Archive
April 2018
Vulnerabilities first published in this month (UTC), newest first.
1,670 results · Feed
-
High 8.8
An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite ve…
-
Medium 6.5
An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+a…
-
Medium 6.5
An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+a…
-
High 8.8
An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite …
-
Critical 9.8CVE-2017-2885 EPSS 23%
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP req…
-
Medium 6.5
An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP …
-
Unscored —
An exploitable dll hijacking vulnerability exists in the poaService.exe service component of the Dell Precision Optimiz…
-
High 8.8
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A…
-
High 7.5
An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite vers…
-
Medium 6.5
An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+andro…
-
High 8.8
An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3.…
-
High 8.8
An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation su…
-
High 8.8
An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite v…
-
High 8.8
An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite ve…
-
High 8.8
An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation su…
-
High 8.8
An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A spe…
-
High 8.8
An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2_image-2.0.2. A spec…
-
High 7.1
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted …
-
High 7.5
A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XC…
-
High 8.8
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A spec…
-
High 8.8
An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2_image-2.0.2. A spec…
-
Unscored —
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contig…
-
Unscored —
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPC…
-
Medium 6.6
Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible…
-
Unscored —
Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running vulnerability. An attacker may set up a…
-
Unscored —
Huawei AppGallery versions before 8.0.4.301 has a whitelist mechanism bypass vulnerability. An attacker may set up a ma…
-
Unscored —
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R0…
-
Unscored —
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R0…
-
Unscored —
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R0…
-
Unscored —
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R0…
-
Unscored —
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R0…
-
Unscored —
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R0…
-
Unscored —
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R0…
-
Unscored —
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R0…
-
Unscored —
The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded crede…
-
Unscored —
The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear t…
-
Unscored —CVE-2017-7651 Public exploit
In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of co…
-
Unscored —
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational …
-
Unscored —
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational …
-
Unscored —
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational …