Browse CVEs

HIGH 10.0 CVE-2013-5715 Buffer overflow in Gretech GOM Media Player before 2.2.53.5169 has unspecified impact and attack vectors. Gom Player after 2.1.50.5145 Fix from $1,9502013-09-09 HIGH 7.1 CVE-2013-2791 MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service (master-station daemon crash) via a malformed DNP3 TCP p… Scada Dnp3 Opc Server Mitigation only Fix from $1,9502013-09-09 HIGH 7.8 CVE-2013-2793 Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries… .net Communication Protocol Components Mitigation only Fix from $1,9502013-09-09 HIGH 7.1 CVE-2013-3458 Cisco Adaptive Security Appliances (ASA) devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to caus… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-09-08 HIGH 10.0 CVE-2013-3607EPSS 10% Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*… H8dcl 6f Mitigation only Fix from $1,9502013-09-08 HIGH 9.3 CVE-2013-1115 Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 al… Webex Advanced Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1116 Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 al… Webex Advanced Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1117 Buffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28… Webex Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1118 Stack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8… Webex Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1119 Buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remo… Webex Recording Format Player Mitigation only Fix from $1,9502013-09-06 MEDIUM 6.3 CVE-2013-3474 The Web Administrator Interface on Cisco Wireless LAN Controller (WLC) devices allows remote authenticated users to cause a denial of service (device… Wireless Lan Controller Mitigation only Fix from $1,6002013-08-30 HIGH 7.1 CVE-2013-5469 The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote a… iOS Mitigation only Fix from $1,9502013-08-30 HIGH 7.4 CVE-2013-2072 Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions t… Debian Linux Mitigation only Fix from $1,9502013-08-28 MEDIUM 5.7 CVE-2013-2212 The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause… Xen Mitigation only Fix from $1,6002013-08-28 HIGH 7.6 CVE-2013-3582 Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass inte… Latitude D530 No fix yet Fix from $1,9502013-08-28 HIGH 9.3 CVE-2013-4973EPSS 6% Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbi… Realplayer after 16.0.2.32 Fix from $1,9502013-08-27 HIGH 9.3 CVE-2013-4974 RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of… Realplayer after 16.0.2.32 Fix from $1,9502013-08-27 HIGH 9.3 CVE-2013-5578 Buffer overflow in the ToDot method in the WINGRAPHVIZLib.NEATO ActiveX control in WinGraphviz.dll in StarUML allows remote attackers to execute arbi… Staruml No fix yet Fix from $1,9502013-08-25 HIGH 7.5 CVE-2010-5289 Buffer overflow in the Authenticate method in the INCREDISPOOLERLib.Pop ActiveX control in ImSpoolU.dll in IncrediMail 2.0 allows remote attackers to… Incredimail No fix yet Fix from $1,9502013-08-25 HIGH 8.5 CVE-2013-3462 Buffer overflow in Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and… Unified Communications Manager Mitigation only Fix from $1,9502013-08-25 MEDIUM 5.0 CVE-2013-2801 The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service (instance shutdown and data-collectio… Pi Interface after 1.0.5.101 Fix from $1,6002013-08-22 HIGH 7.5 CVE-2013-2210EPSS 6% Heap-based buffer overflow in the XML Signature Reference functionality in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.2 al… Xml Security For C\+\+ after 1.7.1 Fix from $1,9502013-08-20 HIGH 7.5 CVE-2013-2154EPSS 8% Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka … Xml Security For C\+\+ after 1.7.0 Fix from $1,9502013-08-20 HIGH 7.5 CVE-2013-2156EPSS 8% Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache Santuario XML Security for C++… Xml Security For C\+\+ after 1.7.0 Fix from $1,9502013-08-20 MEDIUM 6.8 CVE-2013-1872 The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly… Ubuntu Linux Mitigation only Fix from $1,6002013-08-19 MEDIUM 6.8 CVE-2013-4206 Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and… Putty after 0.62 Fix from $1,6002013-08-19 HIGH 7.5 CVE-2013-2127 Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (crash) and p… Libraw after 0.15.0 Fix from $1,9502013-08-14 HIGH 7.5 CVE-2013-4115EPSS 43% Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a d… Opensuse Patch available Fix from $1,9502013-08-09 HIGH 7.5 CVE-2013-4742 Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a … Surgeftp after 2.3b1 Fix from $1,9502013-08-09 MEDIUM 6.8 CVE-2013-2576EPSS 10% Buffer overflow in Artweaver before 3.1.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a craf… Artweaver after 3.0 Fix from $1,6002013-08-09