Browse CVEs

CRITICAL 9.8 CVE-2018-8828EPSS 31% A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message wit… Debian Linux 4.4.7 / 5.0.6+ Fix from $2,3002018-03-20 MEDIUM 5.5 CVE-2018-8754 The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values… Debian Linux 20180317+ Fix from $1,6002018-03-18 HIGH 8.8 CVE-2018-8741 A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete) files from the hosting serve… Debian Linux Patch available Fix from $1,9502018-03-17 CRITICAL 9.8 CVE-2018-7033 SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD. Debian Linux 17.02.10.0 / 17.11.5.0+ Fix from $2,3002018-03-15 HIGH 7.8 CVE-2017-18234 An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy with resultant use-after-free… Debian Linux 2.4.3+ Fix from $1,9502018-03-15 MEDIUM 5.5 CVE-2017-18233 An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers… Debian Linux 2.4.4+ Fix from $1,6002018-03-15 MEDIUM 5.5 CVE-2017-18236 An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp allows re… Debian Linux 2.4.4+ Fix from $1,6002018-03-15 MEDIUM 5.5 CVE-2017-18238 An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTime_Support.cpp … Debian Linux 2.4.4+ Fix from $1,6002018-03-15 CRITICAL 9.8 CVE-2018-1000120EPSS 12% A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or … Debian Linux 7.2+ Fix from $2,3002018-03-14 CRITICAL 9.1 CVE-2018-1000122EPSS 9% A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of serv… Debian Linux 7.2+ Fix from $2,3002018-03-14 HIGH 7.5 CVE-2018-1000121EPSS 9% A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service Debian Linux 7.2+ Fix from $1,9502018-03-14 CRITICAL 9.1 CVE-2018-1000132 Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data… Debian Linux 4.5.1+ Fix from $2,3002018-03-14 MEDIUM 6.5 CVE-2017-18229 An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which… Debian Linux No fix yet Fix from $1,6002018-03-14 MEDIUM 6.5 CVE-2017-18230 An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon… Debian Linux Patch available Fix from $1,6002018-03-14 MEDIUM 6.5 CVE-2017-18231 An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c,… Debian Linux Patch available Fix from $1,6002018-03-14 MEDIUM 6.5 CVE-2018-8098 Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to … Debian Linux 0.26.2+ Fix from $1,6002018-03-14 MEDIUM 6.5 CVE-2018-8099 Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26.2, which allows an attacker … Debian Linux 0.26.2+ Fix from $1,6002018-03-14 HIGH 7.5 CVE-2018-1000127 memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can result in data corruption and deadlocks … Debian Linux 1.4.37+ Fix from $1,9502018-03-13 MEDIUM 5.5 CVE-2018-1000085 ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xar_hash_check() that can result in Lea… Debian Linux Patch available Fix from $1,6002018-03-13 CRITICAL 9.8 CVE-2018-1000076 RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 a… Debian Linux after 2.5.0 Fix from $2,3002018-03-13 HIGH 7.5 CVE-2018-1000075 RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 a… Debian Linux after 2.5.0 Fix from $1,9502018-03-13 MEDIUM 6.1 CVE-2018-1000078 RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 a… Debian Linux after 2.5.0 Fix from $1,6002018-03-13 MEDIUM 5.5 CVE-2018-1000069 FreePlane version 1.5.9 and earlier contains a XML External Entity (XXE) vulnerability in XML Parser in mindmap loader that can result in stealing da… Debian Linux after 1.5.9 Fix from $1,6002018-03-13 MEDIUM 5.3 CVE-2018-1000077 RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 a… Debian Linux after 2.5.0 Fix from $1,6002018-03-13 HIGH 7.5 CVE-2018-1000098 Teluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear t… Debian Linux after 2.7.1 Fix from $1,9502018-03-13 HIGH 7.5 CVE-2018-1000099 Teluu PJSIP version 2.7.1 and earlier contains a Access of Null/Uninitialized Pointer vulnerability in pjmedia SDP parsing that can result in Crash. … Debian Linux after 2.7.1 Fix from $1,9502018-03-13 HIGH 7.5 CVE-2017-2619EPSS 11% Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file s… Debian Linux 4.4.12 / 4.5.7+ Fix from $1,9502018-03-12 HIGH 8.8 CVE-2014-8129 LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF… Debian Linux Patch available Fix from $1,9502018-03-12 HIGH 7.5 CVE-2018-7998 In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows r… Debian Linux 8.6.3+ Fix from $1,9502018-03-09 MEDIUM 5.5 CVE-2018-1071 zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local attacker could exploit this to cau… Debian Linux after 5.4.2 Fix from $1,6002018-03-09