# cve.now: Talos

The newest entries naming Talos as an affected vendor (up to 200), of 127 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2019-5042](https://cve.now/CVE-2019-5042.md): An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++. (CVSS 8.8)
- [CVE-2019-5067](https://cve.now/CVE-2019-5067.md): An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. (CVSS 9.8)
- [CVE-2019-5066](https://cve.now/CVE-2019-5066.md): An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. (CVSS 9.8)
- [CVE-2019-5017](https://cve.now/CVE-2019-5017.md): An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the ReadySHARE Printer functio (CVSS 5.8)
- [CVE-2019-5016](https://cve.now/CVE-2019-5016.md): An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functio (CVSS 10.0)
- [CVE-2018-4048](https://cve.now/CVE-2018-4048.md): An exploitable local privilege elevation vulnerability exists in the file system permissions of the \`Temp\` directory in GOG Galaxy 1.2.48.36 (CVSS 9.3)
- [CVE-2018-4050](https://cve.now/CVE-2018-4050.md): An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS (CVSS 7.1)
- [CVE-2018-4059](https://cve.now/CVE-2018-4059.md): An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. (CVSS 6.5)
- [CVE-2018-4058](https://cve.now/CVE-2018-4058.md): An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. (CVSS 7.7)
- [CVE-2019-5015](https://cve.now/CVE-2019-5015.md): A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. (CVSS 9.0)
- [CVE-2018-4055](https://cve.now/CVE-2018-4055.md): A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. (CVSS 7.1)
- [CVE-2018-4054](https://cve.now/CVE-2018-4054.md): A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. (CVSS 9.0)
- [CVE-2018-3980](https://cve.now/CVE-2018-3980.md): An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. (CVSS 8.8)
- [CVE-2018-3976](https://cve.now/CVE-2018-3976.md): An exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of Canvas Draw version 5.0.0.28. (CVSS 8.8)
- [CVE-2018-3973](https://cve.now/CVE-2018-3973.md): An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0. (CVSS 8.8)
- [CVE-2018-4056](https://cve.now/CVE-2018-4056.md): An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. (CVSS 9.1)
- [CVE-2018-4040](https://cve.now/CVE-2018-4040.md): An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. (CVSS 8.8)
- [CVE-2018-4039](https://cve.now/CVE-2018-4039.md): An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. (CVSS 8.8)
- [CVE-2018-4038](https://cve.now/CVE-2018-4038.md): An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, whil (CVSS 8.8)
- [CVE-2018-3951](https://cve.now/CVE-2018-3951.md): An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server. (CVSS 7.2)
- [CVE-2018-3950](https://cve.now/CVE-2018-3950.md): An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and (CVSS 7.2)
- [CVE-2018-3949](https://cve.now/CVE-2018-3949.md): An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. (CVSS 7.5)
- [CVE-2018-3971](https://cve.now/CVE-2018-3971.md): An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. (CVSS 9.3)
- [CVE-2018-3970](https://cve.now/CVE-2018-3970.md): An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. (CVSS 4.0)
- [CVE-2018-3981](https://cve.now/CVE-2018-3981.md): An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. (CVSS 8.8)
- [CVE-2018-3885](https://cve.now/CVE-2018-3885.md): An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. (CVSS 5.4)
- [CVE-2018-3884](https://cve.now/CVE-2018-3884.md): An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. (CVSS 5.4)
- [CVE-2018-3883](https://cve.now/CVE-2018-3883.md): An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. (CVSS 5.4)
- [CVE-2018-4010](https://cve.now/CVE-2018-4010.md): An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. (CVSS 8.8)
- [CVE-2018-3952](https://cve.now/CVE-2018-3952.md): An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. (CVSS 8.8)
- [CVE-2018-3926](https://cve.now/CVE-2018-3926.md): An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings (CVSS 5.3)
- [CVE-2018-3909](https://cve.now/CVE-2018-3909.md): An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware ver (CVSS 9.1)
- [CVE-2018-3907](https://cve.now/CVE-2018-3907.md): An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware ver (CVSS 9.1)
- [CVE-2018-3903](https://cve.now/CVE-2018-3903.md): On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user (CVSS 9.9)
- [CVE-2018-3938](https://cve.now/CVE-2018-3938.md): An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 (CVSS 9.1)
- [CVE-2018-3937](https://cve.now/CVE-2018-3937.md): An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 f (CVSS 9.1)
- [CVE-2017-16252](https://cve.now/CVE-2017-16252.md): Specially crafted commands sent through the PubNub service in Insteon Hub 2245-222 with firmware version 1012 can cause a stack-based buffer (CVSS 8.5)
- [CVE-2017-14447](https://cve.now/CVE-2017-14447.md): An exploitable buffer overflow vulnerability exists in the PubNub message handler for the 'ad' channel of Insteon Hub running firmware versi (CVSS 8.5)
- [CVE-2018-3841](https://cve.now/CVE-2018-3841.md): A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69). (CVSS 5.3)
- [CVE-2018-3840](https://cve.now/CVE-2018-3840.md): A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67). (CVSS 5.3)
- [CVE-2018-3852](https://cve.now/CVE-2018-3852.md): An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. (CVSS 7.5)
- [CVE-2018-3853](https://cve.now/CVE-2018-3853.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software Foxit PDF Reader version 9.0.1.1049. (CVSS 8.8)
- [CVE-2017-12092](https://cve.now/CVE-2017-12092.md): An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and bef (CVSS 3.7)
- [CVE-2016-9042](https://cve.now/CVE-2016-9042.md): An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. (CVSS 3.7)
- [CVE-2016-8390](https://cve.now/CVE-2016-8390.md): An exploitable out of bounds write vulnerability exists in the parsing of ELF Section Headers of Hopper Disassembler 3.11.20. (CVSS 7.5)
- [CVE-2017-2860](https://cve.now/CVE-2017-2860.md): An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. (CVSS 7.5)
- [CVE-2017-2858](https://cve.now/CVE-2017-2858.md): An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8. (CVSS 7.5)
- [CVE-2017-2852](https://cve.now/CVE-2017-2852.md): An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8. (CVSS 7.5)
- [CVE-2017-2815](https://cve.now/CVE-2017-2815.md): An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. (CVSS 8.1)
- [CVE-2017-14439](https://cve.now/CVE-2017-14439.md): Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 7.5)
- [CVE-2017-14438](https://cve.now/CVE-2017-14438.md): Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 7.5)
- [CVE-2017-14437](https://cve.now/CVE-2017-14437.md): An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 7.5)
- [CVE-2017-14436](https://cve.now/CVE-2017-14436.md): An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 7.5)
- [CVE-2017-14435](https://cve.now/CVE-2017-14435.md): An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 7.5)
- [CVE-2017-14434](https://cve.now/CVE-2017-14434.md): An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 8.8)
- [CVE-2017-14433](https://cve.now/CVE-2017-14433.md): An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 8.8)
- [CVE-2017-14432](https://cve.now/CVE-2017-14432.md): An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 8.8)
- [CVE-2017-12129](https://cve.now/CVE-2017-12129.md): An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 3.5)
- [CVE-2017-12128](https://cve.now/CVE-2017-12128.md): An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 5.3)
- [CVE-2017-12127](https://cve.now/CVE-2017-12127.md): A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 4.4)
- [CVE-2017-12126](https://cve.now/CVE-2017-12126.md): An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 8.8)
- [CVE-2017-12125](https://cve.now/CVE-2017-12125.md): An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 8.8)
- [CVE-2017-12124](https://cve.now/CVE-2017-12124.md): An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 7.5)
- [CVE-2017-12123](https://cve.now/CVE-2017-12123.md): An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 buil (CVSS 5.7)
- [CVE-2017-12121](https://cve.now/CVE-2017-12121.md): An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 8.8)
- [CVE-2017-12120](https://cve.now/CVE-2017-12120.md): An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. (CVSS 8.8)
- [CVE-2017-14481](https://cve.now/CVE-2017-14481.md): In the MMM::Agent::Helpers::Network::send\_arp function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Solaris), a spe (CVSS 9.8)
- [CVE-2017-14480](https://cve.now/CVE-2017-14480.md): In the MMM::Agent::Helpers::Network::clear\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for FreeBSD), a spe (CVSS 9.8)
- [CVE-2017-14479](https://cve.now/CVE-2017-14479.md): In the MMM::Agent::Helpers::Network::clear\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Solaris), a spe (CVSS 9.8)
- [CVE-2017-14478](https://cve.now/CVE-2017-14478.md): In the MMM::Agent::Helpers::Network::clear\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Linux), a speci (CVSS 9.8)
- [CVE-2017-14477](https://cve.now/CVE-2017-14477.md): In the MMM::Agent::Helpers::Network::add\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for FreeBSD), a speci (CVSS 9.8)
- [CVE-2017-14476](https://cve.now/CVE-2017-14476.md): In the MMM::Agent::Helpers::Network::add\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Solaris), a speci (CVSS 9.8)
- [CVE-2017-14475](https://cve.now/CVE-2017-14475.md): In the MMM::Agent::Helpers::Network::add\_ip function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1 (for Linux), a special (CVSS 9.8)
- [CVE-2017-14474](https://cve.now/CVE-2017-14474.md): In the MMM::Agent::Helpers::\_execute function in MySQL Multi-Master Replication Manager (MMM) mmm\_agentd 2.2.1, a specially crafted MMM prot (CVSS 9.8)
- [CVE-2018-3850](https://cve.now/CVE-2018-3850.md): An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. (CVSS 8.8)
- [CVE-2017-14458](https://cve.now/CVE-2017-14458.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 8.3.2.25013. (CVSS 8.8)
- [CVE-2017-2825](https://cve.now/CVE-2017-2825.md): In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in datab (no CVSS)
- [CVE-2018-3843](https://cve.now/CVE-2018-3843.md): An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotati (CVSS 6.5)
- [CVE-2018-3842](https://cve.now/CVE-2018-3842.md): An exploitable use of an uninitialized pointer vulnerability exists in the JavaScript engine in Foxit PDF Reader version 9.0.1.1049. (CVSS 8.8)
- [CVE-2017-2871](https://cve.now/CVE-2017-2871.md): Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. (CVSS 9.6)
- [CVE-2018-3849](https://cve.now/CVE-2018-3849.md): In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwri (CVSS 8.8)
- [CVE-2018-3848](https://cve.now/CVE-2018-3848.md): In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwri (CVSS 8.8)
- [CVE-2018-3846](https://cve.now/CVE-2018-3846.md): In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer over (CVSS 8.8)
- [CVE-2018-3889](https://cve.now/CVE-2018-3889.md): A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. (CVSS 8.8)
- [CVE-2018-3868](https://cve.now/CVE-2018-3868.md): A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. (CVSS 8.8)
- [CVE-2018-3862](https://cve.now/CVE-2018-3862.md): A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting (CVSS 8.8)
- [CVE-2018-3861](https://cve.now/CVE-2018-3861.md): A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. (CVSS 8.8)
- [CVE-2018-3888](https://cve.now/CVE-2018-3888.md): A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. (CVSS 8.8)
- [CVE-2018-3887](https://cve.now/CVE-2018-3887.md): A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. (CVSS 8.8)
- [CVE-2018-3886](https://cve.now/CVE-2018-3886.md): A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. (CVSS 8.8)
- [CVE-2017-14459](https://cve.now/CVE-2017-14459.md): An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IE (CVSS 10.0)
- [CVE-2017-2826](https://cve.now/CVE-2017-2826.md): An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. (no CVSS)
- [CVE-2017-14473](https://cve.now/CVE-2017-14473.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-14472](https://cve.now/CVE-2017-14472.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-14471](https://cve.now/CVE-2017-14471.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-14470](https://cve.now/CVE-2017-14470.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-14469](https://cve.now/CVE-2017-14469.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-14468](https://cve.now/CVE-2017-14468.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-14467](https://cve.now/CVE-2017-14467.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-14466](https://cve.now/CVE-2017-14466.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-14465](https://cve.now/CVE-2017-14465.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-14464](https://cve.now/CVE-2017-14464.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-14463](https://cve.now/CVE-2017-14463.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-14462](https://cve.now/CVE-2017-14462.md): An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl (CVSS 10.0)
- [CVE-2017-12093](https://cve.now/CVE-2017-12093.md): An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 S (CVSS 5.3)
- [CVE-2017-12090](https://cve.now/CVE-2017-12090.md): An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B F (CVSS 7.7)
- [CVE-2017-12089](https://cve.now/CVE-2017-12089.md): An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix 1400 Series B FRN 21 (CVSS 8.6)
- [CVE-2017-12088](https://cve.now/CVE-2017-12088.md): An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400 Series B FRN 21.2 a (CVSS 8.6)
- [CVE-2016-8717](https://cve.now/CVE-2016-8717.md): An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. (CVSS 10.0)
- [CVE-2018-3835](https://cve.now/CVE-2018-3835.md): An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. (CVSS 8.8)
- [CVE-2017-12130](https://cve.now/CVE-2017-12130.md): An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05. (CVSS 7.5)
- [CVE-2017-14460](https://cve.now/CVE-2017-14460.md): An exploitable overly permissive cross-domain (CORS) whitelist vulnerability exists in JSON-RPC of Parity Ethereum client version 1.7.8. (CVSS 7.5)
- [CVE-2017-14457](https://cve.now/CVE-2017-14457.md): An exploitable information leak/denial of service vulnerability exists in the libevm (Ethereum Virtual Machine) \`create2\` opcode handler of (CVSS 8.2)
- [CVE-2017-12119](https://cve.now/CVE-2017-12119.md): An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC. (CVSS 7.5)
- [CVE-2017-12118](https://cve.now/CVE-2017-12118.md): An exploitable improper authorization vulnerability exists in miner\_stop API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7c (CVSS 4.0)
- [CVE-2017-12116](https://cve.now/CVE-2017-12116.md): An exploitable improper authorization vulnerability exists in miner\_setGasPrice API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d00 (CVSS 6.8)
- [CVE-2017-12113](https://cve.now/CVE-2017-12113.md): An exploitable improper authorization vulnerability exists in admin\_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d00161 (CVSS 4.0)
- [CVE-2017-12117](https://cve.now/CVE-2017-12117.md): An exploitable improper authorization vulnerability exists in miner\_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7 (CVSS 4.0)
- [CVE-2017-12115](https://cve.now/CVE-2017-12115.md): An exploitable improper authorization vulnerability exists in miner\_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d0 (CVSS 6.8)
- [CVE-2017-12114](https://cve.now/CVE-2017-12114.md): An exploitable improper authorization vulnerability exists in admin\_peers API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7 (CVSS 4.0)
- [CVE-2017-12112](https://cve.now/CVE-2017-12112.md): An exploitable improper authorization vulnerability exists in admin\_addPeer API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618 (CVSS 4.0)
- [CVE-2017-12097](https://cve.now/CVE-2017-12097.md): An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed\_job\_web rails gem version 1.4. (CVSS 6.1)
- [CVE-2017-2888](https://cve.now/CVE-2017-2888.md): An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. (CVSS 8.8)
- [CVE-2017-2887](https://cve.now/CVE-2017-2887.md): An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL\_image 2.0.1. (CVSS 8.8)
- [CVE-2017-2920](https://cve.now/CVE-2017-2920.md): An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. (CVSS 8.8)
- [CVE-2017-2880](https://cve.now/CVE-2017-2880.md): An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. (CVSS 8.8)
- [CVE-2017-12106](https://cve.now/CVE-2017-12106.md): A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/talos
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.