Browse CVEs

HIGH 8.6 CVE-2018-17961EPSS 10% Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this i… Debian Linux Patch available Fix from $1,9502018-10-15 MEDIUM 5.5 CVE-2018-18310 An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.174. The vulnerability allows … Debian Linux after 0.174 Fix from $1,6002018-10-15 MEDIUM 5.9 CVE-2018-16758 Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryptio… Debian Linux after 1.0.34 Fix from $1,6002018-10-10 CRITICAL 9.8 CVE-2018-17963 qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possib… Debian Linux after 3.0.0 Fix from $2,3002018-10-09 MEDIUM 6.5 CVE-2018-18088 OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c Debian Linux No fix yet Fix from $1,6002018-10-09 MEDIUM 6.5 CVE-2018-18065EPSS 17% _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to … Debian Linux 5.8+ Fix from $1,6002018-10-08 MEDIUM 6.5 CVE-2018-18025 In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a d… Debian Linux Patch available Fix from $1,6002018-10-07 MEDIUM 6.5 CVE-2018-0504 Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid Debian Linux 1.31.1+ Fix from $1,6002018-10-04 MEDIUM 6.5 CVE-2018-0505 Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock Debian Linux 1.31.1+ Fix from $1,6002018-10-04 HIGH 7.5 CVE-2018-17540 The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate. Debian Linux 5.7.1+ Fix from $1,9502018-10-03 HIGH 7.8 CVE-2015-9268 Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechani… Debian Linux 2.49+ Fix from $1,9502018-10-01 MEDIUM 5.5 CVE-2015-9267 Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This al… Debian Linux 2.49+ Fix from $1,6002018-10-01 HIGH 7.5 CVE-2018-14648EPSS 6% A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An un… Debian Linux 1.4.0.17+ Fix from $1,9502018-09-28 MEDIUM 6.5 CVE-2018-17581 CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of se… Debian Linux Patch available Fix from $1,6002018-09-28 MEDIUM 6.5 CVE-2018-16587 In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to a… Debian Linux 4.0.32 / 5.0.30+ Fix from $1,6002018-09-28 HIGH 7.5 CVE-2018-16151 In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GM… Debian Linux 5.7.0+ Fix from $1,9502018-09-26 HIGH 7.5 CVE-2018-16152 In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GM… Debian Linux 5.7.0+ Fix from $1,9502018-09-26 HIGH 7.5 CVE-2018-17281EPSS 53% There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 1… Debian Linux after 15.6.0 Fix from $1,9502018-09-24 CRITICAL 9.8 CVE-2018-17141EPSS 6% HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit en… Debian Linux No fix yet Fix from $2,3002018-09-21 HIGH 8.8 CVE-2018-16515 Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction… Debian Linux 0.33.3.1+ Fix from $1,9502018-09-18 HIGH 7.5 CVE-2018-13982 Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitiza… Debian Linux 3.1.33+ Fix from $1,9502018-09-18 HIGH 8.8 CVE-2018-17100 An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause a denial of service (crash) o… Debian Linux Patch available Fix from $1,9502018-09-16 HIGH 8.8 CVE-2018-17101 An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a deni… Debian Linux Patch available Fix from $1,9502018-09-16 HIGH 7.5 CVE-2018-12086EPSS 12% Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests. Debian Linux after 1.03.352.12 Fix from $1,9502018-09-14 MEDIUM 6.5 CVE-2018-17000 A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an a… Debian Linux No fix yet Fix from $1,6002018-09-13 HIGH 7.8 CVE-2018-16741 An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanitize shell metacharacters to p… Debian Linux 1.2.1+ Fix from $1,9502018-09-13 HIGH 8.8 CVE-2018-16981 stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function. Debian Linux No fix yet Fix from $1,9502018-09-12 CRITICAL 9.8 CVE-2018-16947 An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not… Debian Linux 1.6.23 / 1.8.2+ Fix from $2,3002018-09-12 HIGH 7.5 CVE-2018-16948 An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server routines did not fully initialize their output variables … Debian Linux 1.6.23 / 1.8.2+ Fix from $1,9502018-09-12 HIGH 7.5 CVE-2018-16949 An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used as RPC input variables were implemented as unbounded… Debian Linux 1.6.23 / 1.8.2+ Fix from $1,9502018-09-12