Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2017-03-24 CVE-2016-10272 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libtiff 4.0.7
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.
local
low complexity
libtiff CWE-119
7.8
2017-03-24 CVE-2016-10271 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libtiff 4.0.7
tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.
local
low complexity
libtiff CWE-119
7.8
2017-03-24 CVE-2016-10270 Out-of-bounds Read vulnerability in Libtiff 4.0.7
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22.
local
low complexity
libtiff CWE-125
7.8
2017-03-24 CVE-2016-10269 Out-of-bounds Read vulnerability in Libtiff 4.0.7
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.
local
low complexity
libtiff CWE-125
7.8
2017-03-24 CVE-2016-10268 Integer Underflow (Wrap or Wraparound) vulnerability in Libtiff 4.0.7
tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23.
local
low complexity
libtiff CWE-191
7.8
2017-03-24 CVE-2017-7243 NULL Pointer Dereference vulnerability in Eclipse Tinydtls 0.8.2
Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher spec" packet without pre-handshake.
network
low complexity
eclipse CWE-476
7.5
2017-03-24 CVE-2017-7240 Path Traversal vulnerability in Miele Professional Pst10 Webserver
An issue was discovered on Miele Professional PST10 devices.
network
low complexity
miele-professional CWE-22
7.5
2017-03-24 CVE-2017-5510 Out-of-bounds Write vulnerability in multiple products
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.
local
low complexity
imagemagick debian CWE-787
7.8
2017-03-24 CVE-2017-5509 Out-of-bounds Write vulnerability in Imagemagick
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.
local
low complexity
imagemagick CWE-787
7.8
2017-03-24 CVE-2017-5507 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consumption) via vectors involving a pixel cache.
network
low complexity
imagemagick debian CWE-772
7.5