Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Photoshop Cs6 HIGH 9.3
CVE-2012-4170EPSS 11%

Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file.

Mitigation only
Fix from $1,950 2012-08-31
Xchat MEDIUM 5.0
CVE-2011-5129EPSS 8%

Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary cod…

Fix: after 2.8.9
Fix from $1,600 2012-08-30
Firefox HIGH 10.0
CVE-2012-3966EPSS 5%

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 a…

Fix: after 14.0
Fix from $1,950 2012-08-29
Firefox HIGH 10.0
CVE-2012-3971EPSS 5%

Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows …

Fix: after 14.0
Fix from $1,950 2012-08-29
Firefox HIGH 10.0
CVE-2012-1970EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, T…

Fix: 10.0.7 / 15.0+
Fix from $1,950 2012-08-29
Ffmpeg MEDIUM 5.0
CVE-2012-0855

Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a…

Fix: after 0.9
Fix from $1,600 2012-08-27
Pyfribidi MEDIUM 5.0
CVE-2012-1176

Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application …

Fix: after 0.10.9
Fix from $1,600 2012-08-26
Proxyone HIGH 10.0
CVE-2011-5124EPSS 55%

Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote att…

Mitigation only
Fix from $1,950 2012-08-26
Websense V10000 MEDIUM 5.0
CVE-2009-5128

The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and process crash) via a large fi…

Mitigation only
Fix from $1,600 2012-08-26
Websense V10000 MEDIUM 5.0
CVE-2009-5129

The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authentication outage) via a login…

Fix: after 1.0.0
Fix from $1,600 2012-08-26
Tor MEDIUM 5.0
CVE-2012-3518

The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allo…

Fix: after 0.2.2.37
Fix from $1,600 2012-08-26
Squidclamav MEDIUM 5.0
CVE-2012-3501

The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system …

Patch available
Fix from $1,600 2012-08-25
Chrome Os HIGH 10.0
CVE-2012-2864

Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chro…

Mitigation only
Fix from $1,950 2012-08-22
Flash Player HIGH 10.0
CVE-2012-4163EPSS 6%

Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux,…

Fix: 3.4.0.2540 / 10.3.183.23+
Fix from $1,950 2012-08-21
Flash Player HIGH 10.0
CVE-2012-4164EPSS 6%

Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux,…

Fix: 3.4.0.2540 / 10.3.183.23+
Fix from $1,950 2012-08-21
Flash Player HIGH 10.0
CVE-2012-4165EPSS 6%

Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux,…

Fix: 3.4.0.2540 / 10.3.183.23+
Fix from $1,950 2012-08-21
Ffmpeg MEDIUM 6.8
CVE-2011-3945

The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x bef…

Mitigation only
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2011-4364EPSS 5%

Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; …

Mitigation only
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 5.0
CVE-2012-0854

The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows re…

Fix: after 0.9
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 5.0
CVE-2012-0857

Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a…

Fix: after 0.9
Fix from $1,600 2012-08-20
Koffice HIGH 7.5
CVE-2012-3455EPSS 5%

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and ea…

Fix: after 2.3.3
Fix from $1,950 2012-08-20
Calligra HIGH 7.5
CVE-2012-3456EPSS 20%

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and e…

Fix: after 2.4.3
Fix from $1,950 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2011-3940

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5…

Mitigation only
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2011-3947

Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6…

Mitigation only
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2011-3951

The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6,…

Fix: after 0.9.1
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2012-0851

The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, …

Fix: after 0.9
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2012-0852

The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7…

Fix: after 0.9
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2012-0859

The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (ap…

Fix: after 0.9
Fix from $1,600 2012-08-20
Libav MEDIUM 6.8
CVE-2012-0947

Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6…

No fix yet
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2011-3929

The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x befo…

Mitigation only
Fix from $1,600 2012-08-20