Browse CVEs

MEDIUM 6.1 CVE-2017-5938 Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote atta… Debian Linux after 1.1.25 Fix from $1,6002017-03-15 HIGH 8.8 CVE-2016-8714 An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafte… Debian Linux No fix yet Fix from $1,9502017-03-10 HIGH 7.5 CVE-2017-6800 An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during handling of LONG data types, r… Debian Linux after 1.9.1 Fix from $1,9502017-03-10 HIGH 7.5 CVE-2017-6801 An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef. Debian Linux after 1.9.1 Fix from $1,9502017-03-10 HIGH 7.5 CVE-2017-6802 An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to Decomp… Debian Linux after 1.9.1 Fix from $1,9502017-03-10 CRITICAL 9.8 CVE-2016-8863EPSS 8% Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attac… Debian Linux after 1.6.20 Fix from $2,3002017-03-07 HIGH 7.5 CVE-2016-6255EPSS 27% Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registe… Debian Linux after 1.6.20 Fix from $1,9502017-03-07 MEDIUM 5.5 CVE-2013-5653 The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted p… Debian Linux Patch available Fix from $1,6002017-03-07 MEDIUM 5.5 CVE-2016-5315 The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a c… Debian Linux after 4.0.6 Fix from $1,6002017-03-07 HIGH 7.8 CVE-2016-10244 The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote atta… Debian Linux 2.7.1+ Fix from $1,9502017-03-06 MEDIUM 5.5 CVE-2017-6498 An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS. Debian Linux Patch available Fix from $1,6002017-03-06 MEDIUM 5.5 CVE-2017-6499 An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a D… Debian Linux Patch available Fix from $1,6002017-03-06 MEDIUM 5.5 CVE-2017-6500 An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read. Debian Linux Patch available Fix from $1,6002017-03-06 HIGH 7.5 CVE-2017-5193EPSS 6% The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message w… Debian Linux 0.8.21+ Fix from $1,9502017-03-03 HIGH 7.5 CVE-2017-5194 Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message. Debian Linux 0.8.21+ Fix from $1,9502017-03-03 HIGH 7.5 CVE-2017-5356 Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence… Debian Linux 0.8.21+ Fix from $1,9502017-03-03 MEDIUM 5.5 CVE-2016-9830 The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service (crash) via large dimensions in … Debian Linux Patch available Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5974 Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows re… Debian Linux No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5975 Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows re… Debian Linux No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5976 Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0… Debian Linux No fix yet Fix from $1,6002017-03-01 MEDIUM 6.5 CVE-2016-9559 coders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted i… Debian Linux 6.9.6-5 / 7.0.3-7+ Fix from $1,6002017-03-01 HIGH 7.8 CVE-2017-6298 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / calloc return value not checked." Debian Linux after 1.9 Fix from $1,9502017-02-24 HIGH 7.8 CVE-2017-6300 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in version field in lib/tnef-types.h." Debian Linux after 1.9 Fix from $1,9502017-02-24 HIGH 7.8 CVE-2017-6301 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads." Debian Linux after 1.9 Fix from $1,9502017-02-24 HIGH 7.8 CVE-2017-6302 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow." Debian Linux after 1.9 Fix from $1,9502017-02-24 HIGH 7.8 CVE-2017-6303 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Integer Overflow." Debian Linux after 1.9 Fix from $1,9502017-02-24 HIGH 7.8 CVE-2017-6304 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read." Debian Linux after 1.9 Fix from $1,9502017-02-24 HIGH 7.8 CVE-2017-6305 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and write." Debian Linux after 1.9 Fix from $1,9502017-02-24 HIGH 7.8 CVE-2017-6306 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal using the filename; SanitizeFilen… Debian Linux after 1.9 Fix from $1,9502017-02-24 HIGH 7.8 CVE-2017-6307 An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to invalid r… Debian Linux after 1.4.12 Fix from $1,9502017-02-24