Browse CVEs

MEDIUM 6.8 CVE-2012-3747 WebKit, as used in Apple iOS before 6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicat… Iphone Os after 5.1.1 Fix from $1,6002012-09-20 MEDIUM 6.8 CVE-2012-3722 The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which all… Mac Os X after 10.7.4 Fix from $1,6002012-09-20 MEDIUM 6.8 CVE-2012-3726 Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a denial of service (applicatio… Iphone Os after 5.1.1 Fix from $1,6002012-09-20 MEDIUM 5.0 CVE-2012-3919 The Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer (LB) queu… Application Control Engine Module Mitigation only Fix from $1,6002012-09-16 HIGH 7.8 CVE-2012-3060 Cisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service (CPU consumption) via malformed UDP packets, aka B… Unity Connection Mitigation only Fix from $1,9502012-09-16 HIGH 7.8 CVE-2012-3079 Cisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by establishing many IPv6 neighbors, aka Bug ID CSCtn78957. iOS Mitigation only Fix from $1,9502012-09-16 MEDIUM 5.0 CVE-2012-3899 sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of se… Intrusion Prevention System Mitigation only Fix from $1,6002012-09-16 HIGH 7.8 CVE-2012-4629 The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices, and Prime Security Manager (aka PRSM)… Asa Cx Context Aware Security after 9.0 Fix from $1,9502012-09-12 HIGH 10.0 CVE-2012-2803 Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x befo… Libav after 0.10.4 Fix from $1,9502012-09-10 MEDIUM 6.9 CVE-2012-3974 Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thu… Firefox after 14.0 Fix from $1,6002012-08-29 HIGH 10.0 CVE-2012-3958EPSS 5% Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, … Firefox after 14.0 Fix from $1,9502012-08-29 HIGH 10.0 CVE-2012-3964EPSS 5% Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird befo… Firefox after 14.0 Fix from $1,9502012-08-29 HIGH 10.0 CVE-2012-3970EPSS 5% Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before… Firefox after 14.0 Fix from $1,9502012-08-29 MEDIUM 5.0 CVE-2012-3420 Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon cr… Performance Co Pilot after 3.6.4 Fix from $1,6002012-08-27 MEDIUM 5.0 CVE-2012-4678 munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service (disk consumption) via … Munin Mitigation only Fix from $1,6002012-08-26 MEDIUM 5.0 CVE-2012-2147 munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large… Munin Mitigation only Fix from $1,6002012-08-26 MEDIUM 5.0 CVE-2012-3517 Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via vectors rel… Tor after 0.2.2.37 Fix from $1,6002012-08-26 MEDIUM 6.8 CVE-2012-0858 The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 5.0 CVE-2012-4287 epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop an… Wireshark Patch available Fix from $1,6002012-08-16 MEDIUM 6.8 CVE-2012-2862 Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or po… Chrome after 21.0.1180.74 Fix from $1,6002012-08-09 MEDIUM 5.0 CVE-2012-0213EPSS 8% The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial… Poi after 3.8 Fix from $1,6002012-08-07 MEDIUM 5.0 CVE-2012-1346 Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the … Emergency Responder Mitigation only Fix from $1,6002012-08-06 HIGH 7.8 CVE-2012-2472 Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-all… Adaptive Security Appliance Software Mitigation only Fix from $1,9502012-08-06 MEDIUM 6.8 CVE-2012-2852 The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not prope… Chrome after 21.0.1180.56 Fix from $1,6002012-08-06 MEDIUM 6.8 CVE-2012-2855 Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows … Chrome after 21.0.1180.56 Fix from $1,6002012-08-06 MEDIUM 6.8 CVE-2012-2857 Use-after-free vulnerability in the Cascading Style Sheets (CSS) DOM implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and b… Chrome after 21.0.1180.59 Fix from $1,6002012-08-06 HIGH 10.0 CVE-2012-1962EPSS 6% Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunder… Firefox after 2.10 Fix from $1,9502012-07-18 HIGH 10.0 CVE-2012-1951EPSS 6% Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, T… Firefox after 2.10 Fix from $1,9502012-07-18 HIGH 9.3 CVE-2012-1952 The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbir… Firefox after 2.10 Fix from $1,9502012-07-18 HIGH 10.0 CVE-2012-1954 Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5… Firefox after 2.10 Fix from $1,9502012-07-18