Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 467

Export CSV
CVE-2019-11038

Uninitialized read in gdImageCreateFromXbm

When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.

CVSS 3.1 · 5.3 Medium EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 5 more
Products
Ubuntu Linux Debian Linux Fedora and 11 more
CVE-2018-10195

lrzsz: Integer overflow in src/zm.c:zsdata() causes crash in sz and can leak information to receiver

lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Debian Lrzsz Project Suse
Products
Debian Linux Lrzsz Linux Enterprise Debuginfo and 2 more
CVE-2017-16232

libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c

LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue

CVSS 3.0 · 7.5 High EPSS 5.4% KEV · Not listed
Vendors
Libtiff Opensuse Suse
Products
Libtiff Leap Linux Enterprise Desktop and 2 more
CVE-2015-5239

qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg()

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.

CVSS 3.1 · 6.5 Medium EPSS 3.6% KEV · Not listed
Vendors
Arista Canonical Fedoraproject and 2 more
Products
Eos Ubuntu Linux Fedora and 5 more
CVE-2014-1947

ImageMagick: PSD writing layer name buffer overflow ("L%02ld")

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different vulnerability than CVE-2014-2030.

CVSS 3.1 · 7.8 High EPSS 7.0% KEV · Not listed
Vendors
Imagemagick Suse
Products
Imagemagick Linux Enterprise Desktop Linux Enterprise Server and 1 more