Lucene search
+L

3370 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/18 12:00 a.m.•5 views

CVE-2014-10048: Improper Validation of Array Index

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820,...

10CVSS8.1AI score0.01185EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/18 12:00 a.m.•10 views

CVE-2014-10044: Improper Validation of Array Index

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 617, SD 800, and SD 820, in the time daemon, unauthorized users can potentially modify system time and cause an array index to be out-of-bound...

7.5CVSS7.2AI score0.00665EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/04/18 12:00 a.m.•7 views

PT-2018-4136

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue allows unauthorized users to potentially modify system time, leading to an out-of-bound array index in the time daemon. Recommendations For Android versions prior ...

7.5CVSS0.00665EPSS
SaveExploits0References3
Prion
Prion
•added 2018/04/03 5:29 p.m.•20 views

Design/Logic Flaw

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in function wmawowwakeuphostevent, wakeinfo-vdevid is received from FW and is used directly as array index to access wma-interfaces...

7.5CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/23 12:00 a.m.•10 views

CVE-2017-15861: Improper Validation of Array Index

In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wmaroamsyncheventhandler, vdevid is received from firmware and used to access an array without validation...

7.8CVSS7.1AI score0.00148EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/01/29 12:00 a.m.•23 views

SUSE SLED12 / SLES12 Security Update : transfig (SUSE-SU-2018:0231-1)

This update for transfig fixes the following issues: Security issue fixed : - CVE-2017-16899: Fix array index error in the fig2dev program bsc1069257. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted t...

7.1CVSS6.7AI score0.0135EPSS
SaveExploits0References4
OSV
OSV
•added 2018/01/26 7:45 a.m.•13 views

SUSE-SU-2018:0232-1 Security update for transfig

This update for transfig fixes the following issues: Security issue fixed: - CVE-2017-16899: Fix array index error in the fig2dev program bsc1069257...

7.1CVSS6.9AI score0.0135EPSS
SaveExploits0References3
OSV
OSV
•added 2018/01/26 7:44 a.m.•8 views

SUSE-SU-2018:0231-1 Security update for transfig

This update for transfig fixes the following issues: Security issue fixed: - CVE-2017-16899: Fix array index error in the fig2dev program bsc1069257...

7.1CVSS6.9AI score0.0135EPSS
SaveExploits0References3
OSV
OSV
•added 2017/12/09 6:29 a.m.•11 views

CVE-2017-16391

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...

8.8CVSS5.8AI score0.0672EPSS
SaveExploits0References3
Prion
Prion
•added 2017/12/09 6:29 a.m.•27 views

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...

9.3CVSS9AI score0.0672EPSS
SaveExploits0References3Affected Software4
CVE
CVE
•added 2017/12/09 6:00 a.m.•104 views

CVE-2017-16391

A memory corruption vulnerability exists in Adobe Acrobat and Reader versions 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , and 11.0.22 and earlier . The root cause is the use of untrusted input to calculate an array index within the printing functionality...

9.3CVSS8.9AI score0.0672EPSS
SaveIn wildExploits0References3Affected Software4
Cvelist
Cvelist
•added 2017/12/09 6:00 a.m.•37 views

CVE-2017-16391

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...

9.1AI score0.0672EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/09 12:00 a.m.•6 views

CVE-2017-16391: Improper Validation of Array Index

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...

9.3CVSS8AI score0.0672EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/09 12:00 a.m.•5 views

CVE-2017-16410: Improper Validation of Array Index

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...

9.3CVSS8AI score0.08512EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2017/11/20 6:29 p.m.•22 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

7.1CVSS6.8AI score0.0135EPSS
SaveExploits0References1
Prion
Prion
•added 2017/11/20 6:29 p.m.•25 views

Format string

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

5.8CVSS6.6AI score0.0135EPSS
SaveExploits0References1Affected Software2
NVD
NVD
•added 2017/11/20 6:29 p.m.•20 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

7.1CVSS6.6AI score0.0135EPSS
SaveExploits0References1
CVE
CVE
•added 2017/11/20 6:00 p.m.•79 views

CVE-2017-16899

CVE-2017-16899 affects the Xfig figure conversion tool (fig2dev) in the fig2dev program, with an array index error related to a negative font value in dev/gentikz.c and in the read_textobject routines (read.c and read1_3.c). The vulnerability can allow remote attackers to cause a denial-of-servic...

7.1CVSS6.5AI score0.0135EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2017/11/20 6:00 p.m.•58 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

6.6AI score0.0135EPSS
SaveExploits0References1
Mend
Mend
•added 2017/11/20 6:00 p.m.•2 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

7.1CVSS0.0135EPSS
SaveExploits0References2
Rows per page
Query Builder