Talos vulnerabilities
127 CVEs and advisories name Talos as an affected vendor, newest first. Follow it as a feed.
- CVE-2019-5042An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++.
- CVE-2019-5067An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers.
- CVE-2019-5066An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++.
- CVE-2019-5017An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the ReadySHARE Printer functio
- CVE-2019-5016An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functio
- CVE-2018-4048An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36
- CVE-2018-4050An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS
- CVE-2018-4059An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9.
- CVE-2018-4058An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9.
- CVE-2019-5015A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool.
- CVE-2018-4055A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0.
- CVE-2018-4054A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0.
- CVE-2018-3980An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0.
- CVE-2018-3976An exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of Canvas Draw version 5.0.0.28.
- CVE-2018-3973An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0.
- CVE-2018-4056An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9.
- CVE-2018-4040An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2.
- CVE-2018-4039An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2.
- CVE-2018-4038An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, whil
- CVE-2018-3951An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server.
- CVE-2018-3950An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and
- CVE-2018-3949An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN.
- CVE-2018-3971An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744.
- CVE-2018-3970An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744.
- CVE-2018-3981An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0.
- CVE-2018-3885An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6.
- CVE-2018-3884An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6.
- CVE-2018-3883An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6.
- CVE-2018-4010An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1.
- CVE-2018-3952An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0.