Browse CVEs

HIGH 7.8 CVE-2012-5416 Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allows remote … Unified Meetingplace after 7.1 Fix from $1,9502012-11-02 HIGH 10.0 CVE-2012-5409EPSS 16% AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethernet netw… Sipass Integrated Mitigation only Fix from $1,9502012-11-01 MEDIUM 6.8 CVE-2012-5671EPSS 8% Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_con… Exim Mitigation only Fix from $1,6002012-10-31 HIGH 7.8 CVE-2012-4660 The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500… Adaptive Security Appliance Software Mitigation only Fix from $1,9502012-10-29 HIGH 9.0 CVE-2012-4661 Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Mod… Adaptive Security Appliance Software Mitigation only Fix from $1,9502012-10-29 HIGH 7.1 CVE-2012-4662 The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6… Adaptive Security Appliance Software Mitigation only Fix from $1,9502012-10-29 HIGH 7.1 CVE-2012-4663 The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6… Adaptive Security Appliance Software Mitigation only Fix from $1,9502012-10-29 MEDIUM 6.8 CVE-2012-4447EPSS 7% Heap-based buffer overflow in tif_pixarlog.c in LibTIFF before 4.0.3 allows remote attackers to cause a denial of service (application crash) and pos… Libtiff after 4.0.2 Fix from $1,6002012-10-28 MEDIUM 6.8 CVE-2012-4729 Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via two zip commands. Wing Ftp Server after 4.0.9 Fix from $1,6002012-10-26 HIGH 10.0 CVE-2011-5227EPSS 77% Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote attackers… Netsight after 4.1.0.79 Fix from $1,9502012-10-25 HIGH 9.3 CVE-2012-3937EPSS 5% Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbi… Webex Recording Format Player Mitigation only Fix from $1,9502012-10-25 HIGH 9.3 CVE-2012-3938EPSS 5% Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbi… Webex Recording Format Player Mitigation only Fix from $1,9502012-10-25 HIGH 9.3 CVE-2012-3939EPSS 5% Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbi… Webex Recording Format Player Patch available Fix from $1,9502012-10-25 HIGH 9.3 CVE-2012-3940EPSS 5% Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbi… Webex Recording Format Player Patch available Fix from $1,9502012-10-25 HIGH 9.3 CVE-2012-3941EPSS 5% Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to e… Webex Recording Format Player Patch available Fix from $1,9502012-10-25 HIGH 9.3 CVE-2012-3936EPSS 5% Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbi… Webex Recording Format Player Mitigation only Fix from $1,9502012-10-25 HIGH 8.5 CVE-2012-4826 Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 before FP… Db2 Mitigation only Fix from $1,9502012-10-20 MEDIUM 6.8 CVE-2012-0306 Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi… Ghost Solutions Suite Mitigation only Fix from $1,6002012-10-18 HIGH 9.3 CVE-2012-0227EPSS 6% Buffer overflow in the VSFlex7.VSFlexGrid ActiveX control in ComponentOne FlexGrid 7.1, as used in Open Automation Software OPC Systems.NET, allows r… Flexgrid after 4.0 Fix from $1,9502012-10-12 HIGH 10.0 CVE-2012-4190 The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remot… Firefox after 16.0 Fix from $1,9502012-10-12 MEDIUM 6.5 CVE-2012-4465 Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of ser… Cgit after 0.9.0.3 Fix from $1,6002012-10-10 HIGH 9.3 CVE-2012-4180EPSS 9% Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, T… Firefox 10.0.8 / 16.0+ Fix from $1,9502012-10-10 HIGH 9.3 CVE-2012-4185EPSS 9% Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunder… Firefox 10.0.8 / 16.0+ Fix from $1,9502012-10-10 HIGH 9.3 CVE-2012-4186EPSS 15% Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird … Firefox 10.0.8 / 16.0+ Fix from $1,9502012-10-10 HIGH 9.3 CVE-2012-4187EPSS 7% Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 d… Firefox 10.0.8 / 16.0+ Fix from $1,9502012-10-10 HIGH 9.3 CVE-2012-4188EPSS 15% Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thund… Firefox 10.0.8 / 16.0+ Fix from $1,9502012-10-10 HIGH 10.0 CVE-2012-3983EPSS 5% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 allow r… Firefox 2.13 / 16.0+ Fix from $1,9502012-10-10 HIGH 9.3 CVE-2012-3989 Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable during use … Firefox 2.13 / 16.0+ Fix from $1,9502012-10-10 HIGH 9.3 CVE-2012-2550EPSS 22% Microsoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Word .doc fil… Works Mitigation only Fix from $1,9502012-10-09 MEDIUM 5.0 CVE-2012-5345 Buffer overflow in the Remote command server (Rcmd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attackers to cause a denial of servic… Iptools No fix yet Fix from $1,6002012-10-09