Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
2,600 results · page 15 of 52
Jan 3, 2018In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact becauCVE-2018-5080 · Other software · K7computing · reported by MITREHigh 7.8
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020FC.
- Product
- Antivirus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 3, 2018In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact becauCVE-2018-5079 · Other software · K7computing · reported by MITREHigh 7.8
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002130.
- Product
- Antivirus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 20, 2017In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact becCVE-2017-17804 · Other software · Ikarussecurity · reported by MITREHigh 7.8
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000084.
- Product
- Anti.virus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 20, 2017In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact becCVE-2017-17797 · Other software · Ikarussecurity · reported by MITREHigh 7.8
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000058.
- Product
- Anti.virus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 20, 2017In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact becCVE-2017-17795 · Other software · Ikarussecurity · reported by MITREHigh 7.8
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088.
- Product
- Anti.virus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2017TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoCVE-2017-17475 · Other software · Tgsoft · reported by MITREHigh 7.8
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82736068.
- Product
- Vir.it Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2017TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoCVE-2017-17474 · Other software · Tgsoft · reported by MITREHigh 7.8
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730070.
- Product
- Vir.it Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2017TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoCVE-2017-17473 · Other software · Tgsoft · reported by MITREHigh 7.8
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730050.
- Product
- Vir.it Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2017TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoCVE-2017-17472 · Other software · Tgsoft · reported by MITREHigh 7.8
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730030.
- Product
- Vir.it Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2017TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoCVE-2017-17471 · Other software · Tgsoft · reported by MITREHigh 7.8
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82732140.
- Product
- Vir.it Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2017TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoCVE-2017-17470 · Other software · Tgsoft · reported by MITREHigh 7.8
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730054.
- Product
- Vir.it Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2017TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoCVE-2017-17469 · Other software · Tgsoft · reported by MITREHigh 7.8
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730008, a different vulnerability than CVE-2017-16948.
- Product
- Vir.it Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2017TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoCVE-2017-17467 · Other software · Tgsoft · reported by MITREHigh 7.8
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730074.
- Product
- Vir.it Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 28, 2017TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NCVE-2017-17050 · Other software · Tgsoft · reported by MITREHigh 7.8
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730020 DeviceIoControl request to \\.\Viragtlt.
- Product
- Vir.it Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 28, 2017TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NCVE-2017-17049 · Other software · Tgsoft · reported by MITREHigh 7.8
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730010 DeviceIoControl request to \\.\Viragtlt.
- Product
- Vir.it Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 26, 2017TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NCVE-2017-16948 · Other software · Tgsoft · reported by MITREHigh 7.8
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730008 DeviceIoControl request to \\.\Viragtlt.
- Product
- Vir.it Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 24, 2017A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIFCVE-2017-16938 · Other software · Optipng Project · reported by MITREHigh 7.8
A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.
- Product
- Optipng
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.debian.orgsecurity.gentoo.org
Nov 16, 2017A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.CVE-2017-1000232 · Other software · Nlnetlabs · reported by MITRECritical 9.8
A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.
- Product
- Ldns
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.opensuse.orgnlnetlabs.nl
Nov 16, 2017A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.CVE-2017-1000231 · Other software · Nlnetlabs · reported by MITRECritical 9.8
A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.
- Product
- Ldns
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.opensuse.orglists.debian.org
Nov 16, 2017A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality oCVE-2017-12302 · Network & remote access · Cisco · reported by psirt@cisco.comMedium 4.3
A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The vulnerability is due to a lack of input validation on user-supplied input in SQL queries. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected system. An exploit could allow the attacker to determine the presence of certain values in the database. Cisco Bug IDs: CSCvf36682.
- Product
- Unified Communications Domain Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecuritytracker.com
Nov 6, 2017The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MCVE-2017-15672 · Other software · Ffmpeg · reported by MITREHigh 8.8
The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read.
- Product
- Ffmpeg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.videolan.orgopenwall.com
Oct 27, 2017XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath bCVE-2014-3600 · Websites & servers · Apache · reported by Red HatCritical 9.8
XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
- Product
- Activemq
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordactivemq.apache.orgseclists.org
Oct 27, 2017XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XCVE-2014-3579 · Websites & servers · Apache · reported by Red HatCritical 9.8
XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
- Product
- Activemq Apollo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordactivemq.apache.orgseclists.org
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15786 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x00000000001a78db."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15783 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000285ce1."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15780 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285dad."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15778 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285de7."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15776 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285ec1."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15775 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000259aa4."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15773 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285d79."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15772 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285e9d."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access CVE-2017-15769 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLP_W+0x0000000000001b22."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "DataCVE-2017-15768 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Data from Faulting Address controls Branch Selection starting at image000007f7_42060000+0x0000000000094113."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15766 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f0a0."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15765 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at CADIMAGE+0x00000000003e9462."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15764 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001e6b0."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15757 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x00000000000029ba."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15755 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at verifier!AVrfpDphFindBusyMemoryNoCheck+0x0000000000000091."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15753 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x00000000000029c2."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15751 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009f39."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15750 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009ae0."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15749 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000000348b9."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15746 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000003d21b3."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15745 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15743 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADIMAGE+0x00000000003d24a0."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15742 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d2328."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15741 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15738 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d22d8."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craftCVE-2017-15737 · Other software · Irfanview · reported by MITREHigh 7.8
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d246f."
- Product
- Irfanview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is CVE-2017-15803 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000150."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.