Vulnerability index

Browse CVEs

4,225 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Classic Buffer OverflowCWE-120 × clear
Enterprise Linux Desktop CRITICAL 9.0
CVE-2015-7512EPSS 8%

Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial…

Mitigation only
Fix from $2,300 2016-01-08
Fedora HIGH 7.5
CVE-2015-8126EPSS 10%

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.…

Patch available
Fix from $1,950 2015-11-13
Acrobat MEDIUM 5.0
CVE-2015-6692

Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094,…

Fix: 15.006.30094 / 15.009.20069+
Fix from $1,600 2015-10-14
Acrobat HIGH 10.0
CVE-2015-5093EPSS 9%

Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060,…

Fix: 10.1.15 / 11.0.12+
Fix from $1,950 2015-07-15
SQLite HIGH 7.5
CVE-2015-3717

Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to e…

Fix: 3.8.9 / 8.4+
Fix from $1,950 2015-07-03
Pelco Ds Nv HIGH 7.5
CVE-2015-0982

Buffer overflow in an unspecified DLL in Schneider Electric Pelco DS-NVs before 7.8.90 allows remote attackers to execute arbitrary code via unspecif…

Fix: 7.8.90+
Fix from $1,950 2015-03-14
Solaris HIGH 8.8
CVE-2015-0973

Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers t…

Fix: after 10.11.3
Fix from $1,950 2015-01-18
Libndp MEDIUM 6.8
CVE-2014-3554

Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute ar…

Fix: 1.4+
Fix from $1,600 2014-07-31
OpenSSL MEDIUM 6.8
CVE-2014-0195EPSS 100%

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validat…

Fix: 0.9.8za / 1.0.0m+
Fix from $1,600 2014-06-05
Firefox CRITICAL 9.8
CVE-2014-1524EPSS 8%

The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonk…

Fix: 24.5 / 29.0+
Fix from $2,300 2014-04-30
Firefox HIGH 8.8
CVE-2014-1509EPSS 5%

Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunder…

Fix: 24.4 / 28.0+
Fix from $1,950 2014-03-19
Linux Kernel HIGH 7.4
CVE-2014-0049

Buffer overflow in the complete_emulated_mmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbit…

Fix: 3.13.6+
Fix from $1,950 2014-03-11
Enterprise Linux Desktop HIGH 7.2
CVE-2013-4344

Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to …

Fix: after 1.6.2
Fix from $1,950 2013-10-04
Office HIGH 7.8
CVE-2013-1331 KEVEPSS 82%

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Off…

Patch available
Fix from $1,950 2013-06-12
Chrome HIGH 7.5
CVE-2013-0894

Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in …

Fix: 25.0.1364.97 / 25.0.1364.99+
Fix from $1,950 2013-02-23
Enterprise Linux Desktop HIGH 7.8
CVE-2013-0641 KEVEPSS 32%

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrar…

Fix: 9.5.4 / 10.1.6+
Fix from $1,950 2013-02-14
Fedora HIGH 9.3
CVE-2012-6075

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flag…

Patch available
Fix from $1,950 2013-02-13
Firefox HIGH 9.3
CVE-2013-0760EPSS 5%

Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey befo…

Fix: 2.15 / 10.0.11+
Fix from $1,950 2013-01-13
Gimp HIGH 7.5
CVE-2012-2763EPSS 82%

Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote…

Fix: after 2.6.13
Fix from $1,950 2012-07-12
Linux Kernel MEDIUM 5.5
CVE-2011-3353

Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of servi…

Fix: 3.1+
Fix from $1,600 2012-05-24
Nginx MEDIUM 6.8
CVE-2012-2089EPSS 10%

Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 direc…

Fix: after 1.1.18
Fix from $1,600 2012-04-17
Chrome HIGH 7.5
CVE-2011-3033

Buffer overflow in Skia, as used in Google Chrome before 17.0.963.65, allows remote attackers to cause a denial of service or possibly have unspecifi…

Fix: 17.0.963.65+
Fix from $1,950 2012-03-05
Chrome HIGH 7.5
CVE-2011-3959

Buffer overflow in the locale implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly hav…

Fix: 17.0.963.46+
Fix from $1,950 2012-02-09
FreeBSD HIGH 10.0
CVE-2011-4862EPSS 95%

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, …

Fix: 1.9+
Fix from $1,950 2011-12-25
Chrome HIGH 7.5
CVE-2011-3915

Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact vi…

Fix: 16.0.912.63+
Fix from $1,950 2011-12-13
Chrome HIGH 7.5
CVE-2011-3896

Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact v…

Fix: 15.0.874.120+
Fix from $1,950 2011-11-11
Chrome MEDIUM 6.8
CVE-2011-2788

Buffer overflow in the inspector serialization functionality in Google Chrome before 13.0.782.107 allows user-assisted remote attackers to have an un…

Fix: 5.0 / 5.1.1+
Fix from $1,600 2011-08-03
Fedora HIGH 8.8
CVE-2011-2690

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that call…

Fix: 1.0.55 / 1.2.45+
Fix from $1,950 2011-07-17
Quicktime MEDIUM 6.8
CVE-2011-0213

Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (applicat…

Fix: 7.7.0 / 10.6.8+
Fix from $1,600 2011-06-24
Linux Kernel HIGH 7.8
CVE-2011-2534

Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel before 2.6.39 might allow local users …

Fix: 2.6.39+
Fix from $1,950 2011-06-22