dbcve.org
Vulnerability index

Browse CVEs

10,000+ matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Top technology Linux 13140 Google 12537 Microsoft 12388 Oracle 7054 Apple 6692 Ibm 6393 Adobe 6390 Cisco 5759 Debian 3919 Mozilla 2901 Apache 2864 Redhat 2604
Debian Linux MEDIUM 5.0
CVE-2014-4342EPSS 7%

MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer d…

Patch available
Fix from $1,600 2014-07-20
Advantech Webaccess HIGH 7.5
CVE-2014-2364EPSS 61%

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1)…

Fix: after 7.1
Fix from $1,950 2014-07-19
Adaptive Security Appliance Software MEDIUM 6.8
CVE-2013-6691

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0(.4.1) and earlier allows remote CIFS servers to cause a denial…

Fix: after 9.0
Fix from $1,600 2014-07-14
Exaopc HIGH 8.3
CVE-2014-3888EPSS 62%

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaop…

Fix: after 7.03.01
Fix from $1,950 2014-07-10
Webex Meeting Center MEDIUM 5.1
CVE-2014-3311

Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote…

Mitigation only
Fix from $1,600 2014-07-10
Xnview HIGH 9.3
CVE-2012-4988EPSS 10%

Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99.1 allows remote attackers to…

No fix yet
Fix from $1,950 2014-07-09
Becky\! Internet Mail MEDIUM 6.8
CVE-2014-3891

Buffer overflow in RimArts Becky! Internet Mail before 2.68 allows remote POP3 servers to execute arbitrary code via a crafted response.

Fix: after 2.67
Fix from $1,600 2014-07-09
PHP MEDIUM 6.5
CVE-2014-0207EPSS 17%

The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allo…

Fix: 5.3.29 / 5.4.30+
Fix from $1,600 2014-07-09
PHP MEDIUM 6.5
CVE-2014-3478EPSS 15%

Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before …

Fix: after 5.18
Fix from $1,600 2014-07-09
Foxit Pdf Sdk Dll MEDIUM 6.8
CVE-2014-4646

Buffer overflow in the FPDFBookmark_GetTitle method in Foxit PDF SDK DLL before 3.1.1.5005 allows context-dependent attackers to execute arbitrary co…

Fix: after 3.1.1.2927
Fix from $1,600 2014-07-07
Realplayer HIGH 9.3
CVE-2014-3113EPSS 5%

Multiple buffer overflows in RealNetworks RealPlayer before 17.0.10.8 allow remote attackers to execute arbitrary code via a malformed (1) elst or (2…

Fix: after 17.0.8.22
Fix from $1,950 2014-07-07
Android MEDIUM 5.1
CVE-2014-3100

Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arb…

No fix yet
Fix from $1,600 2014-07-02
Sketchup HIGH 9.3
CVE-2013-3662EPSS 32%

Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color palette table…

Fix: after 8.0
Fix from $1,950 2014-07-01
Sketchup HIGH 9.3
CVE-2013-3664EPSS 30%

Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette tab…

Fix: after 8.0
Fix from $1,950 2014-07-01
Sketchup HIGH 9.3
CVE-2013-7388EPSS 13%

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to ex…

Fix: after 8.0
Fix from $1,950 2014-07-01
Safari MEDIUM 6.8
CVE-2014-1367

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to exec…

Fix: after 7.1.1
Fix from $1,600 2014-07-01
Safari MEDIUM 6.8
CVE-2014-1368

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to exec…

Fix: after 7.1.1
Fix from $1,600 2014-07-01
Mac Os X MEDIUM 6.8
CVE-2014-1370

The byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers to execute arbitrary code or cause a denial of servi…

Fix: after 10.9.3
Fix from $1,600 2014-07-01
Mac Os X HIGH 7.5
CVE-2014-1371

Array index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code or cause a denial of service (incorrect function-poi…

Fix: after 10.9.3
Fix from $1,950 2014-07-01
Safari MEDIUM 6.8
CVE-2014-1382

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to exec…

Fix: after 7.1.1
Fix from $1,600 2014-07-01
Mac Os X HIGH 10.0
CVE-2014-1356

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbi…

Fix: after 7.1.1
Fix from $1,950 2014-07-01
Tvos HIGH 10.0
CVE-2014-1357

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbi…

Fix: after 7.1.1
Fix from $1,950 2014-07-01
Safari MEDIUM 6.8
CVE-2014-1362

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to exec…

Fix: after 7.1.1
Fix from $1,600 2014-07-01
Safari MEDIUM 6.8
CVE-2014-1363

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to exec…

Fix: after 7.1.1
Fix from $1,600 2014-07-01
Safari MEDIUM 6.8
CVE-2014-1364

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to exec…

Fix: after 7.1.1
Fix from $1,600 2014-07-01
Safari MEDIUM 6.8
CVE-2014-1365

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to exec…

Fix: after 7.1.1
Fix from $1,600 2014-07-01
Safari MEDIUM 6.8
CVE-2014-1366

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to exec…

Fix: after 7.1.1
Fix from $1,600 2014-07-01
Safari MEDIUM 6.8
CVE-2014-1325

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to exec…

Fix: after 7.1.1
Fix from $1,600 2014-07-01
Safari MEDIUM 6.8
CVE-2014-1340

WebKit, as used in Apple Safari before 6.1.5 and 7.x before 7.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (me…

Fix: after 6.1.4
Fix from $1,600 2014-07-01
Core Ftp MEDIUM 5.0
CVE-2014-4643EPSS 9%

Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (application c…

No fix yet
Fix from $1,600 2014-06-25