Browse CVEs

HIGH 7.5 CVE-2018-14576 The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the _amount variable. Suncontract Mitigation only Fix from $1,9502018-08-03 HIGH 7.5 CVE-2018-14883EPSS 9% An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-b… PHP 5.6.37 / 7.0.31+ Fix from $1,9502018-08-03 HIGH 7.5 CVE-2018-10921 Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input… Ttembed No fix yet Fix from $1,9502018-08-02 CRITICAL 9.8 CVE-2017-9120EPSS 8% PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other… PHP 7.4.23 / 8.0.10+ Fix from $2,3002018-08-02 HIGH 7.8 CVE-2016-9583 An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input. Enterprise Linux Desktop 2.0.6+ Fix from $1,9502018-08-01 HIGH 8.8 CVE-2016-9580 An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow. Openjpeg Patch available Fix from $1,9502018-08-01 CRITICAL 9.8 CVE-2016-8620 The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input. Curl 7.51.0+ Fix from $2,3002018-08-01 CRITICAL 9.8 CVE-2016-8622 The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to … Libcurl 7.51.0+ Fix from $2,3002018-07-31 HIGH 8.8 CVE-2018-14295EPSS 9% This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User inter… Foxit Reader after 9.1.0.5096 Fix from $1,9502018-07-31 HIGH 7.8 CVE-2017-7482 In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lea… Linux Kernel 3.2.90 / 3.10.108+ Fix from $1,9502018-07-30 HIGH 7.5 CVE-2018-14444 libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash. Libdxfrw Mitigation only Fix from $1,9502018-07-20 HIGH 7.5 CVE-2018-14341 In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in e… Wireshark after 2.6.1 Fix from $1,9502018-07-19 HIGH 7.5 CVE-2018-14343 In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-b… Wireshark after 2.6.1 Fix from $1,9502018-07-19 HIGH 7.5 CVE-2018-14337 The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory ac… Debian Linux No fix yet Fix from $1,9502018-07-17 HIGH 8.8 CVE-2018-14326 In MP4v2 2.0.0, there is an integer overflow (with resultant memory corruption) when resizing MP4Array for the ftyp atom in mp4array.h. Mp4v2 No fix yet Fix from $1,9502018-07-16 MEDIUM 5.5 CVE-2018-0360 ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_parag… Ubuntu Linux 0.100.1+ Fix from $1,6002018-07-16 CRITICAL 9.8 CVE-2018-14084 An issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the owner sets the value of sellPrice to a large number in… Myadvancedtoken No fix yet Fix from $2,3002018-07-16 CRITICAL 9.8 CVE-2018-14086 An issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token. The contract has an integer overflow. If… Mytoken No fix yet Fix from $2,3002018-07-16 CRITICAL 9.8 CVE-2018-14087 An issue was discovered in a smart contract implementation for EUC (EUC), an Ethereum token. The contract has an integer overflow. If the owner sets … Encryptedtoken No fix yet Fix from $2,3002018-07-16 CRITICAL 9.8 CVE-2018-14088 An issue was discovered in a smart contract implementation for STeX White List (STE(WL)), an Ethereum token. The contract has an integer overflow. If… Stex White List No fix yet Fix from $2,3002018-07-16 CRITICAL 9.8 CVE-2018-14063 The increaseApproval function of a smart contract implementation for Tracto (TRCT), an Ethereum ERC20 token, has an integer overflow. Tracto Mitigation only Fix from $2,3002018-07-15 HIGH 7.5 CVE-2018-13836 An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract. An attacker could use … Rocket Coin No fix yet Fix from $1,9502018-07-12 HIGH 7.5 CVE-2018-14001 An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH (SKT), an Ethereum token smart contract. An attacker could use it… Sharktech No fix yet Fix from $1,9502018-07-12 HIGH 7.5 CVE-2018-14002 An integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an Ethereum token smart contract. An attacker could use it to … Mp3 Coin No fix yet Fix from $1,9502018-07-12 HIGH 7.5 CVE-2018-14003 An integer overflow vulnerability exists in the function batchTransfer of WeMediaChain (WMC), an Ethereum token smart contract. An attacker could use… Wmctoken No fix yet Fix from $1,9502018-07-12 HIGH 7.5 CVE-2018-14004 An integer overflow vulnerability exists in the function transfer_tokens_after_ICO of GlobeCoin (GLB), an Ethereum token smart contract. An attacker … Globecoin No fix yet Fix from $1,9502018-07-12 HIGH 7.5 CVE-2018-14005 An integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an Ethereum token smart contract. An attacker could use… Malaysiancoin No fix yet Fix from $1,9502018-07-12 HIGH 7.5 CVE-2018-14006 An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token (NGT), an Ethereum token smart contract. An attacker c… Ngtoken No fix yet Fix from $1,9502018-07-12 HIGH 8.1 CVE-2018-10887 A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c fi… Debian Linux 0.27.3+ Fix from $1,9502018-07-10 MEDIUM 6.5 CVE-2018-5000EPSS 14% Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could lead to information disclosu… Enterprise Linux Desktop after 29.0.0.171 Fix from $1,6002018-07-09