Browse CVEs

MEDIUM 6.9 CVE-2014-5332 Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAP_IOC_CREATE IOCTL call, which trig… Linux Kernel No fix yet Fix from $1,6002015-02-06 MEDIUM 5.0 CVE-2014-8640 The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey b… Firefox after 34.0.5 Fix from $1,6002015-01-14 MEDIUM 6.9 CVE-2014-9529 Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of se… Linux Kernel 3.2.67 / 3.4.107+ Fix from $1,6002015-01-09 MEDIUM 6.4 CVE-2014-9150 Race condition in the MoveFileEx call hook feature in Adobe Reader and Acrobat 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox pr… Acrobat Reader after 11.0.8 Fix from $1,6002014-11-30 MEDIUM 5.0 CVE-2014-8005 Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a d… Ios Xr after 5.1.0 Fix from $1,6002014-11-26 HIGH 7.1 CVE-2014-3406 Race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 and earlier allows remote attackers to cause a … Intrusion Prevention System after 7.1 Fix from $1,9502014-10-19 MEDIUM 6.9 CVE-2014-4438 Race condition in LoginWindow in Apple OS X before 10.10 allows physically proximate attackers to obtain access by leveraging an unattended workstati… Mac Os X after 10.9.5 Fix from $1,6002014-10-18 MEDIUM 6.5 CVE-2014-8750 Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated users to acce… Nova 2014.1.4+ Fix from $1,6002014-10-15 HIGH 7.8 CVE-2014-3385 Race condition in the Health and Performance Monitoring (HPM) for ASDM feature in Cisco ASA Software 8.3 before 8.3(2.42), 8.4 before 8.4(7.11), 8.5 … Asa Mitigation only Fix from $1,9502014-10-10 MEDIUM 6.1 CVE-2014-7154 Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, whi… Fedora Patch available Fix from $1,6002014-10-02 MEDIUM 6.9 CVE-2014-5033 KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypas… Kde4libs after 5.0 Fix from $1,6002014-08-19 HIGH 7.2 CVE-2014-5195 Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which a… Unity after 7.2.2 Fix from $1,9502014-08-07 MEDIUM 6.9 CVE-2014-1419 Race condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows local users to gain privileges via unspecified vecto… Acpi Support after 0.141 Fix from $1,6002014-07-24 MEDIUM 6.8 CVE-2014-0226EPSS 86% Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buff… HTTP Server 2.2.29 / 2.4.10+ Fix from $1,6002014-07-20 MEDIUM 6.9 CVE-2014-4699 The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a… Linux Kernel 3.2.61 / 3.4.97+ Fix from $1,6002014-07-09 MEDIUM 5.5 CVE-2014-0196 KEVEPSS 22% The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST"… Linux Kernel 3.2.59 / 3.4.91+ Fix from $1,6002014-05-07 HIGH 7.1 CVE-2014-2706 Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via ne… Linux Kernel 3.2.56 / 3.4.84+ Fix from $1,9502014-04-14 MEDIUM 6.9 CVE-2014-2848 A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the diss… Nessus after 201402092115 Fix from $1,6002014-04-11 HIGH 7.1 CVE-2014-2672 Race condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux kernel before 3.13.7 allows remote attackers t… Linux Kernel 3.2.56 / 3.4.92+ Fix from $1,9502014-04-01 HIGH 9.3 CVE-2014-0100 Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a den… Linux Kernel 3.10.37 / 3.12.18+ Fix from $1,9502014-03-11 HIGH 10.0 CVE-2014-0703 Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administr… Wireless Lan Controller Software Mitigation only Fix from $1,9502014-03-06 MEDIUM 5.8 CVE-2014-2243 includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user token upon e… Mediawiki after 1.19.11 Fix from $1,6002014-03-02 HIGH 7.1 CVE-2014-0710 Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15) allows re… Firewall Services Module Software Mitigation only Fix from $1,9502014-02-22 HIGH 7.5 CVE-2014-1921 parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetc… Parcimonie after 0.7.1-1 Fix from $1,9502014-02-14 HIGH 9.3 CVE-2014-1490 Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24… Firefox 2.24 / 3.15.4+ Fix from $1,9502014-02-06 MEDIUM 6.8 CVE-2013-6458 Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functi… Libvirt after 1.2.0 Fix from $1,6002014-01-24 HIGH 7.1 CVE-2014-0616 Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 befor… Junos Mitigation only Fix from $1,9502014-01-15 HIGH 9.3 CVE-2013-7283 Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora packages in libreswan 3.6 has unspecified impact and attack… Libreswan Patch available Fix from $1,9502014-01-09 HIGH 7.2 CVE-2012-0426 Race condition in sap_suse_cluster_connector before 1.0.0-0.8.1 in SUSE Linux Enterprise for SAP Applications 11 SP2 allows local users to have an un… Suse Linux Enterprise For Sap Applications Mitigation only Fix from $1,9502013-12-02 MEDIUM 6.9 CVE-2013-4740 goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for… Quic Mobile Station Modem Kernel Patch available Fix from $1,6002013-11-12