Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2017-10-05 CVE-2017-12245 Missing Release of Resource after Effective Lifetime vulnerability in Cisco Secure Firewall Management Center
A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause depletion of system memory, aka a Firepower Detection Engine SSL Decryption Memory Consumption Denial of Service vulnerability.
network
low complexity
cisco CWE-772
8.6
2017-10-05 CVE-2017-12244 Improper Input Validation vulnerability in Cisco Secure Firewall Management Center
A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause high CPU utilization or to cause a denial of service (DoS) condition because the Snort process restarts unexpectedly.
network
low complexity
cisco CWE-20
8.6
2017-10-05 CVE-2017-15020 Out-of-bounds Read vulnerability in GNU Binutils 2.29
dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file, related to parse_die and parse_line_table, as demonstrated by a parse_die heap-based buffer over-read.
local
low complexity
gnu CWE-125
7.8
2017-10-05 CVE-2017-15019 NULL Pointer Dereference vulnerability in Lame Project Lame 3.99.5
LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call.
local
low complexity
lame-project CWE-476
7.8
2017-10-05 CVE-2017-15017 NULL Pointer Dereference vulnerability in multiple products
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c.
network
low complexity
imagemagick canonical CWE-476
8.8
2017-10-05 CVE-2017-15016 NULL Pointer Dereference vulnerability in multiple products
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c.
network
low complexity
imagemagick canonical CWE-476
8.8
2017-10-05 CVE-2017-15015 NULL Pointer Dereference vulnerability in multiple products
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c.
network
low complexity
imagemagick canonical CWE-476
8.8
2017-10-05 CVE-2017-13993 Uncontrolled Search Path Element vulnerability in I-Sens Smartlog Diabetes Management Software 2.4.0
An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions.
local
low complexity
i-sens CWE-427
7.8
2017-10-05 CVE-2017-12728 Improper Privilege Management vulnerability in Spidercontrol Scada Webserver 2.02.0007
An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior.
local
low complexity
spidercontrol CWE-269
7.8
2017-10-05 CVE-2017-1000253 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015).
local
low complexity
redhat centos linux CWE-119
7.8