Browse CVEs

HIGH 9.3 CVE-2013-2577EPSS 12% Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file. Xnview after 2.03 Fix from $1,9502013-08-09 HIGH 10.0 CVE-2013-1705 Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote at… Firefox after 22.0 Fix from $1,9502013-08-07 HIGH 7.2 CVE-2013-1706 Stack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0… Firefox after 22.0 Fix from $1,9502013-08-07 HIGH 7.2 CVE-2013-1707 Stack-based buffer overflow in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunder… Firefox after 22.0 Fix from $1,9502013-08-07 HIGH 7.9 CVE-2013-4575 Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows re… Backup Exec Mitigation only Fix from $1,9502013-08-05 MEDIUM 6.6 CVE-2013-4679 Symantec Workspace Virtualization before 6.x before 6.4.1953.0, when a virtual application layer is configured, allows local users to gain privileges… Workspace Virtualization after 6.4.1895.0 Fix from $1,6002013-08-05 HIGH 9.3 CVE-2013-2785 Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, … Intelligent Platforms Proficy Hmi\/scada Cimplicity Mitigation only Fix from $1,9502013-07-31 HIGH 10.0 CVE-2013-5019EPSS 64% Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request. Ultra Mini Httpd Mitigation only Fix from $1,9502013-07-31 HIGH 7.5 CVE-2013-2220 Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of serv… Radius after 1.2.6 Fix from $1,9502013-07-31 MEDIUM 6.8 CVE-2013-2174EPSS 11% Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause… Curl Patch available Fix from $1,6002013-07-31 HIGH 10.0 CVE-2013-1377 Adobe Digital Editions 2.x before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified v… Digital Editions Patch available Fix from $1,9502013-07-31 MEDIUM 5.0 CVE-2013-4933 The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not properly all… Wireshark Patch available Fix from $1,6002013-07-30 MEDIUM 5.0 CVE-2013-4920 The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote attackers to cause a denial of… Wireshark Patch available Fix from $1,6002013-07-30 HIGH 9.3 CVE-2013-0723 Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service (memor… Spreadsheets 2012 Mitigation only Fix from $1,9502013-07-29 MEDIUM 5.4 CVE-2013-3441 Cisco Aironet 3600 access points allow remote attackers to cause a denial of service (memory corruption and device crash) by disrupting Cisco Wireles… Aironet 3600 Mitigation only Fix from $1,6002013-07-23 HIGH 9.3 CVE-2012-6349 Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrar… Keyview Idol Mitigation only Fix from $1,9502013-07-18 HIGH 7.5 CVE-2013-1606EPSS 23% Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute… Airvision Firmware after 1.1.5 Fix from $1,9502013-07-18 HIGH 7.8 CVE-2013-1218 Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial … Asa 5500 X Series Ips Ssp Software after 7.1 Fix from $1,9502013-07-18 HIGH 7.8 CVE-2013-1243 The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensor… Asa 5500 X Series Ips Ssp Software after 7.1 Fix from $1,9502013-07-18 HIGH 7.8 CVE-2013-3410 Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device relo… Intrusion Prevention System after 7.0 Fix from $1,9502013-07-18 MEDIUM 5.4 CVE-2013-2688EPSS 7% Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to caus… Qnx Software Development Platform after 6.5.0 Fix from $1,6002013-07-12 HIGH 7.8 CVE-2013-2687EPSS 8% Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite thr… Qnx Momentics Tool Suite after 6.5.0 Fix from $1,9502013-07-12 HIGH 10.0 CVE-2013-4685EPSS 8% Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices,… Junos Mitigation only Fix from $1,9502013-07-11 HIGH 9.3 CVE-2013-1868EPSS 11% Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbi… Vlc Media Player after 2.0.4 Fix from $1,9502013-07-10 MEDIUM 6.8 CVE-2013-1954EPSS 6% The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash)… Vlc Media Player after 2.0.5 Fix from $1,6002013-07-10 MEDIUM 6.3 CVE-2013-3245 plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service… Vlc Media Player No fix yet Fix from $1,6002013-07-10 MEDIUM 5.0 CVE-2013-2875 core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, as used in Google Chrome before 28.0.1500.71, allows remote attackers to … Chrome after 28.0.1500.70 Fix from $1,6002013-07-10 MEDIUM 5.0 CVE-2013-2877 parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of servi… Chrome after 28.0.1500.70 Fix from $1,6002013-07-10 MEDIUM 5.0 CVE-2013-2878 Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the handling of te… Chrome after 28.0.1500.70 Fix from $1,6002013-07-10 MEDIUM 6.8 CVE-2013-2053 Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote… Openswan after 2.6.38 Fix from $1,6002013-07-09