Browse CVEs

MEDIUM 5.0 CVE-2015-2820 Buffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial of service (process termination) via a crafted reque… Afaria No fix yet Fix from $1,6002015-04-01 MEDIUM 6.5 CVE-2015-2815 Buffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 (7000.52.12.34966) and 7.40 (7400.12.21.30308) allows remo… Netweaver No fix yet Fix from $1,6002015-04-01 MEDIUM 6.4 CVE-2015-0811 The QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain sensitive information from process heap memory or cause a de… Firefox after 36.0.4 Fix from $1,6002015-04-01 HIGH 7.5 CVE-2015-0838 Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary c… Debian Linux after 0.9.8 Fix from $1,9502015-03-31 HIGH 10.0 CVE-2014-2830EPSS 6% Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecifi… Cifs Utils after 6.3 Fix from $1,9502015-03-31 MEDIUM 5.0 CVE-2014-9709EPSS 15% The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a… PHP 5.4.40 / 5.5.21+ Fix from $1,6002015-03-30 MEDIUM 5.0 CVE-2014-9652EPSS 5% The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x befo… PHP after 5.20 Fix from $1,6002015-03-30 HIGH 7.5 CVE-2015-2785 The GIF encoder in Byzanz allows remote attackers to cause a denial of service (out-of-bounds heap write and crash) or possibly execute arbitrary cod… Byzanz Mitigation only Fix from $1,9502015-03-29 HIGH 7.5 CVE-2013-7438 Multiple buffer overflows in pbm212030 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted P… Pbm212030 Mitigation only Fix from $1,9502015-03-29 HIGH 7.5 CVE-2014-9205 Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and … Promotic after 8.3.1 Fix from $1,9502015-03-29 MEDIUM 5.0 CVE-2015-2154 The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service … Tcpdump after 4.7.0 Fix from $1,6002015-03-24 MEDIUM 5.0 CVE-2015-2153EPSS 19% The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (… Tcpdump after 4.7.0 Fix from $1,6002015-03-24 HIGH 8.5 CVE-2015-1802 The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a… Libxfont after 1.4.8 Fix from $1,9502015-03-20 HIGH 7.5 CVE-2015-2281EPSS 10% Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbitrary cod… Single Sign On No fix yet Fix from $1,9502015-03-19 HIGH 9.0 CVE-2015-0979 Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary… Bacnet Opc Server after 2.1.359.22 Fix from $1,9502015-03-14 MEDIUM 6.9 CVE-2014-9206 Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 a… Device Type Manager after 3.1.6 Fix from $1,6002015-03-14 MEDIUM 5.4 CVE-2015-1065 Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbi… Mac Os X after 10.10.2 Fix from $1,6002015-03-12 HIGH 7.5 CVE-2015-2097EPSS 24% Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors t… Webgate Embedded Standard Protocol Sdk No fix yet Fix from $1,9502015-03-09 MEDIUM 6.8 CVE-2015-2095 Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attacker… Edvr Manager Mitigation only Fix from $1,6002015-03-09 HIGH 7.5 CVE-2015-2094EPSS 14% Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via un… Winrds No fix yet Fix from $1,9502015-03-09 MEDIUM 6.8 CVE-2015-2093 Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers to execute arbitrary code via … Webeyeaudio Mitigation only Fix from $1,6002015-03-09 HIGH 7.5 CVE-2015-2092 The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted … Feature Extraction Mitigation only Fix from $1,9502015-03-09 HIGH 7.5 CVE-2015-2061 Heap-based buffer overflow in the browser plugin for PTC Creo View allows remote attackers to execute arbitrary code via vectors involving setting a … Creo View Mitigation only Fix from $1,9502015-03-09 HIGH 7.5 CVE-2015-1232 Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midi_manager_usb.cc in Google Chrome before 41.0.2272.76 allows … Chrome after 40.0.2214.115 Fix from $1,9502015-03-09 MEDIUM 5.0 CVE-2015-1225 PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vecto… Chrome after 40.0.2214.115 Fix from $1,6002015-03-09 HIGH 7.5 CVE-2015-1215 The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly ha… Ubuntu Linux after 40.0.2214.115 Fix from $1,9502015-03-09 HIGH 7.5 CVE-2015-1213 The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows… Chrome after 40.0.2214.115 Fix from $1,9502015-03-09 MEDIUM 6.8 CVE-2015-0829EPSS 6% Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is im… Ubuntu Linux after 35.0.1 Fix from $1,6002015-02-25 MEDIUM 6.8 CVE-2015-0826 The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a deni… Firefox after 35.0.1 Fix from $1,6002015-02-25 MEDIUM 5.0 CVE-2015-0824 The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of ser… Ubuntu Linux after 35.0.1 Fix from $1,6002015-02-25