Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
3d Visual Enterprise Viewer MEDIUM 6.8
CVE-2015-8030

SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted (1) U3D, (2) LWO, (3) JPEG2000, or (4) FBX file…

Mitigation only
Fix from $1,600 2015-10-30
3d Visual Enterprise Viewer MEDIUM 6.8
CVE-2015-8029

SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted Filmbox document, which triggers memory corrupt…

Mitigation only
Fix from $1,600 2015-10-30
3d Visual Enterprise Viewer MEDIUM 6.8
CVE-2015-8028

Multiple buffer overflows in SAP 3D Visual Enterprise Viewer (VEV) allow remote attackers to execute arbitrary code via a crafted (1) 3DM or (2) Flic…

Mitigation only
Fix from $1,600 2015-10-30
Medcin Engine HIGH 7.5
CVE-2015-6006

The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code…

Mitigation only
Fix from $1,950 2015-10-29
Domino HIGH 7.5
CVE-2015-5040

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary cod…

Patch available
Fix from $1,950 2015-10-29
Domino HIGH 7.5
CVE-2015-4994

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary cod…

Patch available
Fix from $1,950 2015-10-29
Medcin Engine MEDIUM 6.8
CVE-2015-2901

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute arbitrary code via a crafted p…

Mitigation only
Fix from $1,600 2015-10-29
Medcin Engine MEDIUM 6.8
CVE-2015-2900

The AddUserFinding add_userfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service (ou…

Fix: after 2.22.20142.166
Fix from $1,600 2015-10-29
Medcin Engine MEDIUM 6.8
CVE-2015-2899

Heap-based buffer overflow in the QualifierList retrieve_qualifier_list function in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote a…

Fix: after 2.22.20142.166
Fix from $1,600 2015-10-29
Medcin Engine MEDIUM 6.8
CVE-2015-2898

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a cr…

Fix: after 2.22.20142.166
Fix from $1,600 2015-10-29
Micrologix 1100 Firmware HIGH 7.5
CVE-2015-6492

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (m…

Fix: after 15.002
Fix from $1,950 2015-10-28
Micrologix 1100 Firmware CRITICAL 9.8
CVE-2015-6490EPSS 7%

Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attacker…

Fix: after 15.002
Fix from $2,300 2015-10-28
Hana HIGH 7.5
CVE-2015-7986EPSS 6%

The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt…

Fix: after 1.00.095
Fix from $1,950 2015-10-27
Jboss Enterprise Application Platform MEDIUM 5.0
CVE-2015-5220

The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly (formerly JBoss Application Server) allows remote attackers…

Fix: after 6.4.3
Fix from $1,600 2015-10-27
Asr 5000 Software MEDIUM 5.0
CVE-2015-6340

The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote attackers to …

Mitigation only
Fix from $1,600 2015-10-27
Opensuse MEDIUM 6.8
CVE-2015-7673EPSS 5%

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-b…

Fix: after 2.31.4
Fix from $1,600 2015-10-26
PostgreSQL MEDIUM 6.4
CVE-2015-5289EPSS 5%

Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to cause a deni…

Fix: 9.3.10 / 9.4.5+
Fix from $1,600 2015-10-26
Scada Web Server HIGH 10.0
CVE-2015-1001

Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary code via a…

Mitigation only
Fix from $1,950 2015-10-25
Mac Os X HIGH 7.2
CVE-2015-7021

The Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to gain privileges or cause a denial of service (kernel memory corrupt…

Fix: after 10.11.0
Fix from $1,950 2015-10-23
Mac Os X MEDIUM 5.6
CVE-2015-7020

The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Mac Os X MEDIUM 5.6
CVE-2015-7019

The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Iphone Os MEDIUM 6.8
CVE-2015-7018

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Iphone Os MEDIUM 6.8
CVE-2015-7015

Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attacke…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Itunes MEDIUM 6.8
CVE-2015-7013

WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service…

Fix: after 12.3.0
Fix from $1,600 2015-10-23
Safari MEDIUM 6.8
CVE-2015-7014

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a …

Fix: after 12.3.0
Fix from $1,600 2015-10-23
Safari MEDIUM 6.8
CVE-2015-7012

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a …

Fix: after 12.3.0
Fix from $1,600 2015-10-23
Safari MEDIUM 6.8
CVE-2015-7011

WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service…

Fix: after 12.3.0
Fix from $1,600 2015-10-23
Iphone Os MEDIUM 6.8
CVE-2015-7010

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Iphone Os MEDIUM 6.8
CVE-2015-7009

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Iphone Os MEDIUM 6.8
CVE-2015-7008

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23