Vulnerability index

Browse CVEs

3,919 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Debian Linux MEDIUM 6.1
CVE-2017-5938

Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote atta…

Fix: after 1.1.25
Fix from $1,600 2017-03-15
Debian Linux HIGH 8.8
CVE-2016-8714

An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafte…

No fix yet
Fix from $1,950 2017-03-10
Debian Linux HIGH 7.5
CVE-2017-6800

An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during handling of LONG data types, r…

Fix: after 1.9.1
Fix from $1,950 2017-03-10
Debian Linux HIGH 7.5
CVE-2017-6801

An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef.

Fix: after 1.9.1
Fix from $1,950 2017-03-10
Debian Linux HIGH 7.5
CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to Decomp…

Fix: after 1.9.1
Fix from $1,950 2017-03-10
Debian Linux CRITICAL 9.8
CVE-2016-8863EPSS 8%

Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attac…

Fix: after 1.6.20
Fix from $2,300 2017-03-07
Debian Linux HIGH 7.5
CVE-2016-6255EPSS 27%

Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registe…

Fix: after 1.6.20
Fix from $1,950 2017-03-07
Debian Linux MEDIUM 5.5
CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted p…

Patch available
Fix from $1,600 2017-03-07
Debian Linux MEDIUM 5.5
CVE-2016-5315

The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a c…

Fix: after 4.0.6
Fix from $1,600 2017-03-07
Debian Linux HIGH 7.8
CVE-2016-10244

The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote atta…

Fix: 2.7.1+
Fix from $1,950 2017-03-06
Debian Linux MEDIUM 5.5
CVE-2017-6498

An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.

Patch available
Fix from $1,600 2017-03-06
Debian Linux MEDIUM 5.5
CVE-2017-6499

An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a D…

Patch available
Fix from $1,600 2017-03-06
Debian Linux MEDIUM 5.5
CVE-2017-6500

An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read.

Patch available
Fix from $1,600 2017-03-06
Debian Linux HIGH 7.5
CVE-2017-5193EPSS 6%

The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message w…

Fix: 0.8.21+
Fix from $1,950 2017-03-03
Debian Linux HIGH 7.5
CVE-2017-5194

Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message.

Fix: 0.8.21+
Fix from $1,950 2017-03-03
Debian Linux HIGH 7.5
CVE-2017-5356

Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence…

Fix: 0.8.21+
Fix from $1,950 2017-03-03
Debian Linux MEDIUM 5.5
CVE-2016-9830

The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service (crash) via large dimensions in …

Patch available
Fix from $1,600 2017-03-01
Debian Linux MEDIUM 5.5
CVE-2017-5974

Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows re…

No fix yet
Fix from $1,600 2017-03-01
Debian Linux MEDIUM 5.5
CVE-2017-5975

Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows re…

No fix yet
Fix from $1,600 2017-03-01
Debian Linux MEDIUM 5.5
CVE-2017-5976

Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0…

No fix yet
Fix from $1,600 2017-03-01
Debian Linux MEDIUM 6.5
CVE-2016-9559

coders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted i…

Fix: 6.9.6-5 / 7.0.3-7+
Fix from $1,600 2017-03-01
Debian Linux HIGH 7.8
CVE-2017-6298

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / calloc return value not checked."

Fix: after 1.9
Fix from $1,950 2017-02-24
Debian Linux HIGH 7.8
CVE-2017-6300

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in version field in lib/tnef-types.h."

Fix: after 1.9
Fix from $1,950 2017-02-24
Debian Linux HIGH 7.8
CVE-2017-6301

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads."

Fix: after 1.9
Fix from $1,950 2017-02-24
Debian Linux HIGH 7.8
CVE-2017-6302

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow."

Fix: after 1.9
Fix from $1,950 2017-02-24
Debian Linux HIGH 7.8
CVE-2017-6303

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Integer Overflow."

Fix: after 1.9
Fix from $1,950 2017-02-24
Debian Linux HIGH 7.8
CVE-2017-6304

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read."

Fix: after 1.9
Fix from $1,950 2017-02-24
Debian Linux HIGH 7.8
CVE-2017-6305

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and write."

Fix: after 1.9
Fix from $1,950 2017-02-24
Debian Linux HIGH 7.8
CVE-2017-6306

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal using the filename; SanitizeFilen…

Fix: after 1.9
Fix from $1,950 2017-02-24
Debian Linux HIGH 7.8
CVE-2017-6307

An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to invalid r…

Fix: after 1.4.12
Fix from $1,950 2017-02-24