS 6% Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to … Libav 0.8.13 / 9.14+ Fix from $1,9502020-01-14 HIGH 8.8 CVE-2014-4610 Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.… Ffmpeg 0.10.14 / 1.1.12+ Fix from $1,9502020-01-14 HIGH 7.5 CVE-2019-19911 There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the nu… Pillow 6.2.2+ Fix from $1,9502020-01-05 HIGH 8.8 CVE-2020-5310 libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc. Pillow 6.2.2+ Fix from $1,9502020-01-03 HIGH 8.8 CVE-2019-20205 libsixel 1.8.4 has an integer overflow in sixel_frame_resize in frame.c. Libsixel No fix yet Fix from $1,9502020-01-02 CRITICAL 9.8 CVE-2019-13445 An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/ros… Ros Comm after 1.14.3 Fix from $2,3002019-12-30 MEDIUM 6.5 CVE-2019-19930 In libIEC61850 1.4.0, MmsValue_newOctetString in mms/iso_mms/common/mms_value.c has an integer signedness error that can lead to an attempted excessi… Libiec61850 No fix yet Fix from $1,6002019-12-23 HIGH 8.8 CVE-2019-8601 Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, wat… Safari 5.2.1 / 7.12+ Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-2304 Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Consumer Elec… Ipq4019 Firmware Patch available Fix from $1,9502019-12-18