Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 42

Export CSV
CVE-2018-14550

libpng: Stack-based buffer overflow in contrib/pngminus/pnm2png.c:get_token() potentially leading to arbitrary code execution

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.

CVSS 3.1 · 8.8 High EPSS 3.5% KEV · Not listed
Vendors
Libpng Netapp Oracle
Products
Libpng Active Iq Unified Manager Oncommand Api Services and 2 more
CVE-2018-10933

libssh: Authentication Bypass due to improper message callbacks implementation

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

CVSS 3.0 · 9.1 Critical EPSS 91.8% KEV · Not listed
Vendors
Canonical Debian Libssh and 3 more
Products
Ubuntu Linux Debian Linux Libssh and 7 more