Lucene search
+L

2173 matches found

CNVD
CNVD
added 2018/03/05 12:00 a.m.12 views

Cimg 'load_bmp' function heap buffer out-of-bounds read vulnerability

CImg is an open source C++ tool library for image processing . A heap buffer out-of-bounds read vulnerability exists in the 'loadbmp' function of the CImg.h file in CImg version 220. No detailed vulnerability details are provided at this time...

7.8CVSS7.1AI score0.01214EPSS
SaveExploits1References1
OSV
OSV
added 2018/03/02 9:19 a.m.10 views

SUSE-SU-2018:0585-1 Security update for openexr

This update for openexr fixes the following issues: CVE-2017-9110: In OpenEXR, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash. bsc1040107 CVE-2017-9114: In OpenEXR, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cau...

7.8CVSS6.9AI score0.02001EPSS
SaveExploits1References7
CNVD
CNVD
added 2018/03/02 12:00 a.m.65 views

Cimg Heap Buffer Out-of-Bounds Read Vulnerability

CImg is an open source C++ tool library for image processing . A heap buffer out-of-bounds read vulnerability exists in CImg version 220. The vendor has released a security advisory and related patch information to fix this vulnerability, and users are advised to download and use it...

7.8CVSS6.8AI score0.01324EPSS
SaveExploits1References1
OSV
OSV
added 2018/02/23 9:29 p.m.8 views

CVE-2018-7435

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroycell function...

8.8CVSS8.7AI score
SaveExploits0References5
OSV
OSV
added 2018/02/15 4:29 p.m.8 views

CVE-2017-17202

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00,...

7.5CVSS5.8AI score0.01218EPSS
SaveExploits0References1
NVD
NVD
added 2018/02/15 4:29 p.m.27 views

CVE-2017-17283

Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00 have an out-of-bound read vulnerability. A remote attacker send specially...

5.3CVSS5.2AI score0.01207EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/02/13 12:00 a.m.11 views

Exiv2 'Exiv2::IptcData::printStructure' function out-of-bounds read vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. An out-of-bounds read vulnerability exists in the...

6.5CVSS6.9AI score0.02132EPSS
SaveExploits1References1
OSV
OSV
added 2018/01/31 10:58 a.m.9 views

SUSE-SU-2018:0311-1 Security update for openvswitch

This update for openvswitch fixes the following issues: CVE-2017-9263: While parsing an OpenFlow role status message, there is a call to the abort functio for undefined role status reasons in the function ofpprintrolestatusmessage in lib/ofp-print.c that may be leveraged toward a remote DoS attac...

9.8CVSS7.6AI score0.02887EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2018/01/25 12:00 a.m.29 views

SUSE SLED12 / SLES12 Security Update : libexif (SUSE-SU-2018:0193-1)

This update for libexif fixes several issues. These security issues were fixed : - CVE-2016-6328: Fixed integer overflow in parsing MNOTE entry data of the input file bsc1055857 - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c...

9.1CVSS6.8AI score0.03273EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2018/01/25 12:00 a.m.37 views

openSUSE Security Update : libexif (openSUSE-2018-86)

This update for libexif fixes several issues. These security issues were fixed : - CVE-2016-6328: Fixed integer overflow in parsing MNOTE entry data of the input file bsc1055857 - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c...

9.1CVSS6.8AI score0.03273EPSS
SaveExploits1References4
OSV
OSV
added 2018/01/24 11:14 a.m.15 views

SUSE-SU-2018:0193-1 Security update for libexif

This update for libexif fixes several issues. These security issues were fixed: - CVE-2016-6328: Fixed integer overflow in parsing MNOTE entry data of the input file bsc1055857 - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c...

9.1CVSS9.1AI score0.03273EPSS
SaveExploits1References5
OSV
OSV
added 2018/01/24 11:11 a.m.12 views

SUSE-SU-2018:0195-1 Security update for libexif

This update for libexif fixes the following security issue: - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or...

9.1CVSS8.6AI score0.03273EPSS
SaveExploits1References3
Adobe
Adobe
added 2018/01/09 12:00 a.m.42 views

APSB18-01 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address an important out-of-bounds read vulnerability that could lead to information exposure...

5CVSS2.2AI score0.05509EPSS
SaveExploits0Affected Software3
CVE
CVE
added 2018/01/04 4:00 a.m.80 views

CVE-2017-18019

Summary (CVE-2017-18019): K7 Total Security versions prior to 15.1.0.305 are affected by an input sanitization flaw in the K7Sentry device. User-controlled input can be used to compare an arbitrary memory address with a fixed value, enabling reading of arbitrary memory contents, and the product c...

7.1CVSS6.6AI score0.01242EPSS
SaveExploits2References1Affected Software1
OSV
OSV
added 2017/12/27 5:08 p.m.14 views

CVE-2017-17912

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region...

8.8CVSS9.3AI score
SaveExploits0References6
CVE
CVE
added 2017/12/19 3:00 p.m.60 views

CVE-2017-16786

The CVE-2017-16786 issue affects Meinberg LANTIME Web Configuration Utility on devices with firmware prior to 6.24.004. The vulnerability allows remote, authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to cgi-bin/mainv2, or (2) vect...

6.8CVSS6.2AI score0.02012EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2017/12/11 3:29 a.m.23 views

UBUNTU-CVE-2017-17507

In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Tconvstructopt in H5Tconv.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...

6.5CVSS7.2AI score0.01153EPSS
SaveExploits1References4
NVD
NVD
added 2017/12/11 3:29 a.m.28 views

CVE-2017-17506

In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Oplineplinedecode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...

6.5CVSS5.7AI score0.01271EPSS
SaveExploits1References1
OSV
OSV
added 2017/12/09 6:29 a.m.9 views

CVE-2017-16409

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...

8.8CVSS5.8AI score0.0672EPSS
SaveExploits0References3
Prion
Prion
added 2017/12/04 8:29 a.m.20 views

Arbitrary file deletion

Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/apptheme/libs/checkfile.php via $GET'src' or $GET'name'...

7.8CVSS7.5AI score0.01705EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder