Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Wireshark MEDIUM 5.0
CVE-2013-4079

The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote at…

Mitigation only
Fix from $1,600 2013-06-09
Wireshark MEDIUM 5.0
CVE-2013-4080

The dissect_r3_upstreamcommand_queryconfig function in epan/dissectors/packet-assa_r3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.…

Mitigation only
Fix from $1,600 2013-06-09
Wireshark MEDIUM 5.0
CVE-2013-4081

The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8…

Mitigation only
Fix from $1,600 2013-06-09
Wireshark MEDIUM 5.0
CVE-2013-4082

The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationship between …

Patch available
Fix from $1,600 2013-06-09
Linux Kernel HIGH 7.9
CVE-2013-2850EPSS 7%

Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target sub…

Fix: 3.2.47 / 3.4.48+
Fix from $1,950 2013-06-07
Linux Kernel MEDIUM 6.8
CVE-2011-4604

The bat_socket_read function in net/batman-adv/icmp_socket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of service (mem…

Fix: after 3.2.46
Fix from $1,600 2013-06-07
Mac Os X MEDIUM 6.8
CVE-2013-0975

Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service (…

Fix: after 10.8.3
Fix from $1,600 2013-06-05
Mac Os X MEDIUM 6.8
CVE-2013-0983

Stack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial …

Fix: after 10.8.3
Fix from $1,600 2013-06-05
Mac Os X HIGH 9.3
CVE-2013-0984EPSS 14%

Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via …

Fix: after 10.6.8
Fix from $1,950 2013-06-05
Safari MEDIUM 6.8
CVE-2013-1009

WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and a…

Fix: after 6.0.4
Fix from $1,600 2013-06-05
Safari MEDIUM 6.8
CVE-2013-1023

WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and a…

Fix: after 6.0.4
Fix from $1,600 2013-06-05
Iphone Os MEDIUM 5.0
CVE-2013-3950

Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier for atta…

No fix yet
Fix from $1,600 2013-06-05
Tivoli Netcool Application Service Monitors HIGH 7.6
CVE-2013-0509EPSS 7%

Buffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before …

Mitigation only
Fix from $1,950 2013-06-05
Db2 HIGH 7.2
CVE-2013-3475

Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics Syste…

Mitigation only
Fix from $1,950 2013-06-05
Tivoli Netcool Application Service Monitors HIGH 7.6
CVE-2013-0508

Multiple buffer overflows in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 and 4.0.1 befo…

Mitigation only
Fix from $1,950 2013-06-05
Chrome HIGH 7.5
CVE-2013-2862

Skia, as used in Google Chrome before 27.0.1453.110, does not properly handle GPU acceleration, which allows remote attackers to cause a denial of se…

Fix: after 27.0.1453.109
Fix from $1,950 2013-06-05
Chrome HIGH 10.0
CVE-2013-2863

Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote attackers to execute arbitrary code or cause a denial of…

Fix: after 27.0.1453.109
Fix from $1,950 2013-06-05
Chrome HIGH 7.5
CVE-2013-2864

The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (invalid free operation) or possibly…

Fix: after 27.0.1453.109
Fix from $1,950 2013-06-05
Chrome MEDIUM 5.0
CVE-2013-2855

The Developer Tools API in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (memory corruption) or possibly ha…

Fix: after 27.0.1453.109
Fix from $1,600 2013-06-05
Nx Os MEDIUM 5.4
CVE-2013-1210

Array index error in the Virtual Ethernet Module (VEM) kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enable…

Mitigation only
Fix from $1,600 2013-05-29
Wireshark MEDIUM 5.0
CVE-2013-3557

The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x before 1.8.7 do…

Patch available
Fix from $1,600 2013-05-25
Windows 7 HIGH 7.8
CVE-2013-3660 KEVEPSS 40%

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V…

Patch available
Fix from $1,950 2013-05-24
Quicktime HIGH 9.3
CVE-2013-0986

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) vi…

Fix: after 10.8.3
Fix from $1,950 2013-05-24
Quicktime HIGH 9.3
CVE-2013-1019EPSS 6%

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) vi…

Fix: after 7.7.3
Fix from $1,950 2013-05-24
Resource Hacker HIGH 9.3
CVE-2012-6553EPSS 5%

Heap-based buffer overflow in Resource Hacker 3.6.0.92 allows remote attackers to execute arbitrary code via a Portable Executable (PE) file with a r…

No fix yet
Fix from $1,950 2013-05-23
Pe Explorer HIGH 9.3
CVE-2012-6558EPSS 5%

Heap-based buffer overflow in HeavenTools PE Explorer 1.99 R6 allows remote attackers to execute arbitrary code via the size value for a string in th…

No fix yet
Fix from $1,950 2013-05-23
Chrome HIGH 7.5
CVE-2013-2845

The Web Audio implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (memory corruption) or possibl…

Fix: after 27.0.1453.91
Fix from $1,950 2013-05-22
Chrome MEDIUM 5.0
CVE-2013-2838

Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified ve…

Fix: after 27.0.1453.91
Fix from $1,600 2013-05-22
Serva32 MEDIUM 5.0
CVE-2013-0145EPSS 9%

Buffer overflow in the TFTPD service in Serva32 2.1.0 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitra…

Mitigation only
Fix from $1,600 2013-05-20
Itunes HIGH 9.3
CVE-2013-0999

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corr…

Fix: after 11.0.2
Fix from $1,950 2013-05-20