Talos vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2019-5067 An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers.Critical 9.8 · Sep 18, 2019
• CVE-2019-5066 An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++.Critical 9.8 · Sep 18, 2019
• CVE-2019-5042 An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++.High 8.8 · Sep 18, 2019
• CVE-2019-5016 An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least tCritical 9.1 · Jun 17, 2019
• CVE-2018-4048 An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36 (Windows 64-bit InsHigh 7.8 · May 30, 2019
• CVE-2018-4050 An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS.High 7.8 · Apr 1, 2019
• CVE-2018-4059 An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9.Critical 9.8 · Mar 21, 2019
• CVE-2018-4058 An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9.High 7.7 · Mar 21, 2019
• CVE-2019-5015 A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool.High 7.8 · Mar 8, 2019
• CVE-2018-4054 A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0.High 7.8 · Mar 8, 2019
• CVE-2018-3980 An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0.High 7.8 · Feb 6, 2019
• CVE-2018-3976 An exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of Canvas Draw version 5.0.0.28.High 7.8 · Feb 6, 2019
• CVE-2018-3973 An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0.High 7.8 · Feb 6, 2019
• CVE-2018-4056 An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9.Critical 9.8 · Feb 5, 2019
• CVE-2018-4040 An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2.High 7.8 · Dec 1, 2018
• CVE-2018-4039 An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2.High 7.8 · Dec 1, 2018
• CVE-2018-4038 An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terHigh 7.8 · Dec 1, 2018
• CVE-2018-3951 An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server.High 7.2 · Dec 1, 2018
• CVE-2018-3950 An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3 httpHigh 8.8 · Nov 30, 2018
• CVE-2018-3949 An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN.High 7.5 · Nov 30, 2018
• CVE-2018-3971 An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744.High 7.8 · Oct 25, 2018
• CVE-2018-3981 An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0.High 7.8 · Oct 1, 2018
• CVE-2018-3885 An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6.High 8.8 · Sep 12, 2018
• CVE-2018-3884 An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6.High 8.8 · Sep 12, 2018
• CVE-2018-3883 An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6.High 8.8 · Sep 12, 2018