Browse CVEs

HIGH 8.8 CVE-2017-14442 An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2_image-2.0.2. A specially crafted BMP image can ca… Debian Linux Mitigation only Fix from $1,9502018-04-24 HIGH 8.8 CVE-2017-14448 An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can ca… Debian Linux Mitigation only Fix from $1,9502018-04-24 HIGH 8.8 CVE-2017-14449 A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a Double-Fre… Debian Linux Mitigation only Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12099 An exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the Blender open-source 3d creation suite v2.78c. A spe… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12100 An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially c… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12101 An exploitable integer overflow exists in the 'modifier_mdef_compact_influences' functionality of the Blender open-source 3d creation suite v2.78c. A… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12102 An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons. A specially craf… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12103 An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font into a curve… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12104 An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c draws a Particle object. A specially crafted … Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12105 An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifier to a Mes… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.1 CVE-2017-14450 A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer… Debian Linux Mitigation only Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12081 An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c. A specially cra… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12082 An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite. A .blend file wit… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12086 An exploitable integer overflow exists in the 'BKE_mesh_calc_normals_tessface' functionality of the Blender open-source 3d creation suite. A speciall… Debian Linux No fix yet Fix from $1,9502018-04-24 MEDIUM 5.5 CVE-2018-10289 In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerabi… Debian Linux No fix yet Fix from $1,6002018-04-22 HIGH 7.5 CVE-2018-1000164 gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in … Debian Linux No fix yet Fix from $1,9502018-04-18 HIGH 7.5 CVE-2018-1086 pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove th… Debian Linux Mitigation only Fix from $1,9502018-04-12 HIGH 8.8 CVE-2018-3839 An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially… Debian Linux No fix yet Fix from $1,9502018-04-10 MEDIUM 6.5 CVE-2018-3838 An exploitable information vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially cr… Debian Linux No fix yet Fix from $1,6002018-04-10 MEDIUM 5.5 CVE-2018-3837 An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A s… Debian Linux No fix yet Fix from $1,6002018-04-10 MEDIUM 5.3 CVE-2018-9251 The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via … Debian Linux No fix yet Fix from $1,6002018-04-04 MEDIUM 6.5 CVE-2018-9132 libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to ca… Debian Linux No fix yet Fix from $1,6002018-03-30 HIGH 8.8 CVE-2017-11509EPSS 6% An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement. Debian Linux No fix yet Fix from $1,9502018-03-28 MEDIUM 6.5 CVE-2018-9018 In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability … Debian Linux No fix yet Fix from $1,6002018-03-25 HIGH 8.8 CVE-2018-9009 In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file. Debian Linux No fix yet Fix from $1,9502018-03-25 MEDIUM 6.5 CVE-2017-18229 An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which… Debian Linux No fix yet Fix from $1,6002018-03-14 MEDIUM 6.5 CVE-2018-7874 An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault… Debian Linux No fix yet Fix from $1,6002018-03-08 MEDIUM 6.5 CVE-2018-7875 There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead t… Debian Linux No fix yet Fix from $1,6002018-03-08 MEDIUM 6.5 CVE-2018-7876 In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, which allows remote attackers t… Debian Linux No fix yet Fix from $1,6002018-03-08 MEDIUM 6.5 CVE-2018-7877 There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a … Debian Linux No fix yet Fix from $1,6002018-03-08