Browse CVEs

HIGH 7.0 CVE-2018-4154 An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Storage" co… Iphone Os 10.13.4 / 11.3+ Fix from $1,9502018-04-03 HIGH 7.0 CVE-2018-4155 An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watch… Iphone Os 4.3 / 10.13.4+ Fix from $1,9502018-04-03 HIGH 7.0 CVE-2018-4156 An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "PluginKit" … Iphone Os 10.13.4 / 11.3+ Fix from $1,9502018-04-03 HIGH 7.0 CVE-2018-4157 An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watch… Iphone Os 4.3 / 10.13.4+ Fix from $1,9502018-04-03 HIGH 7.0 CVE-2018-4158 An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. watchOS before 4.3 is affected. The… Iphone Os 4.3 / 10.13.4+ Fix from $1,9502018-04-03 HIGH 7.0 CVE-2018-4166 An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watch… Iphone Os 4.3 / 10.13.4+ Fix from $1,9502018-04-03 HIGH 7.0 CVE-2018-4167 An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watch… Iphone Os 4.3 / 10.13.4+ Fix from $1,9502018-04-03 HIGH 7.0 CVE-2018-4151 An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "iCloud Driv… Iphone Os 10.13.4 / 11.3+ Fix from $1,9502018-04-03 HIGH 7.0 CVE-2018-4152 An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Notes" component. A race condition allow… Mac Os X 10.13.4+ Fix from $1,9502018-04-03 HIGH 7.0 CVE-2017-7004 An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "Security"… Iphone Os 10.3.2 / 10.12.5+ Fix from $1,9502018-04-03 HIGH 7.8 CVE-2018-7566 The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user. Linux Kernel Patch available Fix from $1,9502018-03-30 HIGH 7.8 CVE-2017-15826 Due to a race condition in MDSS rotator in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-20, a double free vulnerability may po… Android Patch available Fix from $1,9502018-03-30 HIGH 7.8 CVE-2017-16512 The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted update re… Vagrant Vmware Fusion after 5.0.4 Fix from $1,9502018-03-29 HIGH 7.0 CVE-2018-8885 screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypass intend… Screen Resolution Extra Mitigation only Fix from $1,9502018-03-28 HIGH 7.4 CVE-2017-12410 It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Administrator a… Virtual System Administrator after 9.3.0.11 Fix from $1,9502018-03-26 HIGH 7.0 CVE-2017-18249 The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cau… Linux Kernel 4.12+ Fix from $1,9502018-03-26 HIGH 7.0 CVE-2018-3561 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in diag_ioctl_lsm_de… Android Mitigation only Fix from $1,9502018-03-16 HIGH 7.0 CVE-2017-11082 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in a firmware… Android Patch available Fix from $1,9502018-03-16 HIGH 7.0 CVE-2017-15834 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, race condition in diag_dbgfs_read_dci… Android Patch available Fix from $1,9502018-03-16 HIGH 7.5 CVE-2018-7562 A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable … Glpi after 9.2.1 Fix from $1,9502018-03-12 HIGH 7.5 CVE-2017-2619EPSS 11% Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file s… Debian Linux 4.4.12 / 4.5.7+ Fix from $1,9502018-03-12 HIGH 7.5 CVE-2018-7998 In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows r… Debian Linux 8.6.3+ Fix from $1,9502018-03-09 HIGH 7.0 CVE-2017-6296 NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges… Shield Tv Firmware after 6.2 Fix from $1,9502018-03-06 HIGH 7.0 CVE-2017-14798 A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root. PostgreSQL 9.4-0.5.3.1+ Fix from $1,9502018-03-01 HIGH 7.0 CVE-2018-7249 An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped i… Windows 7 No fix yet Fix from $1,9502018-02-26 HIGH 7.0 CVE-2017-15829 In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can potentially lead to… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.0 CVE-2018-7441 Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact b… Leptonica after 1.75.3 Fix from $1,9502018-02-23 MEDIUM 5.9 CVE-2015-6569 Race condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2 allows remote attackers to cause a denial of service (NUL… Floodlight 1.2+ Fix from $1,6002018-02-21 MEDIUM 5.9 CVE-2018-1049EPSS 7% In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by s… Enterprise Linux Patch available Fix from $1,6002018-02-16 HIGH 7.0 CVE-2015-1862 The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified direct… Abrt after 2.2.0 Fix from $1,9502018-02-09