Browse CVEs

MEDIUM 5.0 CVE-2013-0923 The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corruption) via unspecified vector… Chrome after 26.0.1410.42 Fix from $1,6002013-03-28 MEDIUM 6.8 CVE-2013-1796 The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_… Linux Kernel after 3.8.4 Fix from $1,6002013-03-22 MEDIUM 6.9 CVE-2013-1860 Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximat… Linux Kernel 3.0.70 / 3.2.41+ Fix from $1,6002013-03-22 MEDIUM 6.8 CVE-2013-0674 Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remot… Simatic Pcs7 after 8.0 Fix from $1,6002013-03-21 MEDIUM 6.1 CVE-2013-0675 Buffer overflow in CCEServer (aka the central communications component) in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other… Simatic Pcs7 after 8.0 Fix from $1,6002013-03-21 HIGH 9.3 CVE-2013-1750 Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitra… Realplayer after 16.0.0.282 Fix from $1,9502013-03-20 HIGH 10.0 CVE-2013-0251 Stack-based buffer overflow in llogincircuit.cc in latd 1.25 through 1.30 and earlier allows remote attackers to cause a denial of service (crash) an… Latd Mitigation only Fix from $1,9502013-03-19 HIGH 10.0 CVE-2013-0915 The GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of service or possibly have unspecified other impact via … Chrome Os after 25.0.1364.172 Fix from $1,9502013-03-18 MEDIUM 6.8 CVE-2013-2492EPSS 42% Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to… Firebird No fix yet Fix from $1,6002013-03-15 MEDIUM 6.8 CVE-2013-0976 IOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption… Mac Os X after 10.8.2 Fix from $1,6002013-03-15 MEDIUM 6.5 CVE-2013-1794 Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash) and possib… Openafs after 1.6.1 Fix from $1,6002013-03-14 HIGH 10.0 CVE-2013-1049 Buffer overflow in the RFC1413 (ident) client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service (crash) and possibly execu… Cfingerd Patch available Fix from $1,9502013-03-14 MEDIUM 5.0 CVE-2012-4460 The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial o… Qpid after 0.20 Fix from $1,6002013-03-14 HIGH 10.0 CVE-2013-1371EPSS 5% Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux,… Flash Player after 11.6.602.171 Fix from $1,9502013-03-13 HIGH 10.0 CVE-2013-1375EPSS 9% Heap-based buffer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x… Flash Player after 11.6.602.171 Fix from $1,9502013-03-13 HIGH 7.8 CVE-2013-0085EPSS 34% Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service (W3WP… Sharepoint Foundation Mitigation only Fix from $1,9502013-03-13 MEDIUM 5.0 CVE-2013-0086EPSS 24% Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive infor… Sharepoint Foundation Mitigation only Fix from $1,6002013-03-13 HIGH 7.5 CVE-2013-2496 The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allo… Ffmpeg after 1.1.3 Fix from $1,9502013-03-09 HIGH 7.5 CVE-2013-0249EPSS 22% Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when ne… Curl No fix yet Fix from $1,9502013-03-08 HIGH 10.0 CVE-2013-0402EPSS 10% Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier all… Javafx after 2.2.7 Fix from $1,9502013-03-08 HIGH 7.5 CVE-2013-0904 The Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possib… Chrome after 25.0.1364.126 Fix from $1,9502013-03-05 HIGH 7.5 CVE-2013-0906 The IndexedDB implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possib… Chrome after 25.0.1364.126 Fix from $1,9502013-03-05 MEDIUM 6.8 CVE-2013-0288 nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly … Nss Pam Ldapd after 0.7.17 Fix from $1,6002013-03-05 HIGH 9.3 CVE-2013-0710 Buffer overflow in Kingsoft Writer 2007 and 2010 before 2724 allows remote attackers to execute arbitrary code via a crafted RTF document. Writer 2007 after 2723 Fix from $1,9502013-03-05 MEDIUM 6.1 CVE-2012-6026 The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to… Aironet Access Point Software Mitigation only Fix from $1,6002013-03-05 MEDIUM 5.0 CVE-2013-0183 multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and ou… Rack Patch available Fix from $1,6002013-03-01 MEDIUM 6.1 CVE-2013-1141 The mDNS snooping functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.4.1.54 and earlier does not properly manage buffers, w… Wireless Lan Controller Software after 7.4.1.54 Fix from $1,6002013-02-28 MEDIUM 6.2 CVE-2013-1773 Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of servi… Linux Kernel after 3.3 Fix from $1,6002013-02-28 HIGH 7.8 CVE-2013-1137 Cisco Unified Presence Server (CUPS) 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service (CPU consumption) via crafte… Unified Presence Server Mitigation only Fix from $1,9502013-02-27 MEDIUM 5.0 CVE-2013-1138 The NAT process on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (connections-table memory co… Adaptive Security Appliance Software Mitigation only Fix from $1,6002013-02-25