Vulnerability index

Browse CVEs

1,961 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Resource Management ErrorsCWE-399 × clear
Windows 2000 MEDIUM 6.8
CVE-2009-3675EPSS 25%

LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote …

Mitigation only
Fix from $1,600 2009-12-09
Webkit MEDIUM 5.0
CVE-2009-3933

WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web pa…

Patch available
Fix from $1,600 2009-11-12
Windows 2000 HIGH 7.8
CVE-2009-1928EPSS 30%

Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2;…

Mitigation only
Fix from $1,950 2009-11-11
Mac Os X HIGH 9.3
CVE-2009-2819

AFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause a denial of service (memory corruption and system cr…

Patch available
Fix from $1,950 2009-11-10
Mac Os X HIGH 7.5
CVE-2009-2828

The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup…

Patch available
Fix from $1,950 2009-11-10
Mac Os X MEDIUM 6.8
CVE-2009-2839

Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service (memory corruption and appli…

Patch available
Fix from $1,600 2009-11-10
Linux Kernel HIGH 7.8
CVE-2009-3726EPSS 12%

The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denia…

Fix: after 2.6.31
Fix from $1,950 2009-11-09
Opensolaris HIGH 7.8
CVE-2009-3899

Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57 through snv_94, allows remote attackers to cause a …

Patch available
Fix from $1,950 2009-11-06
Jdk MEDIUM 5.0
CVE-2009-3876

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and …

Patch available
Fix from $1,600 2009-11-05
Jdk MEDIUM 5.0
CVE-2009-3877

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and …

Patch available
Fix from $1,600 2009-11-05
Firefox HIGH 10.0
CVE-2009-3371EPSS 7%

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possib…

Patch available
Fix from $1,950 2009-10-29
Xpdf HIGH 9.3
CVE-2009-3604EPSS 9%

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not prope…

Patch available
Fix from $1,950 2009-10-21
Adium MEDIUM 5.0
CVE-2009-3615

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (applicatio…

Fix: after 2.6.2
Fix from $1,600 2009-10-20
Acrobat HIGH 9.3
CVE-2009-2983EPSS 12%

Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memory corrup…

Fix: after 9.1.3
Fix from $1,950 2009-10-19
Acrobat HIGH 9.3
CVE-2009-2985EPSS 6%

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or p…

Fix: after 9.1.3
Fix from $1,950 2009-10-19
Acrobat HIGH 9.3
CVE-2009-2996EPSS 6%

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or p…

Fix: after 9.1.3
Fix from $1,950 2009-10-19
Acrobat HIGH 9.3
CVE-2009-3460EPSS 6%

Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers to cause a denial of service (memory corruption) or p…

Fix: after 9.1.3
Fix from $1,950 2009-10-19
Linux Kernel HIGH 7.8
CVE-2009-3613EPSS 12%

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial o…

Fix: after 2.6.27.21
Fix from $1,950 2009-10-19
Informix Dynamic Server MEDIUM 5.0
CVE-2009-3470

IBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a deni…

Mitigation only
Fix from $1,600 2009-09-29
Linux Kernel HIGH 7.2
CVE-2009-3290

The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86…

Fix: after 2.6.30
Fix from $1,950 2009-09-22
Safari MEDIUM 5.0
CVE-2009-3272EPSS 6%

Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to c…

No fix yet
Fix from $1,600 2009-09-21
Firefox MEDIUM 5.0
CVE-2008-7244

Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the window.print function in a loop,…

Fix: after 3.0.1
Fix from $1,600 2009-09-18
Opera Browser MEDIUM 5.0
CVE-2008-7245EPSS 6%

Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a …

Fix: after 9.52
Fix from $1,600 2009-09-18
Chrome MEDIUM 5.0
CVE-2008-7246

Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in …

Fix: after 0.2.149.29
Fix from $1,600 2009-09-18
Chrome MEDIUM 5.0
CVE-2009-3268

Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form conta…

Fix: after 1.0.154.48
Fix from $1,600 2009-09-18
Opera Browser MEDIUM 5.0
CVE-2009-3269

Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a series of automatic submissions of a form contain…

Fix: after 9.52
Fix from $1,600 2009-09-18
Mac Os X MEDIUM 6.8
CVE-2009-2803

CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and applic…

Patch available
Fix from $1,600 2009-09-14
Counter Strike MEDIUM 5.0
CVE-2008-7203

Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple crafted login packets.

No fix yet
Fix from $1,600 2009-09-11
Iphone Os HIGH 7.8
CVE-2009-2815

The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a de…

Fix: after 3.0.1
Fix from $1,950 2009-09-10
Mss485 T HIGH 7.8
CVE-2008-7201

Lantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and service loss) via certain vulnerability scans, as d…

No fix yet
Fix from $1,950 2009-09-10