Where
-Infinity
0

Trending

Last week
Last month
Last year

debian/icedoveBuffer Overflow

Risk 89
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2739

debian/icedoveBuffer Overflow

Risk 89
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function ...

1 / 3
Source: Debian
First published (updated )
CVE-2015-2740

Mozilla FirefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMon…

Risk 87
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

First published (updated )
CVE-2013-5610

openSUSE EvergreenUse After Free

Risk 87
Severity
10
Use After Free
AV:N/AC:L/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.

First published (updated )
CVE-2014-1563

Oracle SolarisBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple unspecified vulnerabilities in libXtsol in Oracle Solaris 10 and 11.1 have unspecified impact and attack vectors related to "Buffer errors."

First published (updated )
CVE-2014-0397

Adobe Adobe AIRBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

First published (updated )
CVE-2011-2450

Adobe Adobe AIRBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

First published (updated )
CVE-2011-2454

Adobe Adobe AIRBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2459, and CVE-2011-2460.

First published (updated )
CVE-2011-2455

Adobe Adobe AIRBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

First published (updated )
CVE-2011-2445

Adobe Adobe AIRBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

First published (updated )
CVE-2011-2456

Adobe Adobe AIRBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

First published (updated )
CVE-2011-2457

Adobe Adobe AIRBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

First published (updated )
CVE-2011-2452

Adobe Adobe AIRBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2460.

First published (updated )
CVE-2011-2459

Adobe Adobe AIRBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2459.

First published (updated )
CVE-2011-2460

Adobe Adobe AIRBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

First published (updated )
CVE-2011-2453

Adobe Adobe AIRBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

First published (updated )
CVE-2011-2451

Mozilla FirefoxBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in the resizecontextbuffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.

First published (updated )
CVE-2015-4485

Canonical Ubuntu LinuxBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

The decreaserefcount function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.

First published (updated )
CVE-2015-4486

debian/icedoveLast updated 24 July 2024

Risk 89
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2738

debian/icedoveLast updated 24 July 2024

Risk 89
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2734

debian/icedoveLast updated 24 July 2024

Risk 89
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2737

CVE-2015-6319SQL Injection

Risk 87
Severity
10
SQL Injection
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.

First published (updated )
CVE-2015-6319

CVE-2016-1329Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5…

Risk 87
Severity
10
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a (1) TELNET or (2) SSH session, aka Bug ID CSCuy25800.

First published (updated )
CVE-2016-1329

Oracle SolarisUnspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confid…

Risk 87
Severity
10
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the PAM LDAP module.

First published (updated )
CVE-2016-0693

Oracle SolarisVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: CDE Calen…

Risk 87
Severity
10
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: CDE Calendar). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. Note: CVE-2017-3632 is assigned to the "EASYSTREET" vulnerability. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

First published (updated )
CVE-2017-3632

Sun OpenSolarisThe NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly …

Risk 87
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv119, does not properly implement the nfsportmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors.

First published (updated )
CVE-2009-2296

Sun SolarisBuffer Overflow, Integer Overflow

Risk 87
Severity
10
Buffer Overflow, Integer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation.

First published (updated )
CVE-2008-3870

Sun SolarisBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters.

First published (updated )
CVE-2008-3869

Sun OpenSolarisin.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, all…

Risk 87
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv103, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805.

First published (updated )
CVE-2008-5010

SAS XML MapperXEE

Risk 87
Severity
10
XEE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are Local File Reading, Out Of Band File Exfiltration, Server Side Request Forgery, and/or Potential Denial of Service attacks. This vulnerability also affects the XMLV2 LIBNAME engine when the AUTOMAP option is used.

First published (updated )
CVE-2019-14678

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203