Overview 1,736 matches · 2 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 273 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
2
0.1%
No exploit published
0
0.0%
Outside Waratek scope
9
0.5%
Not applicable
1,725
99.4%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,736
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
1,736
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 237 / year
19971
Not applicable1
High1
not blocked1
Working exploit published1
19982
Not applicable2
High2
not blocked2
Working exploit published2
19993
Not applicable3
Critical1
High1
Medium1
not blocked3
Working exploit published3
20000
20014
Not applicable4
High3
Medium1
not blocked4
Working exploit published4
200214
Mitigation candidate1
Not applicable13
High11
Medium3
not blocked14
Working exploit published14
200320
Not applicable20
High10
Medium10
not blocked20
Working exploit published20
20048
Not applicable8
High4
Medium4
not blocked8
Working exploit published8
200514
Not applicable14
High11
Medium2
Low1
not blocked14
Working exploit published14
200657
Not applicable57
High39
Medium17
Low1
not blocked57
Working exploit published57
2007153
Outside Waratek scope4
Not applicable149
High103
Medium49
Low1
not blocked153
Working exploit published153
2008214
Outside Waratek scope1
Not applicable213
High175
Medium39
not blocked214
Working exploit published214
2009237
Mitigation candidate1
Outside Waratek scope2
Not applicable234
High206
Medium31
not blocked237
Working exploit published237
2010128
Not applicable128
High110
Medium18
not blocked128
Working exploit published128
201193
Not applicable93
High76
Medium17
not blocked93
Working exploit published93
2012114
Outside Waratek scope1
Not applicable113
High68
Medium44
Low2
not blocked114
Working exploit published114
201373
Not applicable73
High52
Medium21
not blocked73
Working exploit published73
2014116
Not applicable116
High101
Medium14
Low1
not blocked116
Working exploit published116
201577
Not applicable77
High66
Medium11
not blocked77
Working exploit published77
201684
Not applicable84
Critical23
High56
Medium5
not blocked84
Working exploit published84
2017235
Outside Waratek scope1
Not applicable234
Critical43
High177
Medium15
not blocked235
Working exploit published235
201852
Not applicable52
Critical13
High33
Medium6
not blocked52
Working exploit published52
201924
Not applicable24
Critical11
High13
not blocked24
Working exploit published24
20203
Not applicable3
Critical2
High1
not blocked3
Working exploit published3
20210
20220
20230
20242
Not applicable2
High1
Medium1
not blocked2
Working exploit published2
20258
Not applicable8
Critical1
High3
Medium4
not blocked8
Working exploit published8
1998200120042007201020132016201920222025
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2025-10666 | High | 2025-09-18 | Not applicable | Working exploit published | A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnerability is the function sub_4106d4 of the file apply.cgi. The manipulation of the argument countdown_time results in buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be exploited. This vulnerability only affects products that are no longer supported by the maintainer. |
| CVE-2025-7795 | High | 2025-07-18 | Not applicable | Working exploit published | A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. Affected by this issue is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. |
| CVE-2025-34106 | High | 2025-07-15 | Not applicable | Working exploit published | A buffer overflow vulnerability exists in PDF Shaper versions 3.5 and 3.6 when converting a crafted PDF file to an image using the 'Convert PDF to Image' functionality. An attacker can exploit this vulnerability by tricking a user into opening a maliciously crafted PDF file, leading to arbitrary code execution under the context of the user. This vulnerability has been verified on Windows XP, 7, 8, and 10 platforms using the PDFTools.exe component. |
| CVE-2025-34096 | Critical | 2025-07-10 | Not applicable | Working exploit published | A stack-based buffer overflow vulnerability exists in Easy File Sharing HTTP Server version 7.2. The flaw is triggered when a crafted POST request is sent to the /sendemail.ghp endpoint containing an overly long Email parameter. The application fails to properly validate the length of this field, resulting in a memory corruption condition. An unauthenticated remote attacker can exploit this to execute arbitrary code with the privileges of the server process. |
| CVE-2025-5640 | Medium | 2025-06-05 | Not applicable | Working exploit published | A vulnerability was found in PX4-Autopilot 1.12.3. It has been classified as problematic. This affects the function MavlinkReceiver::handle_message_trajectory_representation_waypoints of the file mavlink_receiver.cpp of the component TRAJECTORY_REPRESENTATION_WAYPOINTS Message Handler. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. |
| CVE-2025-5548 | Medium | 2025-06-04 | Not applicable | Working exploit published | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. |
| CVE-2025-4871 | Medium | 2025-05-18 | Not applicable | Working exploit published | A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. |
| CVE-2025-4255 | Medium | 2025-05-05 | Not applicable | Working exploit published | A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RMD Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. |
| CVE-2024-12344 | Medium | 2024-12-08 | Not applicable | Working exploit published | A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unknown part of the component FTP USER Command Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. |
| CVE-2024-11237 | High | 2024-11-15 | Not applicable | Working exploit published | A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. |
| CVE-2015-0565 | Critical | 2020-02-25 | Not applicable | Working exploit published | NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible. |
| CVE-2013-7185 | High | 2020-01-14 | Not applicable | Working exploit published | PotPlayer 1.5.40688: .avi File Memory Corruption |
| CVE-2012-4750 | Critical | 2020-01-13 | Not applicable | Working exploit published | A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, which could let a remote malicious user execute arbitrary code or cause a Denial of Service |
| CVE-2013-2739 | Critical | 2019-11-01 | Not applicable | Working exploit published | MiniDLNA has heap-based buffer overflow |
| CVE-2019-8196 | Critical | 2019-10-17 | Not applicable | Working exploit published | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution . |
| CVE-2019-8195 | Critical | 2019-10-17 | Not applicable | Working exploit published | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution . |
| CVE-2019-8048 | Critical | 2019-08-20 | Not applicable | Working exploit published | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution . |
| CVE-2019-8045 | Critical | 2019-08-20 | Not applicable | Working exploit published | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution . |
| CVE-2019-8017 | Critical | 2019-08-20 | Not applicable | Working exploit published | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution . |
| CVE-2019-1145 | High | 2019-08-14 | Not applicable | Working exploit published | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. There are multiple ways an attacker could exploit the vulnerability: In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file. The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts. |
| CVE-2019-1913 | Critical | 2019-08-07 | Not applicable | Working exploit published | Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The vulnerabilities are due to insufficient validation of user-supplied input and improper boundary checks when reading data into an internal buffer. An attacker could exploit these vulnerabilities by sending malicious requests to the web management interface of an affected device. Depending on the configuration of the affected switch, the malicious requests must be sent via HTTP or HTTPS. |
| CVE-2019-7181 | High | 2019-05-09 | Not applicable | Working exploit published | Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program. |
| CVE-2018-4442 | High | 2019-04-03 | Not applicable | Working exploit published | A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9. |
| CVE-2018-4441 | High | 2019-04-03 | Not applicable | Working exploit published | A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9. |
| CVE-2018-4438 | High | 2019-04-03 | Not applicable | Working exploit published | A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9. |
| CVE-2018-4416 | High | 2019-04-03 | Not applicable | Working exploit published | Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8. |
| CVE-2018-4384 | High | 2019-04-03 | Not applicable | Working exploit published | A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, watchOS 5.1. |
| CVE-2018-4382 | High | 2019-04-03 | Not applicable | Working exploit published | Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8. |
| CVE-2018-4367 | Critical | 2019-04-03 | Not applicable | Working exploit published | A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1. |
| CVE-2018-4366 | High | 2019-04-03 | Not applicable | Working exploit published | A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1. |
| CVE-2018-4328 | High | 2019-04-03 | Not applicable | Working exploit published | Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7. |
| CVE-2018-4323 | High | 2019-04-03 | Not applicable | Working exploit published | Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7. |
| CVE-2019-6224 | High | 2019-03-05 | Not applicable | Working exploit published | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution. |
| CVE-2019-6213 | High | 2019-03-05 | Not applicable | Working exploit published | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges. |
| CVE-2019-8375 | Critical | 2019-02-24 | Not applicable | Working exploit published | The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany). |
| CVE-2018-19862 | Critical | 2019-01-03 | Not applicable | Working exploit published | Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST request. NOTE: this product is discontinued. |
| CVE-2018-19861 | Critical | 2019-01-03 | Not applicable | Working exploit published | Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request. NOTE: this product is discontinued. |
| CVE-2018-19864 | Critical | 2018-12-05 | Not applicable | Working exploit published | NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device. |
| CVE-2018-19459 | High | 2018-11-22 | Not applicable | Working exploit published | Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file. |
| CVE-2018-18759 | High | 2018-11-16 | Not applicable | Working exploit published | Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow. |
| CVE-2018-8552 | High | 2018-11-14 | Not applicable | Working exploit published | An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Windows Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. |
| CVE-2018-9515 | High | 2018-10-02 | Not applicable | Working exploit published | In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-111641492 References: N/A |
| CVE-2017-1085 | High | 2018-09-12 | Not applicable | Working exploit published | In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only memory region below the stack into a read-write region. A specially crafted executable could be exploited to execute arbitrary code in the user context. |
| CVE-2017-1084 | High | 2018-09-12 | Not applicable | Working exploit published | In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written process could be cause a stack overflow. |
| CVE-2018-12897 | High | 2018-09-07 | Not applicable | Working exploit published | SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow. |
| CVE-2018-16302 | High | 2018-09-01 | Not applicable | Working exploit published | MediaComm Zip-n-Go before 4.95 has a Buffer Overflow via a crafted file. |
| CVE-2018-15839 | Critical | 2018-08-28 | Not applicable | Working exploit published | D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header. |
| CVE-2018-15120 | Medium | 2018-08-24 | Not applicable | Working exploit published | libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences. |
| CVE-2018-15172 | High | 2018-08-15 | Not applicable | Working exploit published | TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header. |
| CVE-2018-10018 | High | 2018-07-13 | Not applicable | Working exploit published | The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument. |
| CVE-2018-10594 | Critical | 2018-06-26 | Not applicable | Working exploit published | Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network packets via a specific network port, causing the buffer to be overwritten. This may allow remote code execution, cause the application to crash, or result in a denial-of-service condition in the application server. |
| CVE-2018-12706 | Critical | 2018-06-24 | Not applicable | Working exploit published | DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header. |
| CVE-2018-1120 | Medium | 2018-06-20 | Not applicable | Working exploit published | A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks). |
| CVE-2018-12326 | High | 2018-06-17 | Not applicable | Working exploit published | Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privileges via a crafted command line. NOTE: It is unclear whether there are any common situations in which redis-cli is used with, for example, a -h (aka hostname) argument from an untrusted source. |
| CVE-2017-5375 | Critical | 2018-06-11 | Not applicable | Working exploit published | JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51. |
| CVE-2018-4243 | High | 2018-06-08 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in getvolattrlist allows attackers to execute arbitrary code in a privileged context via a crafted app. |
| CVE-2018-4241 | High | 2018-06-08 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcp_usr_connectx allows attackers to execute arbitrary code in a privileged context via a crafted app. |
| CVE-2018-4206 | High | 2018-06-08 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Crash Reporter" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app that replaces a privileged port name. |
| CVE-2018-4193 | High | 2018-06-08 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Windows Server" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. |
| CVE-2018-1123 | High | 2018-05-23 | Not applicable | Working exploit published | procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service). |
| CVE-2018-4936 | Medium | 2018-05-19 | Not applicable | Working exploit published | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. Successful exploitation could lead to information disclosure. |
| CVE-2018-10655 | High | 2018-05-10 | Not applicable | Working exploit published | DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer Overflow (SEH). |
| CVE-2018-10253 | High | 2018-04-21 | Not applicable | Working exploit published | Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls. |
| CVE-2018-9059 | Critical | 2018-04-20 | Not applicable | Working exploit published | Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791. |
| CVE-2018-4162 | High | 2018-04-03 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. |
| CVE-2018-4139 | High | 2018-04-03 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. |
| CVE-2018-4121 | High | 2018-04-03 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. |
| CVE-2018-4089 | High | 2018-04-03 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. tvOS before 11.2.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. |
| CVE-2018-4087 | High | 2018-04-03 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Core Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. |
| CVE-2018-4083 | High | 2018-04-03 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Touch Bar Support" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. |
| CVE-2017-7005 | High | 2018-04-03 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. |
| CVE-2018-9128 | High | 2018-04-01 | Not applicable | Working exploit published | DVD X Player Standard 5.5.3.9 has a Buffer Overflow via a crafted .plf file, a related issue to CVE-2007-3068. |
| CVE-2018-1218 | High | 2018-03-19 | Not applicable | Working exploit published | In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the 'nsrd' daemon causes a buffer overflow condition when handling certain messages. A remote unauthenticated attacker could potentially exploit this vulnerability to cause a denial of service to the users of NetWorker systems. |
| CVE-2018-7886 | High | 2018-03-15 | Not applicable | Working exploit published | An issue was discovered in CloudMe 1.11.0. An unauthenticated local attacker that can connect to the "CloudMe Sync" client application listening on 127.0.0.1 port 8888 can send a malicious payload causing a buffer overflow condition. This will result in code execution, as demonstrated by a TCP reverse shell, or a crash. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-6892. |
| CVE-2018-7584 | Critical | 2018-03-01 | Not applicable | Working exploit published | In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in copying a large string. |
| CVE-2018-7573 | Critical | 2018-03-01 | Not applicable | Working exploit published | An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. This is similar to CVE-2009-3364 and CVE-2017-6465. |
| CVE-2018-6481 | Critical | 2018-02-27 | Not applicable | Working exploit published | A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9124. |
| CVE-2018-7284 | High | 2018-02-22 | Not applicable | Working exploit published | A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the res_pjsip_pubsub module stores the accepted formats present in the Accept headers of the request. This code did not limit the number of headers it processed, despite having a fixed limit of 32. If more than 32 Accept headers were present, the code would write outside of its memory and cause a crash. |
| CVE-2017-6193 | Medium | 2018-02-20 | Not applicable | Working exploit published | Buffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted image containing a malformed image size descriptor in the IHDR chunk. |
| CVE-2017-6192 | Medium | 2018-02-20 | Not applicable | Working exploit published | Buffer overflow in APNGDis 2.8 and earlier allows a remote attackers to cause denial of service and possibly execute arbitrary code via a crafted image containing a malformed chunk size descriptor. |
| CVE-2017-12718 | High | 2018-02-15 | Not applicable | Working exploit published | A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify input buffer size prior to copying, leading to a buffer overflow, allowing remote code execution on the target device. The pump receives the potentially malicious input infrequently and under certain conditions, increasing the difficulty of exploitation. |
| CVE-2018-6892 | Critical | 2018-02-11 | Not applicable | Working exploit published | An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution. |
| CVE-2017-1000409 | High | 2018-02-01 | Not applicable | Working exploit published | A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366. |
| CVE-2018-5701 | Critical | 2018-01-31 | Not applicable | Working exploit published | In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003. |
| CVE-2017-13696 | Critical | 2018-01-24 | Not applicable | Working exploit published | A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component. Successful exploitation of the software will allow an attacker to gain complete access to the system with NT AUTHORITY / SYSTEM level privileges. The vulnerability lies due to improper handling and sanitization of the incoming request. |
| CVE-2018-5359 | High | 2018-01-23 | Not applicable | Working exploit published | The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access because of a Buffer Overflow. |
| CVE-2017-18047 | Critical | 2018-01-22 | Not applicable | Working exploit published | Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long reply. |
| CVE-2018-5189 | High | 2018-01-11 | Not applicable | Working exploit published | Race condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service (buffer overflow) or gain system privileges by flipping pool buffer size, aka a "double fetch" vulnerability. |
| CVE-2014-7221 | Medium | 2018-01-08 | Not applicable | Working exploit published | TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and application crash) by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab containing [img]//http:// substrings. |
| CVE-2017-17968 | Critical | 2017-12-29 | Not applicable | Working exploit published | A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response. |
| CVE-2017-17932 | Critical | 2017-12-28 | Not applicable | Working exploit published | A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888. |
| CVE-2017-17849 | Critical | 2017-12-27 | Not applicable | Working exploit published | A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response. |
| CVE-2017-16995 | High | 2017-12-27 | Not applicable | Working exploit published | The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension. |
| CVE-2017-13876 | High | 2017-12-25 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. |
| CVE-2017-13867 | High | 2017-12-25 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. |
| CVE-2017-13861 | High | 2017-12-25 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOSurface" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. |
| CVE-2017-13847 | High | 2017-12-25 | Not applicable | Working exploit published | An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. |
| CVE-2017-17088 | High | 2017-12-19 | Not applicable | Working exploit published | The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests in the Host header on making a connection, resulting in a classic Buffer Overflow that causes a Denial of Service. |
| CVE-2017-15048 | High | 2017-12-19 | Not applicable | Working exploit published | Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler. |
| CVE-2017-3195 | Critical | 2017-12-16 | Not applicable | Working exploit published | Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges. |