Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Eudora Worldmail HIGH 7.5
CVE-2014-10031

Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrary code via a long string in a …

No fix yet
Fix from $1,950 2015-01-13
Product Data Management HIGH 7.5
CVE-2014-100014EPSS 6%

Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to execute arbitrary code via a …

No fix yet
Fix from $1,950 2015-01-13
Traffic Server MEDIUM 5.0
CVE-2014-10022EPSS 6%

Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, related to internal buffer sizing.

Fix: after 5.1.1
Fix from $1,600 2015-01-13
Tv Ip422w HIGH 7.5
CVE-2014-10011EPSS 10%

Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote…

No fix yet
Fix from $1,950 2015-01-13
Hancom Office 2010 Se HIGH 7.5
CVE-2013-7420EPSS 7%

Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML elemen…

Mitigation only
Fix from $1,950 2015-01-12
Mac Os X HIGH 8.8
CVE-2014-9495

Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might all…

Fix: after 10.11.3
Fix from $1,950 2015-01-10
Wireshark MEDIUM 5.0
CVE-2015-0564

Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3…

Mitigation only
Fix from $1,600 2015-01-10
Wonderware Intouch Access Anywhere Server HIGH 10.0
CVE-2014-9190EPSS 6%

Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrar…

Mitigation only
Fix from $1,950 2015-01-10
Ida HIGH 10.0
CVE-2014-9458

Heap-based buffer overflow in the GDB debugger module in Hex-Rays IDA Pro before 6.6 cumulative fix 2014-12-24 allows remote GDB servers to have unsp…

Fix: after 6.6
Fix from $1,950 2015-01-02
Notepad\+\+ HIGH 10.0
CVE-2014-9456EPSS 11%

Buffer overflow in NotePad++ 6.6.9 allows remote attackers to have unspecified impact via a long Time attribute in an Event element in an XML file. …

Mitigation only
Fix from $1,950 2015-01-02
Vdg Sense HIGH 7.5
CVE-2014-9451

Multiple stack-based buffer overflows in the DIVA web service API (/webservice) in VDG Security SENSE (formerly DIVA) 2.3.13 allow remote attackers t…

No fix yet
Fix from $1,950 2015-01-02
Fedora MEDIUM 5.0
CVE-2014-9449

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash…

Mitigation only
Fix from $1,600 2015-01-02
Rm Mp3 Converter HIGH 7.5
CVE-2014-9448EPSS 6%

Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or cause a denial of service (cr…

No fix yet
Fix from $1,950 2015-01-02
Gogago Youtube Video Converter HIGH 9.3
CVE-2011-5295

Buffer overflow in the Download method in a certain ActiveX control in MDIEEx.dll in Gogago YouTube Video Converter 1.1.6 allows remote attackers to …

No fix yet
Fix from $1,950 2015-01-01
Threedify Designer HIGH 9.3
CVE-2011-5293

The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to wri…

No fix yet
Fix from $1,950 2015-01-01
Threedify Designer HIGH 9.3
CVE-2011-5288

Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote attackers …

No fix yet
Fix from $1,950 2015-01-01
Debian Linux HIGH 7.5
CVE-2014-8145EPSS 8%

Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV f…

Fix: after 14.4.1
Fix from $1,950 2014-12-31
Proclima HIGH 9.0
CVE-2014-9188EPSS 6%

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code vi…

Fix: after 6.0.1
Fix from $1,950 2014-12-27
Proclima HIGH 7.5
CVE-2014-8514

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code vi…

Fix: after 6.0.1
Fix from $1,950 2014-12-27
Proclima HIGH 7.5
CVE-2014-8513

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code vi…

Fix: after 6.0.1
Fix from $1,950 2014-12-27
Proclima HIGH 7.5
CVE-2014-8512

Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via …

Fix: after 6.0.1
Fix from $1,950 2014-12-27
Proclima HIGH 10.0
CVE-2014-8511

Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via …

Fix: after 6.0.1
Fix from $1,950 2014-12-27
Vlc Media Player HIGH 7.5
CVE-2011-3623

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted AS…

Fix: after 1.0.1
Fix from $1,950 2014-12-26
Vlc Media Player HIGH 7.5
CVE-2010-1445

Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or poss…

Fix: after 1.0.5
Fix from $1,950 2014-12-26
Vlc Media Player HIGH 7.5
CVE-2010-1444

The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access an…

Fix: after 1.0.5
Fix from $1,950 2014-12-26
Vlc Media Player HIGH 7.5
CVE-2010-1442

VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly…

Fix: after 1.0.5
Fix from $1,950 2014-12-26
Vlc Media Player HIGH 7.5
CVE-2010-1441

Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash…

Fix: after 1.0.5
Fix from $1,950 2014-12-26
Rompager HIGH 10.0
CVE-2014-9223EPSS 6%

Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to …

Fix: after 4.07
Fix from $1,950 2014-12-24
Enterprise Linux HIGH 7.5
CVE-2014-8138EPSS 19%

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or p…

No fix yet
Fix from $1,950 2014-12-24
Deployment Solution HIGH 7.2
CVE-2014-7286

Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via un…

Fix: after 6.9
Fix from $1,950 2014-12-22