Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2012-08-29 CVE-2012-1972 USE After Free vulnerability in multiple products
Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
network
low complexity
mozilla opensuse suse redhat canonical debian CWE-416
critical
10.0
2012-08-29 CVE-2012-1971 Memory Corruption vulnerability in Mozilla Firefox, Seamonkey and Thunderbird
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to garbage collection after certain MethodJIT execution, and unknown other vectors.
network
mozilla
critical
9.3
2012-08-29 CVE-2012-1970 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
network
low complexity
mozilla opensuse suse redhat canonical debian CWE-119
critical
10.0
2012-08-26 CVE-2011-5127 Path Traversal vulnerability in Bluecoat Reporter
Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request.
network
low complexity
bluecoat microsoft CWE-22
critical
10.0
2012-08-26 CVE-2011-5124 Buffer Errors vulnerability in Bluecoat Proxyone and Proxysg
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp).
network
low complexity
bluecoat CWE-119
critical
10.0
2012-08-26 CVE-2010-5191 Cross-Site Request Forgery (CSRF) vulnerability in Bluecoat Avos and Proxyav
Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password, (2) modify a policy, or (3) restart the device.
network
bluecoat CWE-352
critical
9.3
2012-08-26 CVE-2010-5189 Permissions, Privileges, and Access Controls vulnerability in Bluecoat products
Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated users to execute arbitrary CLI commands by leveraging read-only administrator privileges and establishing an HTTPS session.
network
bluecoat CWE-264
critical
9.3
2012-08-26 CVE-2011-5123 Cryptographic Issues vulnerability in Comodo Internet Security
The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in signed executable files have been revoked, which has unknown impact and remote attack vectors.
network
low complexity
comodo CWE-310
critical
10.0
2012-08-26 CVE-2011-5121 Cryptographic Issues vulnerability in Comodo Internet Security
The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not properly check whether unspecified X.509 certificates are revoked, which has unknown impact and remote attack vectors.
network
low complexity
comodo CWE-310
critical
10.0
2012-08-26 CVE-2010-5185 Improper Input Validation vulnerability in Comodo Internet Security
The Antivirus component in Comodo Internet Security before 5.3.174622.1216 does not check whether X.509 certificates in signed executable files have been revoked, which has unknown impact and remote attack vectors.
network
low complexity
comodo CWE-20
critical
10.0