CVE & Exploit Intelligence Database

Updated 5h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,847 CVEs tracked 53,242 with exploits 4,725 exploited in wild 1,540 CISA KEV 3,918 Nuclei templates 37,802 vendors 42,493 researchers

440 results Clear all

CVE-2018-5739 6.5 MEDIUM EPSS 0.03

Kea 1.4 - Memory Corruption

An extension to hooks capabilities which debuted in Kea 1.4.0 introduced a memory leak for operators who are using certain hooks library facilities. In order to support multiple requests simultaneously, Kea 1.4 added a callout handle store but unfortunately the initial implementation of this store does not properly free memory in every case. Hooks which make use of query4 or query6 parameters in their callouts can leak memory, resulting in the eventual exhaustion of available memory and subsequent failure of the server process. Affects Kea DHCP 1.4.0.

CWE-772 Jan 16, 2019

CVE-2018-20657 7.5 HIGH EPSS 0.00

GNU Binutils < 5.1.0 - Resource Leak

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.

CWE-772 Jan 02, 2019

CVE-2018-20622 6.5 MEDIUM EPSS 0.01

Jasper - Resource Leak

JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.

CWE-772 Dec 31, 2018

CVE-2018-20540 6.5 MEDIUM EPSS 0.00

Liblas - Resource Leak

There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1.

CWE-772 Dec 28, 2018

CVE-2018-20408 6.5 MEDIUM EPSS 0.00

Axiosys Bento4 - Resource Leak

An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_StdcFileByteStream::Create in System/StdC/Ap4StdCFileByteStream.cpp, as demonstrated by mp42hls.

CWE-772 Dec 23, 2018

CVE-2018-20407 6.5 MEDIUM EPSS 0.00

Axiosys Bento4 - Resource Leak

An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42hls.

CWE-772 Dec 23, 2018

CVE-2018-20126 5.5 MEDIUM EPSS 0.00

QEMU - Memory Leak

hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled.

CWE-772 Dec 20, 2018

CVE-2018-20123 5.5 MEDIUM EPSS 0.00

QEMU - Memory Leak

pvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error.

CWE-772 Dec 17, 2018

CVE-2018-20002 5.5 MEDIUM EPSS 0.00

GNU Binutils 2.31 - Memory Corruption

The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.

CWE-772 Dec 10, 2018

CVE-2018-19760 8.8 HIGH EPSS 0.00

libConfuse <3.2.2 - Memory Corruption

cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak.

CWE-772 Nov 30, 2018

CVE-2018-10851 5.3 MEDIUM EPSS 0.00

Powerdns Authoritative < 4.1.4 - Resource Leak

PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.

CWE-772 Nov 29, 2018

CVE-2018-19213 5.5 MEDIUM EPSS 0.00

Netwide Assembler <2.14rc16 - DoS

Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c.

CWE-772 Nov 12, 2018

CVE-2018-19139 5.5 MEDIUM EPSS 0.00

Jasper - Resource Leak

An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.

CWE-772 Nov 09, 2018

CVE-2018-19132 5.9 MEDIUM EPSS 0.11

Squid < 4.4 - Resource Leak

Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet.

CWE-772 Nov 09, 2018

CVE-2018-18897 6.5 MEDIUM EPSS 0.00

Freedesktop Poppler - Resource Leak

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.

CWE-772 Nov 02, 2018

CVE-2018-18544 6.5 MEDIUM EPSS 0.00

Graphicsmagick < 1.3.31 - Resource Leak

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.

CWE-772 Oct 21, 2018

CVE-2018-18482 6.5 MEDIUM EPSS 0.00

Libpg Query < 0.28 - Resource Leak

An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_parse in pg_query_parse.c, which might lead to a denial of service.

CWE-772 Oct 18, 2018

CVE-2018-18443 4.3 MEDIUM EPSS 0.00

ILM Openexr - Resource Leak

OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview.

CWE-772 Oct 17, 2018

CVE-2018-18226 7.5 HIGH EPSS 0.01

Wireshark < 2.6.3 - Resource Leak

In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.

CWE-772 Oct 12, 2018

CVE-2018-18016 6.5 MEDIUM EPSS 0.00

Imagemagick - Resource Leak

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.

CWE-772 Oct 05, 2018