Browse CVEs

CRITICAL 9.8 CVE-2016-10711 Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751. Debian Linux after 2.7 Fix from $2,3002018-01-29 MEDIUM 6.5 CVE-2018-6392 The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array ac… Debian Linux after 3.4.1 Fix from $1,6002018-01-29 HIGH 7.8 CVE-2017-18078 systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protected_hardlinks sysctl… Debian Linux 237+ Fix from $1,9502018-01-29 HIGH 8.8 CVE-2018-6360 mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO element… Debian Linux after 0.28.0 Fix from $1,9502018-01-28 HIGH 8.8 CVE-2018-6358 The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to c… Debian Linux after 0.4.8 Fix from $1,9502018-01-27 HIGH 8.8 CVE-2018-6359 The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial o… Debian Linux after 0.4.8 Fix from $1,9502018-01-27 CRITICAL 9.8 CVE-2017-12377EPSS 12% ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of… Debian Linux after 0.99.2 Fix from $2,3002018-01-26 CRITICAL 9.8 CVE-2017-12379EPSS 13% ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of… Debian Linux after 0.99.2 Fix from $2,3002018-01-26 HIGH 7.8 CVE-2017-12376EPSS 7% ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of… Debian Linux after 0.99.2 Fix from $1,9502018-01-26 HIGH 7.5 CVE-2017-12374 The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denia… Debian Linux after 0.99.2 Fix from $1,9502018-01-26 HIGH 7.5 CVE-2017-12375EPSS 6% The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denia… Debian Linux after 0.99.2 Fix from $1,9502018-01-26 HIGH 7.5 CVE-2017-12380EPSS 5% ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of… Debian Linux after 0.99.2 Fix from $1,9502018-01-26 MEDIUM 5.5 CVE-2017-12378 ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of… Debian Linux after 0.99.2 Fix from $1,6002018-01-26 HIGH 8.8 CVE-2018-6315 The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds re… Debian Linux after 0.4.8 Fix from $1,9502018-01-25 HIGH 7.5 CVE-2017-15132 A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by log… Debian Linux after 2.2.33 Fix from $1,9502018-01-25 CRITICAL 9.1 CVE-2018-1000005 libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pu… Debian Linux after 7.57.0 Fix from $2,3002018-01-24 MEDIUM 5.5 CVE-2018-6192 In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation violatio… Debian Linux No fix yet Fix from $1,6002018-01-24 CRITICAL 9.8 CVE-2017-12176 xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server t… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12177 xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to cr… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12178 xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash o… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12179 xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X s… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12180 xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or pos… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12181 xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possib… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12182 xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possib… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12183 xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly ex… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12184 xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly … Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12185 xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or p… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12186 xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibl… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12187 xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly ex… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 MEDIUM 5.5 CVE-2018-6187 In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do_pdf_save_document function in the pdf/pdf-write.c file. Remote… Debian Linux No fix yet Fix from $1,6002018-01-24