Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Sumatrapdf HIGH 9.3
CVE-2012-4896EPSS 5%

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnera…

Fix: after 2.0.1
Fix from $1,950 2012-10-05
Wireshark MEDIUM 5.8
CVE-2012-5240

Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8.x before 1.8.3 allows remote attack…

Mitigation only
Fix from $1,600 2012-10-04
Powertcp Activex MEDIUM 5.0
CVE-2012-3819

Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remot…

No fix yet
Fix from $1,600 2012-10-04
Deltav MEDIUM 5.0
CVE-2012-3035

Buffer overflow in Emerson DeltaV 9.3.1 and 10.3 through 11.3.1 allows remote attackers to cause a denial of service (daemon crash) via a long string…

Mitigation only
Fix from $1,600 2012-10-01
Fedora HIGH 7.5
CVE-2012-4415EPSS 14%

Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote attackers to cause a denial of…

Fix: after 0.6.2
Fix from $1,950 2012-10-01
Condor HIGH 10.0
CVE-2012-5196

Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors.

Mitigation only
Fix from $1,950 2012-09-28
Chrome MEDIUM 6.8
CVE-2012-2895

The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other im…

Fix: after 22.0.1229.78
Fix from $1,600 2012-09-26
Chrome HIGH 7.8
CVE-2012-2897EPSS 22%

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Win…

Fix: after 22.0.1229.78
Fix from $1,950 2012-09-26
Chrome HIGH 7.5
CVE-2012-2874

Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact vi…

Fix: after 22.0.1229.78
Fix from $1,950 2012-09-26
Chrome HIGH 7.5
CVE-2012-2876

Buffer overflow in the SSE2 optimization functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or p…

Fix: after 22.0.1229.78
Fix from $1,950 2012-09-26
Chrome HIGH 7.5
CVE-2012-2881

Google Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (DOM tree corruption)…

Fix: after 22.0.1229.78
Fix from $1,950 2012-09-26
Chrome HIGH 7.5
CVE-2012-2883

Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact vi…

Fix: after 22.0.1229.78
Fix from $1,950 2012-09-26
Chrome MEDIUM 5.0
CVE-2012-2884

Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Fix: after 22.0.1229.78
Fix from $1,600 2012-09-26
Informix Dynamic Server HIGH 9.0
CVE-2012-3334

Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authenticated user…

Mitigation only
Fix from $1,950 2012-09-25
Iphone Os MEDIUM 5.0
CVE-2012-3745

Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service (buffer overflow and connectivity outage) vi…

Fix: after 5.1.1
Fix from $1,600 2012-09-20
Iphone Os MEDIUM 6.8
CVE-2012-3747

WebKit, as used in Apple iOS before 6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicat…

Fix: after 5.1.1
Fix from $1,600 2012-09-20
Iphone Os MEDIUM 6.8
CVE-2012-3727

Buffer overflow in the IPsec component in Apple iOS before 6 allows remote attackers to execute arbitrary code via a crafted racoon configuration fil…

Fix: after 5.1.1
Fix from $1,600 2012-09-20
Mac Os X HIGH 7.5
CVE-2012-0650

Buffer overflow in the DirectoryService Proxy in DirectoryService in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code …

Fix: after 10.6.8
Fix from $1,950 2012-09-20
Mac Os X HIGH 7.5
CVE-2012-3716EPSS 6%

CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write o…

Mitigation only
Fix from $1,950 2012-09-20
Djvu Browser Plug In HIGH 9.3
CVE-2012-5006

Heap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser Plug-in 6.1.4 Build 27351 and other versions before 6.1.4.27993 allows remote attac…

Fix: after 6.1.4
Fix from $1,950 2012-09-19
Dl 10 MEDIUM 6.8
CVE-2012-5002EPSS 31%

Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allow…

No fix yet
Fix from $1,600 2012-09-19
Flashfxp HIGH 9.0
CVE-2012-4992EPSS 18%

Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1)…

No fix yet
Fix from $1,950 2012-09-19
Asterisk HIGH 7.5
CVE-2012-1184EPSS 16%

Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows remote a…

Patch available
Fix from $1,950 2012-09-18
Freeradius MEDIUM 6.8
CVE-2012-3547EPSS 6%

Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attacke…

Mitigation only
Fix from $1,600 2012-09-18
iOS MEDIUM 5.0
CVE-2012-3915

The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE state) via a large volume of h…

Mitigation only
Fix from $1,600 2012-09-16
Intrusion Prevention System MEDIUM 5.0
CVE-2012-3901

The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service (process crash…

Mitigation only
Fix from $1,600 2012-09-16
Ipswcom Activex Component HIGH 9.3
CVE-2012-4924EPSS 36%

Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execu…

No fix yet
Fix from $1,950 2012-09-15
Ccmplayer HIGH 9.3
CVE-2011-5170EPSS 32%

Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u…

No fix yet
Fix from $1,950 2012-09-15
Power2go HIGH 9.3
CVE-2011-5171EPSS 46%

Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to execute arbitrary code via the…

No fix yet
Fix from $1,950 2012-09-15
Storyboard Quick HIGH 9.3
CVE-2011-5172EPSS 6%

Stack-based buffer overflow in StoryBoard Quick 6 Build 3786, and possibly StoryBoard Artist and StoryBoard Studio, allows remote attackers to execut…

No fix yet
Fix from $1,950 2012-09-15