Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Afaria MEDIUM 5.0
CVE-2015-2820

Buffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial of service (process termination) via a crafted reque…

No fix yet
Fix from $1,600 2015-04-01
Netweaver MEDIUM 6.5
CVE-2015-2815

Buffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 (7000.52.12.34966) and 7.40 (7400.12.21.30308) allows remo…

No fix yet
Fix from $1,600 2015-04-01
Firefox MEDIUM 6.4
CVE-2015-0811

The QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain sensitive information from process heap memory or cause a de…

Fix: after 36.0.4
Fix from $1,600 2015-04-01
Debian Linux HIGH 7.5
CVE-2015-0838

Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary c…

Fix: after 0.9.8
Fix from $1,950 2015-03-31
Cifs Utils HIGH 10.0
CVE-2014-2830EPSS 6%

Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecifi…

Fix: after 6.3
Fix from $1,950 2015-03-31
PHP MEDIUM 5.0
CVE-2014-9709EPSS 15%

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a…

Fix: 5.4.40 / 5.5.21+
Fix from $1,600 2015-03-30
PHP MEDIUM 5.0
CVE-2014-9652EPSS 5%

The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x befo…

Fix: after 5.20
Fix from $1,600 2015-03-30
Byzanz HIGH 7.5
CVE-2015-2785

The GIF encoder in Byzanz allows remote attackers to cause a denial of service (out-of-bounds heap write and crash) or possibly execute arbitrary cod…

Mitigation only
Fix from $1,950 2015-03-29
Pbm212030 HIGH 7.5
CVE-2013-7438

Multiple buffer overflows in pbm212030 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted P…

Mitigation only
Fix from $1,950 2015-03-29
Promotic HIGH 7.5
CVE-2014-9205

Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and …

Fix: after 8.3.1
Fix from $1,950 2015-03-29
Tcpdump MEDIUM 5.0
CVE-2015-2154

The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service …

Fix: after 4.7.0
Fix from $1,600 2015-03-24
Tcpdump MEDIUM 5.0
CVE-2015-2153EPSS 19%

The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (…

Fix: after 4.7.0
Fix from $1,600 2015-03-24
Libxfont HIGH 8.5
CVE-2015-1802

The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a…

Fix: after 1.4.8
Fix from $1,950 2015-03-20
Single Sign On HIGH 7.5
CVE-2015-2281EPSS 10%

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbitrary cod…

No fix yet
Fix from $1,950 2015-03-19
Bacnet Opc Server HIGH 9.0
CVE-2015-0979

Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary…

Fix: after 2.1.359.22
Fix from $1,950 2015-03-14
Device Type Manager MEDIUM 6.9
CVE-2014-9206

Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 a…

Fix: after 3.1.6
Fix from $1,600 2015-03-14
Mac Os X MEDIUM 5.4
CVE-2015-1065

Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbi…

Fix: after 10.10.2
Fix from $1,600 2015-03-12
Webgate Embedded Standard Protocol Sdk HIGH 7.5
CVE-2015-2097EPSS 24%

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors t…

No fix yet
Fix from $1,950 2015-03-09
Edvr Manager MEDIUM 6.8
CVE-2015-2095

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attacker…

Mitigation only
Fix from $1,600 2015-03-09
Winrds HIGH 7.5
CVE-2015-2094EPSS 14%

Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via un…

No fix yet
Fix from $1,950 2015-03-09
Webeyeaudio MEDIUM 6.8
CVE-2015-2093

Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers to execute arbitrary code via …

Mitigation only
Fix from $1,600 2015-03-09
Feature Extraction HIGH 7.5
CVE-2015-2092

The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted …

Mitigation only
Fix from $1,950 2015-03-09
Creo View HIGH 7.5
CVE-2015-2061

Heap-based buffer overflow in the browser plugin for PTC Creo View allows remote attackers to execute arbitrary code via vectors involving setting a …

Mitigation only
Fix from $1,950 2015-03-09
Chrome HIGH 7.5
CVE-2015-1232

Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midi_manager_usb.cc in Google Chrome before 41.0.2272.76 allows …

Fix: after 40.0.2214.115
Fix from $1,950 2015-03-09
Chrome MEDIUM 5.0
CVE-2015-1225

PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vecto…

Fix: after 40.0.2214.115
Fix from $1,600 2015-03-09
Ubuntu Linux HIGH 7.5
CVE-2015-1215

The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly ha…

Fix: after 40.0.2214.115
Fix from $1,950 2015-03-09
Chrome HIGH 7.5
CVE-2015-1213

The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows…

Fix: after 40.0.2214.115
Fix from $1,950 2015-03-09
Ubuntu Linux MEDIUM 6.8
CVE-2015-0829EPSS 6%

Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is im…

Fix: after 35.0.1
Fix from $1,600 2015-02-25
Firefox MEDIUM 6.8
CVE-2015-0826

The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a deni…

Fix: after 35.0.1
Fix from $1,600 2015-02-25
Ubuntu Linux MEDIUM 5.0
CVE-2015-0824

The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of ser…

Fix: after 35.0.1
Fix from $1,600 2015-02-25