Browse CVEs

MEDIUM 6.9 CVE-2014-0774 Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLU… Ofs Test Client Tlxcdlfofs33 Mitigation only Fix from $1,6002014-02-28 HIGH 7.5 CVE-2014-1262 Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that … Mac Os X after 10.9.1 Fix from $1,9502014-02-27 MEDIUM 6.8 CVE-2014-1268 WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (me… Safari after 6.1.1 Fix from $1,6002014-02-27 MEDIUM 6.8 CVE-2014-1269 WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (me… Safari after 6.1.1 Fix from $1,6002014-02-27 MEDIUM 6.8 CVE-2014-1270 WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (me… Safari after 6.1.1 Fix from $1,6002014-02-27 MEDIUM 6.8 CVE-2014-1254 Apple Type Services (ATS) in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupti… Mac Os X after 10.9.1 Fix from $1,6002014-02-27 HIGH 7.5 CVE-2014-1256 Buffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted … Mac Os X after 10.9.1 Fix from $1,9502014-02-27 MEDIUM 6.8 CVE-2014-1258 Heap-based buffer overflow in CoreAnimation in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of servic… Mac Os X after 10.9.1 Fix from $1,6002014-02-27 MEDIUM 6.8 CVE-2014-1259 Buffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute arbitrary code or cause a denial of service (application cra… Mac Os X after 10.9.1 Fix from $1,6002014-02-27 MEDIUM 6.8 CVE-2014-1260 QuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicat… Mac Os X after 10.8.5 Fix from $1,6002014-02-27 MEDIUM 6.8 CVE-2011-4111 Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote… Enterprise Linux after 0.15.1 Fix from $1,6002014-02-26 HIGH 10.0 CVE-2014-0498EPSS 7% Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 1… Flash Player 4.0.0.1628 / 11.2.202.341+ Fix from $1,9502014-02-21 HIGH 7.5 CVE-2011-3604 The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buf… Router Advertisement Daemon after 1.8.1 Fix from $1,9502014-02-17 HIGH 7.5 CVE-2012-0270EPSS 55% Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file to the ge… Csound after 5.16.1 Fix from $1,9502014-02-17 HIGH 7.5 CVE-2011-3601 Buffer overflow in the process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to execute arbitrary code … Router Advertisement Daemon after 1.8.1 Fix from $1,9502014-02-17 HIGH 7.5 CVE-2013-5351EPSS 5% Heap-based buffer overflow in IrfanView before 4.37 allows remote attackers to execute arbitrary code via the LZW code stream in a GIF file. Irfanview after 4.36 Fix from $1,9502014-02-14 HIGH 9.3 CVE-2014-0263EPSS 19% The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wind… Windows 7 Patch available Fix from $1,9502014-02-12 HIGH 9.3 CVE-2014-0271EPSS 38% The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or c… Internet Explorer Mitigation only Fix from $1,9502014-02-12 MEDIUM 6.8 CVE-2013-1980 Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attackers to execute arbitrary code via a crafte… Extended Module Player after 4.0.4 Fix from $1,6002014-02-11 HIGH 9.3 CVE-2014-0980EPSS 40% Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file. Publish It No fix yet Fix from $1,9502014-02-11 MEDIUM 5.0 CVE-2011-4610 JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform befor… Jboss Communications Platform after 5.1.2 Fix from $1,6002014-02-10 MEDIUM 5.0 CVE-2014-0044 The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denia… Mumble Mitigation only Fix from $1,6002014-02-08 MEDIUM 6.8 CVE-2013-6393EPSS 7% The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denia… Ubuntu Linux after 0.1.4 Fix from $1,6002014-02-06 HIGH 10.0 CVE-2013-6490EPSS 15% The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header,… Pidgin after 2.10.7 Fix from $1,9502014-02-06 MEDIUM 5.0 CVE-2013-6481 libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo! P2P message wit… Pidgin after 2.10.7 Fix from $1,6002014-02-06 MEDIUM 5.0 CVE-2013-6485 Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service (application crash) or possibl… Pidgin after 2.10.7 Fix from $1,6002014-02-06 HIGH 9.3 CVE-2013-2691 Stack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 allows remote attackers to execute arbitrary code via a crafted MPEG2-TS video… Jetaudio Mitigation only Fix from $1,9502014-02-05 HIGH 9.3 CVE-2013-4978EPSS 7% Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE allows remote attackers to execute arbitrary code via a c… Aloaha Pdf Suite Free after 5.0.0.7 Fix from $1,9502014-02-05 HIGH 9.3 CVE-2012-2108EPSS 7% Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote att… Csound after 5.17 Fix from $1,9502014-02-04 HIGH 7.2 CVE-2013-4738 Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contrib… Android Msm Mitigation only Fix from $1,9502014-02-03