Vulnerabilities > Out-of-bounds Read

DATE CVE VULNERABILITY TITLE RISK
2018-09-01 CVE-2018-15158 Out-of-bounds Read vulnerability in Libesedb Project Libesedb 20180401
The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file.
network
low complexity
libesedb-project CWE-125
6.5
2018-09-01 CVE-2018-15157 Out-of-bounds Read vulnerability in Libfsclfs Project Libfsclfs 20170206
The libfsclfs_block_read function in libfsclfs_block.c in libfsclfs before 2018-07-25 allows remote attackers to cause a heap-based buffer over-read via a crafted clfs file.
network
low complexity
libfsclfs-project CWE-125
6.5
2018-08-30 CVE-2018-15363 Out-of-bounds Read vulnerability in Trendmicro products
An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations.
local
low complexity
trendmicro microsoft CWE-125
7.2
2018-08-29 CVE-2018-12827 Out-of-bounds Read vulnerability in Adobe Flash Player
Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability.
network
low complexity
adobe apple microsoft google linux redhat CWE-125
5.0
2018-08-29 CVE-2018-12826 Out-of-bounds Read vulnerability in Adobe Flash Player
Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability.
network
low complexity
adobe apple microsoft google linux redhat CWE-125
5.0
2018-08-29 CVE-2018-12824 Out-of-bounds Read vulnerability in multiple products
Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability.
4.3
2018-08-29 CVE-2018-16062 Out-of-bounds Read vulnerability in multiple products
dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.
5.5
2018-08-18 CVE-2018-15501 Out-of-bounds Read vulnerability in multiple products
In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "ng" packet that lacks a '\0' byte to trigger an out-of-bounds read that leads to DoS.
network
low complexity
debian libgit2 CWE-125
5.0
2018-08-17 CVE-2018-15471 Out-of-bounds Read vulnerability in multiple products
An issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c in the Linux kernel through 4.18.1, as used in Xen through 4.11.x and other products.
local
low complexity
xen linux canonical CWE-125
7.8
2018-08-16 CVE-2016-9598 Out-of-bounds Read vulnerability in multiple products
libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML document.
4.3