Browse CVEs

CRITICAL 9.8 CVE-2017-14918 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the GPS location wireless interfac… Android Mitigation only Fix from $2,3002017-12-05 HIGH 7.0 CVE-2017-9703 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a Camera driver c… Android Patch available Fix from $1,9502017-12-05 HIGH 7.5 CVE-2017-11031 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the VIDIOC_G_SDE_ROTATOR_FENCE ioctl … Android Mitigation only Fix from $1,9502017-12-05 HIGH 7.8 CVE-2017-11033 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the coresight-tmc driver, a simult… Android Mitigation only Fix from $1,9502017-12-05 HIGH 7.0 CVE-2017-11044 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a KGSL driver function, a race con… Android Mitigation only Fix from $1,9502017-12-05 HIGH 7.0 CVE-2017-11045 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a camera driver function, a race c… Android Mitigation only Fix from $1,9502017-12-05 HIGH 7.8 CVE-2017-8824 The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of servic… Linux Kernel 3.2.97 / 3.16.52+ Fix from $1,9502017-12-05 HIGH 8.1 CVE-2017-8823 In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there is a use-a… Debian Linux 0.2.5.16 / 0.2.8.17+ Fix from $1,9502017-12-03 HIGH 7.8 CVE-2017-17052 The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new process's mm_struct, allowing … Linux Kernel 4.9.46 / 4.12.10+ Fix from $1,9502017-11-29 HIGH 7.0 CVE-2017-17053 The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT tabl… Linux Kernel 4.4.153 / 4.9.46+ Fix from $1,9502017-11-29 HIGH 8.8 CVE-2017-17045 An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a … Xen after 4.9.1 Fix from $1,9502017-11-28 CRITICAL 9.8 CVE-2017-14746EPSS 10% Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request. Ubuntu Linux 4.5.0 / 4.5.15+ Fix from $2,3002017-11-27 CRITICAL 9.8 CVE-2017-16943EPSS 47% The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of… Debian Linux Patch available Fix from $2,3002017-11-25 HIGH 7.8 CVE-2017-16939 The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denia… Linux Kernel 3.2.97 / 3.16.52+ Fix from $1,9502017-11-24 HIGH 7.8 CVE-2017-8203 The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B… Nova 2 Firmware Mitigation only Fix from $1,9502017-11-22 HIGH 7.8 CVE-2017-8142 The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and … Mate 9 Firmware Mitigation only Fix from $1,9502017-11-22 HIGH 7.8 CVE-2017-8160 The Madapt Driver of some Huawei smart phones with software Earlier than Vicky-AL00AC00B172 versions,Vicky-AL00CC768B122,Vicky-TL00AC01B167,Earlier t… Vicky Al00a Firmware Mitigation only Fix from $1,9502017-11-22 MEDIUM 5.3 CVE-2017-1000211 Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a c… Lynx Patch available Fix from $1,6002017-11-17 CRITICAL 9.8 CVE-2017-1000172 Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed… Gravity No fix yet Fix from $2,3002017-11-17 HIGH 7.8 CVE-2017-0861 Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecifi… Android Patch available Fix from $1,9502017-11-16 HIGH 7.8 CVE-2017-11091 In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function mdss_rotator_ioctl in… Android Patch available Fix from $1,9502017-11-16 HIGH 7.8 CVE-2017-11092 In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the KGSL driver function kgsl_ioct… Android Patch available Fix from $1,9502017-11-16 HIGH 7.8 CVE-2017-11024 In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in the rmnet USB con… Android Patch available Fix from $1,9502017-11-16 HIGH 7.8 CVE-2017-15115 The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off act… Linux Kernel 3.2.96 / 3.16.51+ Fix from $1,9502017-11-15 MEDIUM 5.9 CVE-2017-15271EPSS 9% A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to authentic… Psftpd No fix yet Fix from $1,6002017-11-15 MEDIUM 6.5 CVE-2017-12780 The ReadData function in ebmlstring.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (invalid free and applicati… Libebml2 after 2012-08-26 Fix from $1,6002017-11-10 MEDIUM 6.6 CVE-2017-16648 The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of s… Linux Kernel after 4.13.11 Fix from $1,6002017-11-07 CRITICAL 9.8 CVE-2017-2922 An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket… Mongoose No fix yet Fix from $2,3002017-11-07 CRITICAL 9.8 CVE-2017-2891 An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CG… Mongoose No fix yet Fix from $2,3002017-11-07 MEDIUM 6.6 CVE-2017-16525 The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of … Linux Kernel 3.2.96 / 3.10.108+ Fix from $1,6002017-11-04