Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
138 results · page 3 of 3
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10773 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at MSCTF!_CtfImeCreateThreadMgr+0x00000000000000a8."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10772 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!memcmp+0x0000000000000018" (with RPC initialization).
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10771 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x0000000000000510."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10770 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x000000000000053a."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10769 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!memcmp+0x0000000000000018" (without RPC initialization).
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10768 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpInsertFreeBlock+0x00000000000001ca."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10767 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x0000000000000005."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10766 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!ScriptStringAnalyse+0x00000000000001c8."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10765 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at IMM32!ImmLockImeDpi+0x0000000000000050."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10764 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!Tab_OnGetItem+0x000000000000002f."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10763 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByHandle+0x0000000000000031."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10762 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x000000000000042f."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10761 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x0000000000000429."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10760 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10759 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpInsertDependencyRecord+0x0000000000000039."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10758 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000004b4."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10757 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10756 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpRemoveUCRBlock+0x0000000000000046."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10755 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpInitializeThread+0x000000000000010b."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10754 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpEnterCriticalSectionContended+0x0000000000000031."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10753 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByMapping+0x0000000000000046."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10752 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x000000000000001f."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, reCVE-2017-10751 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User ModeCVE-2017-10750 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User ModeCVE-2017-10749 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User ModeCVE-2017-10748 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000022bf8d."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User ModeCVE-2017-10747 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000037a8aa."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User ModeCVE-2017-10746 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack BufCVE-2017-10745 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!RtlProcessFlsData+0x00000000000000b0."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read AcceCVE-2017-10744 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::s_ToolTipsWndProc+0x0000000000000032."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack BufCVE-2017-10743 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!LdrpInitializeNode+0x000000000000015b."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data ExecCVE-2017-10742 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from ntdll_77df0000!LdrxCallInitRoutine+0x0000000000000016."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User ModeCVE-2017-10741 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User ModeCVE-2017-10740 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlRbInsertNodeEx+0x000000000000002d."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data ExecCVE-2017-10739 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000000c1b541c called from xnview+0x00000000003826ec."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data ExecCVE-2017-10738 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000002f32332f called from KERNELBASE!CompareStringW+0x0000000000000082."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User ModeCVE-2017-10737 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000002e6."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User ModeCVE-2017-10736 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at msvcrt!_VEC_memzero+0x000000000000006a."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.