Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-17
Total 165 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-6383 1 Juniper 1 Junos 2015-01-26 5.0 MEDIUM N/A
The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allow remote attackers to bypass firewall rule.
CVE-2010-2055 1 Artifex 3 Afpl Ghostscript, Ghostscript Fonts, Gpl Ghostscript 2015-01-09 7.2 HIGH N/A
Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.
CVE-2013-6494 2 Fedoraproject, Fedup Project 2 Fedora, Fedup 2014-12-02 2.1 LOW N/A
fedup 0.9.0 in Fedora 19, 20, and 21 uses a temporary directory with a static name for its download cache, which allows local users to cause a denial of service (prevention of system updates).
CVE-2014-5426 1 Matrikonopc 1 Dnp3 Opc Server 2014-11-28 5.0 MEDIUM N/A
MatrikonOPC OPC Server for DNP3 1.2.3 and earlier allows remote attackers to cause a denial of service (unhandled exception and DNP3 process crash) via a crafted message.
CVE-2014-3500 1 Apache 1 Cordova 2014-11-17 6.4 MEDIUM N/A
Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL.