Known vulnerabilities in Ghostscript - page 5

Vendor: Artifex Software, Inc.
Software: Ghostscript
Software CPE: cpe:2.3:a:artifex_software:ghostscript:*:*:*:*:*:*:*:*
Website: https://artifex.com
Total vulnerabilities: 111
Public exploits: 8
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ghostscript Ghostscript is affected by 111 known vulnerabilities: 1 critical, 50 high, 39 medium, 21 low Critical High Medium Low

Vulnerabilities (111)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16803 - Improper input validation
CVE-2018-19478		 CWE-20 Low
No
No
 9.26 04.01.2019 SB2018112706
SB2019020721
SB2019020722
#VU15785 - Improper input validation
CVE-2018-16541		 CWE-20 Low
No
No
 9.24 09.11.2018 SB2018110911
SB2018121810
SB2018100604
#VU15463 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-18284		 CWE-94 High
No
No
 - 22.10.2018 SB2018102301
SB2018103002
SB2018110712
and 9 more
#VU14690 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-16509		 CWE-78 High
Available
Exploited
 9.24 07.09.2018 SB2018090708
SB2018091502
SB2018120409
and 3 more
#VU14689 - Type confusion
CVE-2018-16513		 CWE-843 High
No
No
 9.24 07.09.2018 SB2018090708
SB2019042508
#VU14688 - Type confusion
CVE-2018-16511		 CWE-843 High
No
No
 9.24 07.09.2018 SB2018090708
SB2018120314
#VU14687 - Improper input validation
CVE-2018-16510		 CWE-20 High
No
No
 9.24 06.09.2018 SB2018090708
SB2018090644
#VU31218 - Memory corruption
CVE-2018-16585		 CWE-119 Low
No
No
 9.24 06.09.2018 SB2018090624
#VU36726 - Improper input validation
CVE-2018-16543		 CWE-20 High
No
No
 9.24 05.09.2018 SB2018090514
SB2018090644
#VU14565 - Improper input validation
CVE-2018-15908		 CWE-20 Low
No
No
 - 30.08.2018 SB2018083002
SB2018120314
SB2018090423
#VU14564 - Type confusion
CVE-2018-15910		 CWE-843 High
No
No
 - 30.08.2018 SB2018083002
SB2019042508
SB2018090425
#VU14562 - Improper input validation
CVE-2018-15911		 CWE-20 High
No
No
 - 29.08.2018 SB2018083002
SB2018121810
SB2019042508
and 1 more
#VU14496 - Improper input validation
CVE-2018-15909		 CWE-20 High
No
No
 9.24 23.08.2018 SB2018082301
SB2018120314
SB2019042508
and 3 more
#VU13177 - Exposure of sensitive information to an unauthorized actor
CVE-2018-11645		 CWE-200 Low
No
No
 - 01.06.2018 SB2018060502
SB2018111103
SB2019080613
#VU12609 - Heap-based Buffer Overflow
CVE-2016-10317		 CWE-122 Low
No
No
 - 14.05.2018 SB2017112136
SB2017050318
SB2017050319
and 1 more
#VU12107 - Memory corruption
CVE-2018-10194		 CWE-119 High
No
No
 - 20.04.2018 SB2018042312
SB2018052107
SB2018070904
and 4 more
#VU8078 - Out-of-bounds read
CVE-2017-11714		 CWE-125 Low
No
No
 - 05.09.2017 SB2017072802
SB2017100202
SB2017082801
#VU6546 - Type conversion
CVE-2017-8291		 CWE-704 Critical
Available
Exploited
 - 15.05.2017 SB2017051503
SB2017052502
SB2017042603
and 11 more
#VU39056 - Out-of-bounds read
CVE-2017-8908		 CWE-125 Medium
No
No
 - 12.05.2017 SB2017041916
#VU39174 - Integer overflow
CVE-2017-7948		 CWE-190 High
No
No
 - 19.04.2017 SB2017041916


Showing elements 81 - 100 out of 111