Archive
July 2018
Vulnerabilities first published in this month (UTC), newest first.
2,170 results · Feed
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the function RIFF::Chunk::Read in RIFF.cpp.
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "always assign the sample of the first d…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in the function RIFF::Chunk::Read in RIF…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdsp…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::SaveString in DLS.c…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store16 in …
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out of bounds read in gig::File::UpdateChunks in gig.cpp.
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "update dimension region's chunks" featu…
-
Unscored —
Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because o…
-
Unscored —
get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV).
-
Unscored —
In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infini…
-
Unscored —
trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.
-
Unscored —
libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read …
-
Unscored —CVE-2018-14442 Public exploit
Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4…
-
Unscored —
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds…
-
Unscored —
In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl…
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.
-
Unscored —
espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four …
-
Unscored —
An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadAction_fileUpload.ac…
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.
-
Unscored —
MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service (heap-b…
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.
-
Unscored —
An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeM…
-
Unscored —
The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2.13, and 3.3.x before v3.3.6 has XSS …
-
Critical 9.8
redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use …
-
High 7.5
redhat-certification does not properly restrict files that can be download through the /download page. A remote attacke…
-
Unscored —
The approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token, allows attack…
-
Unscored —CVE-2018-14336 Public exploit
TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets …
-
High 8.8
An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted…
-
High 8.8
An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially c…
-
High 8.8
An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted…
-
High 8.8
An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially cr…
-
High 8.8
An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially cr…
-
High 8.8
An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially c…
-
Unscored —
BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
-
Unscored —
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could…
-
Unscored —
Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in …