Total
11925 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2012-2624 | 1 Cgi | 1 Hotscan | 2013-09-24 | 4.3 MEDIUM | N/A |
Stack-based buffer overflow in Logica HotScan allows remote attackers to cause a denial of service (crash) via a crafted packet. | |||||
CVE-2013-4298 | 1 Imagemagick | 1 Imagemagick | 2013-09-18 | 4.3 MEDIUM | N/A |
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image. | |||||
CVE-2013-3657 | 1 Vmware | 2 Esx, Esxi | 2013-09-13 | 7.5 HIGH | N/A |
Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. | |||||
CVE-2013-3360 | 1 Adobe | 1 Shockwave Player | 2013-09-12 | 10.0 HIGH | N/A |
Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3359. | |||||
CVE-2013-3359 | 1 Adobe | 1 Shockwave Player | 2013-09-12 | 10.0 HIGH | N/A |
Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3360. | |||||
CVE-2013-5641 | 1 Digium | 2 Asterisk, Certified Asterisk | 2013-09-12 | 5.0 MEDIUM | N/A |
The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1.8.23.x before 1.8.23.1, and 11.x before 11.5.1 and Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and daemon crash) via an ACK with SDP to a previously terminated channel. NOTE: some of these details are obtained from third party information. | |||||
CVE-2013-4974 | 1 Realnetworks | 2 Realplayer, Realplayer Sp | 2013-09-12 | 9.3 HIGH | N/A |
RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed RealMedia file. | |||||
CVE-2013-4973 | 1 Realnetworks | 2 Realplayer, Realplayer Sp | 2013-09-12 | 9.3 HIGH | N/A |
Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp file. | |||||
CVE-2013-3934 | 1 Kingsoft | 2 Office 2012, Writer 2012 | 2013-09-10 | 9.3 HIGH | N/A |
Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allows remote attackers to execute arbitrary code via a long font name in a WPS file. | |||||
CVE-2013-1119 | 1 Cisco | 1 Webex Recording Format Player | 2013-09-06 | 9.3 HIGH | N/A |
Buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DHT index value in JPEG data within a WRF file, aka Bug ID CSCuc24503. | |||||
CVE-2013-1118 | 1 Cisco | 1 Webex Recording Format Player | 2013-09-06 | 9.3 HIGH | N/A |
Stack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCuc27645. | |||||
CVE-2013-1117 | 1 Cisco | 1 Webex Recording Format Player | 2013-09-06 | 9.3 HIGH | N/A |
Buffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCuc27639. | |||||
CVE-2013-1116 | 1 Cisco | 1 Webex Advanced Recording Format Player | 2013-09-06 | 9.3 HIGH | N/A |
Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted ARF file, aka Bug IDs CSCue74147 and CSCub28383. | |||||
CVE-2013-1115 | 1 Cisco | 1 Webex Advanced Recording Format Player | 2013-09-06 | 9.3 HIGH | N/A |
Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ARF file, aka Bug IDs CSCue74118, CSCub28371, CSCud23401, and CSCud31109. | |||||
CVE-2011-1848 | 1 Hp | 1 Intelligent Management Center | 2013-08-28 | 10.0 HIGH | N/A |
Stack-based buffer overflow in img.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a crafted length field in a packet. | |||||
CVE-2010-5289 | 1 Incredimail | 1 Incredimail | 2013-08-27 | 7.5 HIGH | N/A |
Buffer overflow in the Authenticate method in the INCREDISPOOLERLib.Pop ActiveX control in ImSpoolU.dll in IncrediMail 2.0 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long string in the first argument. | |||||
CVE-2013-5578 | 1 Staruml | 1 Staruml | 2013-08-26 | 9.3 HIGH | N/A |
Buffer overflow in the ToDot method in the WINGRAPHVIZLib.NEATO ActiveX control in WinGraphviz.dll in StarUML allows remote attackers to execute arbitrary code via a long argument. | |||||
CVE-2013-2801 | 1 Osisoft | 1 Pi Interface | 2013-08-23 | 5.0 MEDIUM | N/A |
The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service (instance shutdown and data-collection outage) via crafted C37.118 configuration packets that trigger an invalid read operation. | |||||
CVE-2013-4685 | 1 Juniper | 13 Junos, Srx100, Srx110 and 10 more | 2013-08-22 | 10.0 HIGH | N/A |
Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100. | |||||
CVE-2013-4575 | 1 Symantec | 1 Backup Exec | 2013-08-22 | 7.9 HIGH | N/A |
Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote attackers to cause a denial of service (agent crash) or possibly execute arbitrary code via unspecified vectors. |