Search vulnerabilities

Results 6,843

Export CSV
CVE-2018-16517

nasm: NULL Pointer Dereference in asm/labels.c

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 4.4% KEV · Not listed
Vendors
CVE-2018-16428

glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.

CVSS 3.0 · 9.8 Critical EPSS 4.6% KEV · Not listed
Vendors
Products
CVE-2018-16329

ImageMagick: NULL pointer dereference in GetMagickProperty function in MagickCore/property.c

In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c.

CVSS 3.0 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Products
CVE-2018-16328

ImageMagick: NULL pointer dereference in CheckEventLogging function in MagickCore/log.c

In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c.

CVSS 3.0 · 9.8 Critical EPSS 2.0% KEV · Not listed
CVE-2018-16004

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 7.8 High EPSS 3.9% KEV · Not listed
Products
CVE-2018-15937

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 7.8 High EPSS 28.0% KEV · Not listed
Products
CVE-2018-15931

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 7.8 High EPSS 27.8% KEV · Not listed
Products
CVE-2018-15930

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 7.8 High EPSS 27.8% KEV · Not listed
Products
CVE-2018-15864

libxkbcommon: NULL pointer dereference in resolve_keysym resulting in a crash

Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2018-15863

libxkbcommon: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash

Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2018-15862

libxkbcommon: NULL pointer dereference in LookupModMask resulting in a crash

Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2018-15861

libxkbcommon: NULL pointer dereference in ExprResolveLhs resulting in a crash

Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2018-15859

libxkbcommon: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash

Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2018-15858

libxkbcommon: NULL pointer dereference when handling invalid aliases in CopyKeyAliasesToKeymap resulting in a crash

Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2018-15855

libxkbcommon: NULL pointer dereference when handling xkb_geometry

Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkb_geometry section was mishandled.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2018-15854

libxkbcommon: NULL pointer dereference resulting in a crash

Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2018-15733

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a NULL Pointer Dereference vulnerability due to not validating the size of the output buffer value from IOCtl 0x80002028.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-15505

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially crafted "Host" header field may cause a NULL pointer dereference and thus cause a denial of service, as demonstrated by the lack of a trailing ']' character in an IPv6 address.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Products
CVE-2018-15504

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11.

CVSS 3.1 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Products
Appweb Goahead Ex2200 and 131 more
CVE-2018-15367

A ctl_set KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors