Browse CVEs

HIGH 7.5 CVE-2018-5391EPSS 32% The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-as… Linux Kernel after 4.18 Fix from $1,9502018-09-06 MEDIUM 5.5 CVE-2018-6554 Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows lo… Linux Kernel 4.17+ Fix from $1,6002018-09-04 HIGH 7.5 CVE-2018-6923 In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to excessive s… FreeBSD Mitigation only Fix from $1,9502018-09-04 MEDIUM 6.5 CVE-2018-10924 It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial o… Glusterfs 3.12.14 / 4.1.4+ Fix from $1,6002018-09-04 MEDIUM 6.5 CVE-2018-11056 RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Unco… Bsafe 4.0.5.3 / 4.1.6.1+ Fix from $1,6002018-08-31 HIGH 7.5 CVE-2018-16131 The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to … Akka Http after 10.1.4 Fix from $1,9502018-08-30 HIGH 8.6 CVE-2018-16132 The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large imag… Signal after 2.29.0 Fix from $1,9502018-08-29 MEDIUM 6.5 CVE-2018-15907 Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresse… Tc8305c Firmware No fix yet Fix from $1,6002018-08-29 MEDIUM 5.3 CVE-2018-8005EPSS 7% When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache. This can cause performance pro… Traffic Server after 7.1.3 Fix from $1,6002018-08-29 MEDIUM 6.5 CVE-2018-15852 Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonst… Tc7200.20 Firmware No fix yet Fix from $1,6002018-08-25 MEDIUM 5.5 CVE-2018-15853 Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon user… Ubuntu Linux 0.8.1+ Fix from $1,6002018-08-25 MEDIUM 6.5 CVE-2018-1157 Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP se… Routeros 6.40.9 / 6.42.7+ Fix from $1,6002018-08-23 MEDIUM 6.5 CVE-2018-15671 An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5P__get_cb() in H5Pint.c durin… Hdf5 No fix yet Fix from $1,6002018-08-21 MEDIUM 6.5 CVE-2018-15607EPSS 5% In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result i… Imagemagick No fix yet Fix from $1,6002018-08-21 HIGH 7.5 CVE-2018-5243 The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploit. A DoS … Encryption Management Server after 3.4.2 Fix from $1,9502018-08-20 MEDIUM 6.5 CVE-2018-15469 An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an… Debian Linux after 4.11.0 Fix from $1,6002018-08-17 MEDIUM 6.5 CVE-2018-15470 An issue was discovered in Xen through 4.11.x. The logic in oxenstored for handling writes depended on the order of evaluation of expressions making … Xen after 4.11.0 Fix from $1,6002018-08-17 MEDIUM 6.5 CVE-2016-9596 libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack con… Jboss Core Services 2.9.4+ Fix from $1,6002018-08-16 HIGH 8.6 CVE-2018-0418 A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services Router Software could allow a… Ios Xr after 6.3.3_base Fix from $1,9502018-08-15 HIGH 8.6 CVE-2018-0410 A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote att… Web Security Appliance Mitigation only Fix from $1,9502018-08-15 MEDIUM 6.2 CVE-2018-10864 An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded. A remote attacker may provide … Certification Mitigation only Fix from $1,6002018-08-13 MEDIUM 5.3 CVE-2018-6922 One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-p10 uses a… FreeBSD Patch available Fix from $1,6002018-08-09 HIGH 7.5 CVE-2018-5390EPSS 74% Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet… Virtualization 4.18+ Fix from $1,9502018-08-06 HIGH 7.5 CVE-2018-14940 PHPCMS 9 allows remote attackers to cause a denial of service (resource consumption) via large font_size, height, and width parameters in an api.php?… Phpcms No fix yet Fix from $1,9502018-08-05 MEDIUM 6.5 CVE-2016-8611 A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image service for both v1 and v2 `/images` API POST method fo… Glance Mitigation only Fix from $1,6002018-07-31 HIGH 7.5 CVE-2017-5693 Firmware in the Intel Puma 5, 6, and 7 Series might experience resource depletion or timeout, which allows a network attacker to create a denial of s… Puma Firmware Mitigation only Fix from $1,9502018-07-31 HIGH 7.5 CVE-2018-10607 Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow the creation of new connections to one or more IOAs, wit… Telem Gwm Firmware after 2018.04.18-linux_4-01-601cb47 Fix from $1,9502018-07-31 HIGH 8.6 CVE-2017-15119 The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sen… Virtualization 2.11.0+ Fix from $1,9502018-07-27 HIGH 7.5 CVE-2018-5530 F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb". Big Ip Local Traffic Manager after 13.1.0.5 Fix from $1,9502018-07-25 HIGH 7.5 CVE-2018-5541 When F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is processing HTTP requests, an unusually large number of para… Big Ip Application Security Manager after 13.1.0 Fix from $1,9502018-07-25