OVAL Definitions - Class: Vulnerability

Filter: Compliance Inventory Patch Vulnerability All
Title Definition Id Class Family
Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.... oval:org.mitre.oval:def:14828 Vulnerability windows
Buffer overflow in Skia, as used in Google Chrome before 17.0.963.65 oval:org.mitre.oval:def:15094 Vulnerability windows
CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 throug... oval:org.mitre.oval:def:14909 Vulnerability windows
DEPRECATED: Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 thro... oval:org.mitre.oval:def:14842 Vulnerability windows
DEPRECATED: Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, ... oval:org.mitre.oval:def:14526 Vulnerability windows
DirectWrite Application Denial of Service Vulnerability oval:org.mitre.oval:def:14807 Vulnerability windows
DNS Denial of Service Vulnerability oval:org.mitre.oval:def:15098 Vulnerability windows
Expression Design Insecure Library Loading Vulnerability oval:org.mitre.oval:def:14973 Vulnerability windows
Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging a... oval:org.mitre.oval:def:14940 Vulnerability windows
Google Chrome before 17.0.963.83 does not properly restrict the extension web request API oval:org.mitre.oval:def:15049 Vulnerability windows
Google Chrome before 17.0.963.65 does not properly handle text oval:org.mitre.oval:def:14996 Vulnerability windows
Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line box... oval:org.mitre.oval:def:15072 Vulnerability windows
Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonym... oval:org.mitre.oval:def:14397 Vulnerability windows
Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic... oval:org.mitre.oval:def:14962 Vulnerability windows
Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vectors... oval:org.mitre.oval:def:14385 Vulnerability windows
IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote attackers to cause a denial of... oval:org.mitre.oval:def:15078 Vulnerability windows
IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote auth... oval:org.mitre.oval:def:15004 Vulnerability windows
IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors. oval:org.mitre.oval:def:14922 Vulnerability windows
Integer signedness error in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and ot... oval:org.mitre.oval:def:14763 Vulnerability windows
Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x bef... oval:org.mitre.oval:def:15114 Vulnerability windows
Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 th... oval:org.mitre.oval:def:14829 Vulnerability windows
Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 th... oval:org.mitre.oval:def:15122 Vulnerability windows
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 oval:org.mitre.oval:def:14817 Vulnerability windows
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefo... oval:org.mitre.oval:def:15009 Vulnerability windows
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before ... oval:org.mitre.oval:def:15012 Vulnerability windows
PostMessage Function Vulnerability oval:org.mitre.oval:def:14217 Vulnerability windows
Remote Desktop Protocol Vulnerability oval:org.mitre.oval:def:14623 Vulnerability windows
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 oval:org.mitre.oval:def:14820 Vulnerability windows
Terminal Server Denial of Service Vulnerability oval:org.mitre.oval:def:14626 Vulnerability windows
The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extensio... oval:org.mitre.oval:def:15033 Vulnerability windows
Total number of results : 57
Page : 1 (This Page) 2

OVAL Definitions By Referenced Objects

How does it work?   User agreement and privacy statement   About & Contact
CVE is a registred trademark of the MITRE Corporation and the authoritive source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritive source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritive source of OVAL content is MITRE's OVAL web site.
Warning: This site and all data are provided as is. It is not guaranteed that all information is accurate and complete. Use any information provided on this site at your own risk. By using this site you accept that you know that these data are provided as is and not guaranteed to be accurate, correct or complete. All trademarks appearing on this site are the property of their respective owners in the US or other countries. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss. PLEASE SEE nvd.nist.gov and oval.mitre.org for more details about OVAL language and definitions.
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor/web site owner/maintainer be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Use of OVAL and all related data is subject to terms of use defined by Mitre at http://oval.mitre.org/oval/about/termsofuse.html