Browse CVEs

HIGH 7.8 CVE-2017-15588 An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that… Xen Patch available Fix from $1,9502017-10-18 HIGH 7.0 CVE-2017-15265 Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly h… Linux Kernel 3.2.95 / 3.10.108+ Fix from $1,9502017-10-16 MEDIUM 6.7 CVE-2017-11823 The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it… Windows 10 Patch available Fix from $1,6002017-10-13 HIGH 7.0 CVE-2017-9697 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition can allow access to … Android Mitigation only Fix from $1,9502017-10-10 HIGH 7.0 CVE-2015-8239 The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replac… Sudo Patch available Fix from $1,9502017-10-10 MEDIUM 5.6 CVE-2017-15038 Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive informatio… Qemu after 2.9.1 Fix from $1,6002017-10-10 HIGH 8.1 CVE-2017-15037 In FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition with a resultant out-of-bounds read, because it can … FreeBSD after 11.1 Fix from $1,9502017-10-05 HIGH 7.0 CVE-2017-1000112EPSS 21% Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_u… Linux Kernel 3.10.108 / 3.16.47+ Fix from $1,9502017-10-05 MEDIUM 5.9 CVE-2017-14955EPSS 12% Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to… Checkmk No fix yet Fix from $1,6002017-10-02 MEDIUM 5.3 CVE-2017-14748 Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other use… Overwatch Mitigation only Fix from $1,6002017-09-26 HIGH 7.0 CVE-2017-8280 In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there … Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-9677 In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, variable "ddp->params_length" cou… Android after 8.0 Fix from $1,9502017-09-21 MEDIUM 5.1 CVE-2015-1865 fts.c in coreutils 8.4 allows local users to delete arbitrary files. Coreutils Mitigation only Fix from $1,6002017-09-20 MEDIUM 5.5 CVE-2017-14483 flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might all… Dev Python Flower after 0.9.1 Fix from $1,6002017-09-15 HIGH 8.1 CVE-2017-0161EPSS 11% The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Wi… Windows 10 Patch available Fix from $1,9502017-09-13 MEDIUM 5.6 CVE-2017-14317 A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting down a VM with a stubdomain, a ra… Xen after 4.9.0 Fix from $1,6002017-09-12 HIGH 7.8 CVE-2017-0794 A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android. Versions: Android kernel. Android ID: A-35644812. Android after 8.0 Fix from $1,9502017-09-08 HIGH 7.0 CVE-2017-12146 The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to gain privileges by leveraging a… Linux Kernel 3.18.61 / 4.1.43+ Fix from $1,9502017-09-08 HIGH 8.1 CVE-2015-5947 SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. Suitecrm after 7.2.2 Fix from $1,9502017-09-06 HIGH 8.1 CVE-2015-5948 Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. NOTE: this vulnerability exists because of an incomplete … Suitecrm after 7.2.2 Fix from $1,9502017-09-06 HIGH 7.8 CVE-2017-12136 Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corrup… Xenserver Patch available Fix from $1,9502017-08-24 HIGH 7.0 CVE-2017-9684 In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Free conditi… Android Mitigation only Fix from $1,9502017-08-18 HIGH 8.1 CVE-2017-9685 In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After Free condit… Android Mitigation only Fix from $1,9502017-08-18 HIGH 7.8 CVE-2017-8257 In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register reading w… Android Patch available Fix from $1,9502017-08-18 HIGH 7.0 CVE-2017-8262 In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race condition can po… Android Patch available Fix from $1,9502017-08-18 HIGH 7.0 CVE-2017-8265 In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to a double … Android Patch available Fix from $1,9502017-08-18 HIGH 7.0 CVE-2017-8266 In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a us… Android Patch available Fix from $1,9502017-08-18 HIGH 7.0 CVE-2017-8267 In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an… Android Mitigation only Fix from $1,9502017-08-18 HIGH 7.0 CVE-2017-8270 In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a use-afte… Android Patch available Fix from $1,9502017-08-18 HIGH 8.1 CVE-2016-10383 In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI. Android Mitigation only Fix from $1,9502017-08-18