Vulnerability index

Browse CVEs

3,919 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Debian Linux MEDIUM 5.5
CVE-2017-5973

The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (i…

Fix: after 2.8.1.1
Fix from $1,600 2017-03-27
Debian Linux CRITICAL 9.8
CVE-2017-5511EPSS 5%

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer ove…

Fix: 6.9.7-3 / 7.0.4-3+
Fix from $2,300 2017-03-24
Debian Linux HIGH 7.8
CVE-2017-5510

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.

Fix: 6.9.7-4 / 7.0.4-4+
Fix from $1,950 2017-03-24
Debian Linux HIGH 7.5
CVE-2017-5507EPSS 6%

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consump…

Patch available
Fix from $1,950 2017-03-24
Debian Linux HIGH 7.8
CVE-2017-5506

Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file.

Patch available
Fix from $1,950 2017-03-24
Debian Linux HIGH 7.5
CVE-2016-10149EPSS 5%

XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request o…

Fix: after 4.4.0
Fix from $1,950 2017-03-24
Debian Linux MEDIUM 5.5
CVE-2016-9556

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds he…

Patch available
Fix from $1,600 2017-03-23
Debian Linux HIGH 7.8
CVE-2016-9774

The postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 1…

Mitigation only
Fix from $1,950 2017-03-23
Debian Linux HIGH 7.8
CVE-2016-9775

The postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0.45+dfsg-1~deb8u1 on Debian jessie, before 6.0.35-1u…

Mitigation only
Fix from $1,950 2017-03-23
Debian Linux MEDIUM 5.5
CVE-2017-5987

The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial …

Fix: after 2.8.1.1
Fix from $1,600 2017-03-20
Debian Linux MEDIUM 5.5
CVE-2017-6831

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1,…

Patch available
Fix from $1,600 2017-03-20
Debian Linux MEDIUM 5.5
CVE-2017-6832

Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0…

Patch available
Fix from $1,600 2017-03-20
Debian Linux MEDIUM 5.5
CVE-2017-6834

Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1…

Patch available
Fix from $1,600 2017-03-20
Debian Linux MEDIUM 5.5
CVE-2017-6836

Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, …

Patch available
Fix from $1,600 2017-03-20
Debian Linux HIGH 8.8
CVE-2017-7178

CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitr…

Fix: 1.3.14+
Fix from $1,950 2017-03-18
Debian Linux HIGH 7.5
CVE-2017-6960

An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the load_apng function a…

Mitigation only
Fix from $1,950 2017-03-17
Debian Linux MEDIUM 6.5
CVE-2017-5856

Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a d…

Fix: after 2.8.1.1
Fix from $1,600 2017-03-16
Debian Linux HIGH 7.4
CVE-2017-5617

The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF)…

Patch available
Fix from $1,950 2017-03-16
Debian Linux MEDIUM 6.5
CVE-2017-5667

The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial …

Fix: after 2.8.1.1
Fix from $1,600 2017-03-16
Debian Linux MEDIUM 5.5
CVE-2016-10246

Buffer overflow in the main function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a deni…

Fix: after 1.10
Fix from $1,600 2017-03-16
Debian Linux MEDIUM 5.5
CVE-2016-10247

Buffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause …

Fix: after 1.10
Fix from $1,600 2017-03-16
Debian Linux CRITICAL 9.8
CVE-2017-5522

Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to caus…

Fix: after 6.0.5
Fix from $2,300 2017-03-15
Debian Linux CRITICAL 9.8
CVE-2016-10195EPSS 7%

The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_l…

Fix: after 2.1.5
Fix from $2,300 2017-03-15
Debian Linux HIGH 7.5
CVE-2016-10196EPSS 5%

Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial o…

Fix: 45.9.0 / 52.1.0+
Fix from $1,950 2017-03-15
Debian Linux HIGH 7.5
CVE-2016-10197EPSS 5%

The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty…

Fix: after 2.1.5
Fix from $1,950 2017-03-15
Debian Linux MEDIUM 6.5
CVE-2017-5525

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumpt…

Fix: after 2.8.1.1
Fix from $1,600 2017-03-15
Debian Linux MEDIUM 6.5
CVE-2017-5526

Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consum…

Fix: after 2.8.1.1
Fix from $1,600 2017-03-15
Debian Linux MEDIUM 6.5
CVE-2017-5579

Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denia…

Fix: after 2.8.1.1
Fix from $1,600 2017-03-15
Debian Linux MEDIUM 6.0
CVE-2016-10155

Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memo…

Fix: after 2.8.1.1
Fix from $1,600 2017-03-15
Debian Linux HIGH 7.8
CVE-2017-6060EPSS 7%

Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to have unspecified impact via…

No fix yet
Fix from $1,950 2017-03-15