Browse CVEs

MEDIUM 5.0 CVE-2009-0798 ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a lar… Acpid after 1.0.8 Fix from $1,6002009-04-24 MEDIUM 6.8 CVE-2009-1180EPSS 5% The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute a… Xpdf after 3.02 Fix from $1,6002009-04-23 MEDIUM 5.0 CVE-2009-1302 The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a d… Firefox after 2.0.0.19 Fix from $1,6002009-04-22 MEDIUM 5.0 CVE-2009-1304 The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause … Firefox after 2.0.0.19 Fix from $1,6002009-04-22 MEDIUM 5.0 CVE-2009-1305 The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a de… Firefox after 2.0.0.19 Fix from $1,6002009-04-22 HIGH 9.3 CVE-2009-0100EPSS 29% Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel Viewer and… Office Mitigation only Fix from $1,9502009-04-15 MEDIUM 5.0 CVE-2008-6713EPSS 8% World in Conflict (WIC) 1.008 and earlier allows remote attackers to cause a denial of service (access violation and crash) via a zero-byte data bloc… Wic after 1.008 Fix from $1,6002009-04-10 HIGH 7.2 CVE-2009-0686 The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows l… Internet Security No fix yet Fix from $1,9502009-04-01 HIGH 7.1 CVE-2009-0635 Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, a… iOS Patch available Fix from $1,9502009-03-27 HIGH 7.8 CVE-2009-0626 The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS pa… iOS Mitigation only Fix from $1,9502009-03-27 HIGH 9.3 CVE-2009-1169EPSS 10% The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a de… Firefox after 3.0.7 Fix from $1,9502009-03-27 MEDIUM 6.4 CVE-2009-1086 Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory co… Ldns Mitigation only Fix from $1,6002009-03-25 HIGH 9.3 CVE-2009-1092EPSS 9% Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote attackers t… Liveaudio Activex Control No fix yet Fix from $1,9502009-03-25 HIGH 9.3 CVE-2009-1044EPSS 6% Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree met… Firefox Patch available Fix from $1,9502009-03-23 HIGH 9.3 CVE-2009-0914 Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption. Opera Browser after 9.63 Fix from $1,9502009-03-16 MEDIUM 5.0 CVE-2009-0878 The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consu… Wesnoth after 1.4.7 Fix from $1,6002009-03-12 HIGH 10.0 CVE-2009-0771 The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of ser… Firefox after 3.0.6 Fix from $1,9502009-03-05 HIGH 9.3 CVE-2009-0772 The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denia… Firefox after 3.0.6 Fix from $1,9502009-03-05 HIGH 10.0 CVE-2009-0773EPSS 6% The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of… Firefox after 3.0.6 Fix from $1,9502009-03-05 HIGH 9.3 CVE-2009-0774 The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denia… Firefox after 3.0.6 Fix from $1,9502009-03-05 HIGH 10.0 CVE-2009-0775 Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execut… Firefox after 3.0.6 Fix from $1,9502009-03-05 MEDIUM 5.0 CVE-2009-0821EPSS 5% Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print fu… Firefox after 2.0.0.20 Fix from $1,6002009-03-05 HIGH 7.8 CVE-2009-0758 The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of… Avahi Daemon Mitigation only Fix from $1,9502009-03-03 MEDIUM 5.0 CVE-2009-0751EPSS 10% Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers. Yaws after 1.79 Fix from $1,6002009-03-02 HIGH 7.1 CVE-2008-6218 Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a… Libpng Patch available Fix from $1,9502009-02-20 HIGH 7.8 CVE-2008-6219 nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Stor… Networker Client after 7.3.2 Fix from $1,9502009-02-20 HIGH 7.8 CVE-2008-6194EPSS 11% Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service (memory consumption) via DNS packets. NOTE: … Windows Mitigation only Fix from $1,9502009-02-19 MEDIUM 5.0 CVE-2008-4285 Unspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the Servlet Engine/Web Container component in IBM WebSphere A… Websphere Application Server Patch available Fix from $1,6002009-02-17 MEDIUM 5.0 CVE-2008-6141 Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to cause a denial of service (crash) via a large amount o… Ip Soft Phone Mitigation only Fix from $1,6002009-02-14 HIGH 9.3 CVE-2009-0140 Unspecified vulnerability in the SMB component in Apple Mac OS X 10.4.11 and 10.5.6 allows remote SMB servers to cause a denial of service (memory ex… Mac Os X Patch available Fix from $1,9502009-02-13