CVE & Exploit Intelligence Database

Updated 4h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

338,223 CVEs tracked 53,271 with exploits 4,730 exploited in wild 1,542 CISA KEV 3,929 Nuclei templates 37,826 vendors 42,547 researchers

1,560 results Clear all

CVE-2019-17178 7.5 HIGH 1 Writeup EPSS 0.01

Freerdp < 1.0.2 - Memory Leak

HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.

CWE-252 Oct 04, 2019

CVE-2019-17177 7.5 HIGH 1 Writeup EPSS 0.01

Freerdp < 1.0.2 - Memory Leak

libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.

CWE-401 Oct 04, 2019

CVE-2019-16995 7.5 HIGH 1 Writeup EPSS 0.02

Linux Kernel < 3.18.137 - Memory Leak

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

CWE-401 Sep 30, 2019

CVE-2019-16994 4.7 MEDIUM 1 Writeup EPSS 0.00

Linux Kernel < 5.0 - Memory Leak

In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a.

CWE-401 Sep 30, 2019

CVE-2019-4141 6.5 MEDIUM EPSS 0.00

IBM Websphere MQ < 7.1.0.9 - Memory Leak

IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a denial of service attack caused by a memory leak in the clustering code. IBM X-Force ID: 158337.

CWE-401 Sep 27, 2019

CVE-2019-16713 6.5 MEDIUM EPSS 0.00

ImageMagick 7.0.8-43 - Memory Corruption

ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.

CWE-401 Sep 23, 2019

CVE-2019-16712 6.5 MEDIUM EPSS 0.00

ImageMagick 7.0.8-43 - Memory Corruption

ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.

CWE-401 Sep 23, 2019

CVE-2019-16711 6.5 MEDIUM EPSS 0.00

ImageMagick 7.0.8-40 - Memory Corruption

ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.

CWE-401 Sep 23, 2019

CVE-2019-16710 6.5 MEDIUM EPSS 0.00

ImageMagick 7.0.8-35 - Memory Corruption

ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.

CWE-401 Sep 23, 2019

CVE-2019-16709 6.5 MEDIUM EPSS 0.00

ImageMagick 7.0.8-35 - Memory Corruption

ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.

CWE-401 Sep 23, 2019

CVE-2019-16708 6.5 MEDIUM EPSS 0.00

ImageMagick 7.0.8-35 - Memory Corruption

ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.

CWE-401 Sep 23, 2019

CVE-2018-21017 6.5 MEDIUM 1 Writeup EPSS 0.00

Gpac - Memory Leak

GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.

CWE-401 Sep 16, 2019

CVE-2019-15921 4.7 MEDIUM 1 Writeup EPSS 0.00

Linux kernel <5.0.6 - Memory Corruption

An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c.

CWE-401 Sep 04, 2019

CVE-2019-6647 5.3 MEDIUM EPSS 0.00

F5 Big-ip Local Traffic Manager < 11.6.4 - Memory Leak

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for control-plane users MCPD leaks a small amount of memory. Under rare conditions attackers with access to the management interface could eventually deplete memory on the system.

CWE-401 Sep 04, 2019

CVE-2019-15916 7.5 HIGH EPSS 0.03

Linux kernel <5.0.1 - DoS

An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service.

CWE-401 Sep 04, 2019

CVE-2019-15807 4.7 MEDIUM EPSS 0.00

Linux kernel <5.1.13 - Memory Corruption

In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.

CWE-401 Aug 29, 2019

CVE-2019-15134 7.5 HIGH EPSS 0.00

Riot < 2019.07 - Memory Leak

RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all memory available for network packets and thus effectively stopping all network threads from working. This is related to _receive in sys/net/gnrc/transport_layer/tcp/gnrc_tcp_eventloop.c upon receiving an ACK before a SYN.

CWE-401 Aug 17, 2019

CVE-2019-12265 5.3 MEDIUM EPSS 0.13

Wind River VxWorks <6.9.5 - Memory Corruption

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.

CWE-401 Aug 09, 2019

CVE-2019-13311 6.5 MEDIUM 2 Writeups EPSS 0.00

Imagemagick - Memory Leak

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.

CWE-401 Jul 05, 2019

CVE-2019-13310 6.5 MEDIUM 2 Writeups EPSS 0.00

Imagemagick - Memory Leak

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.

CWE-401 Jul 05, 2019