unspecified vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code...

Apple Iphone Os Apple Mac Os X Apple Tvos Apple Watchos

9.8

CVSSv3

The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization....

Libraw Libraw

7.5

CVSSv3

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass a Content Security Policy protection mechanism via unspecified vectors....

Apple Safari Apple Iphone Os3 Github repositories available2 Articles available

9.8

CVSSv3

Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact....

Miniupnp Project Miniupnpd 1.5 Miniupnp Project Miniupnpd 1.8 Miniupnp Project Miniupnpd 1.9 Miniupnp Project Miniupnpd 2.0 Miniupnp Project Miniupnpd 1.4 Miniupnp Project Miniupnpd 1.71 EDB exploit available1 Github repository available

7.8

CVSSv3

Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file. NOTE: there might be a limited number of scenarios in which this has security relevance....

Vim Vim 8.01 Github repository available

NA

Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact....

Libgd Gd Graphics Library 2.0.33 Libgd Gd Graphics Library 2.0.34 Libgd Gd Graphics Library 2.0.35 Libgd Gd Graphics Library

7.8

CVSSv3

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file....

Podofo Project Podofo 0.9.44 Github repositories available

7.8

CVSSv3

Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet....

Broadcom Tcpreplay

8.8

CVSSv3

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact....

File Project File 5.35 Debian Debian Linux 8.0 Opensuse Leap 15.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10

6.6

CVSSv3

sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (snd_usb_mixer_interrupt use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device....

Linux Linux Kernel1 Github repository available

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook