Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Office HIGH 9.3
CVE-2015-6092EPSS 15%

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, and Word Viewer a…

Mitigation only
Fix from $1,950 2015-11-11
Office HIGH 9.3
CVE-2015-6091EPSS 15%

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Word Viewer allow remote attackers to execut…

Mitigation only
Fix from $1,950 2015-11-11
Jscript HIGH 9.3
CVE-2015-6089EPSS 13%

The Microsoft (1) VBScript and (2) JScript engines, as used in Internet Explorer 8 through 11, allow remote attackers to execute arbitrary code or ca…

Mitigation only
Fix from $1,950 2015-11-11
Edge HIGH 9.3
CVE-2015-6078EPSS 17%

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Mitigation only
Fix from $1,950 2015-11-11
Edge HIGH 9.3
CVE-2015-6073EPSS 17%

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…

Mitigation only
Fix from $1,950 2015-11-11
Edge HIGH 9.3
CVE-2015-6064EPSS 20%

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corrup…

Mitigation only
Fix from $1,950 2015-11-11
Excel HIGH 9.3
CVE-2015-6038EPSS 36%

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility…

Mitigation only
Fix from $1,950 2015-11-11
Ubuntu Linux MEDIUM 6.8
CVE-2015-5214EPSS 10%

LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corrupt…

Fix: after 4.4.5
Fix from $1,600 2015-11-10
Picasa HIGH 10.0
CVE-2015-8096

Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related t…

Mitigation only
Fix from $1,950 2015-11-09
Fedora MEDIUM 5.0
CVE-2015-7295

hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote…

Fix: after 2.4.1
Fix from $1,600 2015-11-09
Openstack HIGH 7.2
CVE-2015-5225

Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of s…

Fix: after 2.4.0
Fix from $1,950 2015-11-06
Ubuntu Linux MEDIUM 6.8
CVE-2015-7696EPSS 7%

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbit…

Mitigation only
Fix from $1,600 2015-11-06
Firefox HIGH 7.5
CVE-2015-7199

The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox HIGH 7.5
CVE-2015-7198

Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote at…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox HIGH 7.5
CVE-2015-7194

Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (appl…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox MEDIUM 6.8
CVE-2015-7189

Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitra…

Fix: after 41.0.2
Fix from $1,600 2015-11-05
Firefox HIGH 7.5
CVE-2015-7183EPSS 7%

Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox CRITICAL 9.8
CVE-2015-7182EPSS 9%

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firef…

Fix: after 41.0.2
Fix from $2,300 2015-11-05
Firefox HIGH 7.5
CVE-2015-7181EPSS 8%

The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox HIGH 7.5
CVE-2015-4514

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow remote attackers to cause a denial of service (memory…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox HIGH 7.5
CVE-2015-4513

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to …

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Acrobat MEDIUM 6.8
CVE-2015-7650

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Ac…

Fix: 15.006.30094 / 15.009.20069+
Fix from $1,600 2015-11-04
Android HIGH 10.0
CVE-2015-8073

mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt…

Mitigation only
Fix from $1,950 2015-11-03
Android HIGH 10.0
CVE-2015-8072

mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a den…

Mitigation only
Fix from $1,950 2015-11-03
Android HIGH 10.0
CVE-2015-6610

libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service (memory corr…

Fix: 5.1.1+
Fix from $1,950 2015-11-03
Android HIGH 10.0
CVE-2015-6609

libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

Fix: after 5.1.0
Fix from $1,950 2015-11-03
Android HIGH 10.0
CVE-2015-6608

mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of servi…

Fix: 5.1.1+
Fix from $1,950 2015-11-03
Debian Linux MEDIUM 6.8
CVE-2015-8036

Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial o…

Fix: 1.3.14 / 2.1.2+
Fix from $1,600 2015-11-02
Debian Linux MEDIUM 6.8
CVE-2015-6031

Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka MiniUPnPc) before 1.9.20150917 allows remote UPNP servers…

Fix: after 1.9
Fix from $1,600 2015-11-02
Debian Linux MEDIUM 6.8
CVE-2015-5291

Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote …

Fix: 1.2.17 / 1.3.14+
Fix from $1,600 2015-11-02