CVE & Exploit Intelligence Database

CVE-2018-14439 7.5 HIGH EPSS 0.00

espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four digits after the decimal point, which might allow attackers to trigger currency transfers of unintended amounts.

CWE-682 Jul 20, 2018

CVE-2018-8319 9.8 CRITICAL EPSS 0.13

A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.

CWE-682 Jul 11, 2018

CVE-2017-5462 5.3 MEDIUM EPSS 0.01

A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

CWE-682 Jun 11, 2018

CVE-2017-13288 7.8 HIGH EPSS 0.00

In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-69634768.

CWE-682 Apr 04, 2018

CVE-2017-13151 8.8 HIGH EPSS 0.00

A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63874456.

CWE-682 Dec 06, 2017

CVE-2017-0819 7.5 HIGH EPSS 0.00

A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63045918.

CWE-682 Oct 04, 2017

CVE-2017-9725 7.8 HIGH EPSS 0.00

In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.

CWE-682 Sep 21, 2017

CVE-2017-12135 8.8 HIGH EPSS 0.00

Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.

CWE-682 Aug 24, 2017

CVE-2017-12134 8.8 HIGH EPSS 0.00

The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation.

CWE-682 Aug 24, 2017

CVE-2017-11537 6.5 MEDIUM EPSS 0.00

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation.

CWE-682 Jul 23, 2017

CVE-2017-0679 7.8 HIGH EPSS 0.00

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36996978.

CWE-682 Jul 06, 2017

CVE-2017-0666 7.8 HIGH EPSS 0.00

A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37285689.

CWE-682 Jul 06, 2017

CVE-2017-8932 5.9 MEDIUM 1 Writeup EPSS 0.02

A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries.

CWE-682 Jul 06, 2017

CVE-2017-8905 8.8 HIGH EPSS 0.00

Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215.

CWE-682 May 11, 2017

CVE-2017-0342 7.8 HIGH EPSS 0.00

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where incorrect calculation may cause an invalid address access leading to denial of service or potential escalation of privileges.

CWE-682 May 09, 2017

CVE-2017-8326 8.8 HIGH 1 Writeup EPSS 0.01

libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c and imagew-util.c.

CWE-682 Apr 29, 2017

CVE-2017-0545 7.8 HIGH EPSS 0.00

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32591350.

CWE-682 Apr 07, 2017

CVE-2016-9377 5.5 MEDIUM EPSS 0.00

Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging IDT entry miscalculation.

CWE-682 Feb 22, 2017

CVE-2016-7433 5.3 MEDIUM EPSS 0.07

NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."

CWE-682 Jan 13, 2017

CVE-2011-3062 EPSS 0.02

Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.

CWE-682 Mar 30, 2012