Browse CVEs

HIGH 7.8 CVE-2009-0020 Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termin… Mac Os X Patch available Fix from $1,9502009-02-13 HIGH 9.3 CVE-2009-0095EPSS 23% Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execu… Visio Mitigation only Fix from $1,9502009-02-10 HIGH 9.3 CVE-2009-0096EPSS 23% Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attacke… Visio Mitigation only Fix from $1,9502009-02-10 HIGH 9.3 CVE-2009-0097EPSS 23% Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute a… Visio Mitigation only Fix from $1,9502009-02-10 HIGH 9.3 CVE-2009-0098EPSS 25% Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation … Exchange Server Mitigation only Fix from $1,9502009-02-10 MEDIUM 5.0 CVE-2002-2430 GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to terminate … Goahead Webserver after 2.1 Fix from $1,6002009-02-06 MEDIUM 5.0 CVE-2008-6082EPSS 45% Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO command. Titan Ftp Server No fix yet Fix from $1,6002009-02-06 HIGH 10.0 CVE-2009-0352 Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attac… Firefox after 2.0.0.19 Fix from $1,9502009-02-04 HIGH 10.0 CVE-2009-0353 Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to ca… Firefox after 2.0.0.19 Fix from $1,9502009-02-04 HIGH 10.0 CVE-2009-0414 Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors that trigger heap corruption. Tor after 0.2.0.32 Fix from $1,9502009-02-03 MEDIUM 5.4 CVE-2008-6024 Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv_37, when automountd is used, allows u… Opensolaris Patch available Fix from $1,6002009-02-02 HIGH 7.2 CVE-2008-6000 The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input v… Antivirus 2008 No fix yet Fix from $1,9502009-01-28 HIGH 9.3 CVE-2009-0259EPSS 8% The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary … Openoffice.org No fix yet Fix from $1,9502009-01-22 HIGH 9.3 CVE-2009-0219 The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Profession… Blackberry Enterprise Server after 1.0.3 Fix from $1,9502009-01-21 MEDIUM 5.0 CVE-2009-0177EPSS 9% vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Playe… Ace after 6.51 Fix from $1,6002009-01-20 MEDIUM 5.0 CVE-2008-5822 Memory leak in Libxul, as used in Mozilla Firefox 3.0.5 and other products, allows remote attackers to cause a denial of service (memory consumption … Libxul No fix yet Fix from $1,6002009-01-02 MEDIUM 5.0 CVE-2008-5821 Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of service (memory c… Safari No fix yet Fix from $1,6002009-01-02 MEDIUM 5.0 CVE-2008-5747 F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that still all… F Prot Antivirus Mitigation only Fix from $1,6002008-12-29 MEDIUM 5.0 CVE-2008-2382EPSS 7% The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to c… Qemu after 79 Fix from $1,6002008-12-24 HIGH 9.3 CVE-2008-2435EPSS 7% Use-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers… Housecall Mitigation only Fix from $1,9502008-12-23 MEDIUM 5.0 CVE-2008-5684 Unspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolaris before snv_85 allows contex… Opensolaris Patch available Fix from $1,6002008-12-19 HIGH 7.2 CVE-2008-5689 tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arb… Opensolaris Patch available Fix from $1,9502008-12-19 HIGH 9.3 CVE-2008-5679 The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer … Opera after 9.62 Fix from $1,9502008-12-19 MEDIUM 5.0 CVE-2008-5667EPSS 6% The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of service (memory corruption and app… Vba32 Personal Antivirus No fix yet Fix from $1,6002008-12-19 HIGH 10.0 CVE-2008-5500 The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow… Firefox 1.1.14 / 2.0.0.19+ Fix from $1,9502008-12-17 MEDIUM 5.0 CVE-2008-5502 The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to ca… Firefox 1.1.14 / 2.0.0.19+ Fix from $1,6002008-12-17 MEDIUM 5.4 CVE-2008-5661 The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv_47 through snv_82, with certain patches installed, allows remote attackers to cause… Opensolaris Patch available Fix from $1,6002008-12-17 MEDIUM 5.0 CVE-2008-5081EPSS 59% The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to caus… Avahi after 0.6.23 Fix from $1,6002008-12-17 HIGH 7.8 CVE-2008-5620 RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of service (memory consumption) via crafted size paramete… Webmail after 0.2 Fix from $1,9502008-12-17 HIGH 10.0 CVE-2008-4221 The strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to cause a denial of service (memory corruption and … Mac Os X after 10.5.5 Fix from $1,9502008-12-17