Browse CVEs

MEDIUM 5.0 CVE-2013-4079 The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote at… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4080 The dissect_r3_upstreamcommand_queryconfig function in epan/dissectors/packet-assa_r3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4081 The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8… Wireshark Mitigation only Fix from $1,6002013-06-09 MEDIUM 5.0 CVE-2013-4082 The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationship between … Wireshark Patch available Fix from $1,6002013-06-09 HIGH 7.9 CVE-2013-2850EPSS 7% Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target sub… Linux Kernel 3.2.47 / 3.4.48+ Fix from $1,9502013-06-07 MEDIUM 6.8 CVE-2011-4604 The bat_socket_read function in net/batman-adv/icmp_socket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of service (mem… Linux Kernel after 3.2.46 Fix from $1,6002013-06-07 MEDIUM 6.8 CVE-2013-0975 Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service (… Mac Os X after 10.8.3 Fix from $1,6002013-06-05 MEDIUM 6.8 CVE-2013-0983 Stack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial … Mac Os X after 10.8.3 Fix from $1,6002013-06-05 HIGH 9.3 CVE-2013-0984EPSS 14% Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via … Mac Os X after 10.6.8 Fix from $1,9502013-06-05 MEDIUM 6.8 CVE-2013-1009 WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and a… Safari after 6.0.4 Fix from $1,6002013-06-05 MEDIUM 6.8 CVE-2013-1023 WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and a… Safari after 6.0.4 Fix from $1,6002013-06-05 MEDIUM 5.0 CVE-2013-3950 Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier for atta… Iphone Os No fix yet Fix from $1,6002013-06-05 HIGH 7.6 CVE-2013-0509EPSS 7% Buffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before … Tivoli Netcool Application Service Monitors Mitigation only Fix from $1,9502013-06-05 HIGH 7.2 CVE-2013-3475 Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics Syste… Db2 Mitigation only Fix from $1,9502013-06-05 HIGH 7.6 CVE-2013-0508 Multiple buffer overflows in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 and 4.0.1 befo… Tivoli Netcool Application Service Monitors Mitigation only Fix from $1,9502013-06-05 HIGH 7.5 CVE-2013-2862 Skia, as used in Google Chrome before 27.0.1453.110, does not properly handle GPU acceleration, which allows remote attackers to cause a denial of se… Chrome after 27.0.1453.109 Fix from $1,9502013-06-05 HIGH 10.0 CVE-2013-2863 Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote attackers to execute arbitrary code or cause a denial of… Chrome after 27.0.1453.109 Fix from $1,9502013-06-05 HIGH 7.5 CVE-2013-2864 The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (invalid free operation) or possibly… Chrome after 27.0.1453.109 Fix from $1,9502013-06-05 MEDIUM 5.0 CVE-2013-2855 The Developer Tools API in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (memory corruption) or possibly ha… Chrome after 27.0.1453.109 Fix from $1,6002013-06-05 MEDIUM 5.4 CVE-2013-1210 Array index error in the Virtual Ethernet Module (VEM) kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enable… Nx Os Mitigation only Fix from $1,6002013-05-29 MEDIUM 5.0 CVE-2013-3557 The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x before 1.8.7 do… Wireshark Patch available Fix from $1,6002013-05-25 HIGH 7.8 CVE-2013-3660 KEVEPSS 40% The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V… Windows 7 Patch available Fix from $1,9502013-05-24 HIGH 9.3 CVE-2013-0986 Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) vi… Quicktime after 10.8.3 Fix from $1,9502013-05-24 HIGH 9.3 CVE-2013-1019EPSS 6% Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) vi… Quicktime after 7.7.3 Fix from $1,9502013-05-24 HIGH 9.3 CVE-2012-6553EPSS 5% Heap-based buffer overflow in Resource Hacker 3.6.0.92 allows remote attackers to execute arbitrary code via a Portable Executable (PE) file with a r… Resource Hacker No fix yet Fix from $1,9502013-05-23 HIGH 9.3 CVE-2012-6558EPSS 5% Heap-based buffer overflow in HeavenTools PE Explorer 1.99 R6 allows remote attackers to execute arbitrary code via the size value for a string in th… Pe Explorer No fix yet Fix from $1,9502013-05-23 HIGH 7.5 CVE-2013-2845 The Web Audio implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (memory corruption) or possibl… Chrome after 27.0.1453.91 Fix from $1,9502013-05-22 MEDIUM 5.0 CVE-2013-2838 Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified ve… Chrome after 27.0.1453.91 Fix from $1,6002013-05-22 MEDIUM 5.0 CVE-2013-0145EPSS 9% Buffer overflow in the TFTPD service in Serva32 2.1.0 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitra… Serva32 Mitigation only Fix from $1,6002013-05-20 HIGH 9.3 CVE-2013-0999 WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corr… Itunes after 11.0.2 Fix from $1,9502013-05-20