LE
Product
Leap
35
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 14Medium 14Low 0
Watch
Add Leap to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9961 | 9.8 | Jun 6 | game-music-emu before 0.6.1 mishandles unspecified integer values Affected: 42.1 |
| CVE-2017-6542 | 9.8 | Mar 27 | The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging… Affected: 42.1 |
| CVE-2014-9847 | 9.8 | Mar 20 | The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact Affected: 42.1 |
| CVE-2014-9846 | 9.8 | Mar 20 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact Affected: 42.1 |
| CVE-2014-9843 | 9.8 | Mar 20 | The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors Affected: 42.1 |
| CVE-2014-9841 | 9.8 | Mar 20 | The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions." Affected: 42.1 |
| CVE-2017-17806 | 7.8 | Dec 20 | The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker… Affected: 42.3 |
| CVE-2017-17805 | 7.8 | Dec 20 | The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher… Affected: 42.3 |
| CVE-2016-9959 | 7.8 | Apr 12 | game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values Affected: 42.1 |
| CVE-2016-9958 | 7.8 | Apr 12 | game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations Affected: 42.1 |
| CVE-2016-9957 | 7.8 | Apr 12 | Stack-based buffer overflow in game-music-emu before 0.6.1 Affected: 42.1 |
| CVE-2016-1254 | 7.5 | Dec 5 | Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor Affected: 42.1 |
| CVE-2015-3138 | 7.5 | Sep 28 | print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash) Affected: 42.1 |
| CVE-2016-7797 | 7.5 | Mar 24 | Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection Affected: 42.1 |
| CVE-2016-10048 | 7.5 | Mar 23 | Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors Affected: 42.1 |
| CVE-2014-9851 | 7.5 | Mar 20 | ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash) Affected: 42.1 |
| CVE-2014-9850 | 7.5 | Mar 20 | Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption) Affected: 42.1 |
| CVE-2014-9849 | 7.5 | Mar 20 | The png coder in ImageMagick allows remote attackers to cause a denial of service (crash) Affected: 42.1 |
| CVE-2014-9848 | 7.5 | Mar 20 | Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption) Affected: 42.1 |
| CVE-2014-9842 | 7.5 | Mar 20 | Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors Affected: 42.1 |
| CVE-2016-9436 | 6.5 | Jan 20 | parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i>… Affected: 42.1 |
| CVE-2016-9435 | 6.5 | Jan 20 | The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html… Affected: 42.1 |
| CVE-2016-5317 | 6.5 | Jan 20 | Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a… Affected: 42.1 |
| CVE-2016-5316 | 6.5 | Jan 20 | Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image… Affected: 42.1 |
| CVE-2015-8010 | 6.1 | Mar 27 | Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web… Affected: 42.1 |
| CVE-2017-5938 | 6.1 | Mar 15 | Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web… Affected: 42.1 |
| CVE-2015-5203 | 5.5 | Aug 2 | Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file Affected: 42.1 |
| CVE-2015-5221 | 5.5 | Jul 25 | Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial… Affected: 42.1 |
| CVE-2016-9960 | 5.5 | Jun 6 | game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash) Affected: 42.1 |
| CVE-2016-9556 | 5.5 | Mar 23 | The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image… Affected: 42.1 |
| CVE-2014-9845 | 5.5 | Mar 20 | The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file Affected: 42.1 |
| CVE-2014-9844 | 5.5 | Mar 20 | The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file Affected: 42.1 |
| CVE-2016-10069 | 5.5 | Mar 2 | coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames Affected: 42.1 |
| CVE-2016-10068 | 5.5 | Mar 2 | The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file Affected: 42.1 |
| CVE-2015-5218 | – | Nov 9 | Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global… Affected: 42.1 |
Showing 35