VYPR

CVEs

8,966 total · page 174 of 180

AllCriticalHighKEV
  • CVE-2015-6435CriJan 22, 2016
    Cisco Systems, Inc.
    Unified Computing System
    risk 0.65cvss 9.8epss 0.16

    An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request,…

  • CVE-2015-6412CriJan 22, 2016
    Cisco Systems, Inc.
    Modular Encoding Platform D9036 Software
    risk 0.64cvss 9.8epss 0.02

    Cisco Modular Encoding Platform D9036 Software before 02.04.70 has hardcoded (1) root and (2) guest passwords, which makes it easier for remote attackers to obtain access via an SSH session, aka Bug ID CSCut88070.

  • CVE-2016-1929CriJan 20, 2016
    SAP
    Hana
    risk 0.61cvss 9.3epss 0.01

    The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service (disk consumption and process crash) via a crafted HTTP request, related to an unspecified debug function, aka SAP Security Note 2241978.

  • CVE-2016-1928CriJan 20, 2016
    SAP
    Hana
    risk 0.67cvss 9.8epss 0.37

    Buffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request, related to JSON, aka SAP Security Note 2241978.

  • CVE-2016-1901CriJan 20, 2016
    Lars Hjemli
    Cgit
    risk 0.57cvss 9.8epss 0.04

    Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header, which triggers a buffer overflow.

  • CVE-2016-1903CriJan 19, 2016
    PHP
    PHP
    risk 0.60cvss 9.1epss 0.09

    The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large…

  • CVE-2015-8617CriJan 19, 2016
    PHP
    PHP
    risk 0.61cvss 9.8epss 0.22

    Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling.

  • CVE-2016-1142CriJan 16, 2016
    Seeds
    Acmailer
    risk 0.59cvss 9.1epss 0.01

    Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.

  • CVE-2016-1909CriJan 15, 2016
    Fortinet
    Fortios
    risk 0.73cvss 9.8epss 0.80

    Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.x before 4.1.11, 4.2.x before 4.2.16, 4.3.x before 4.3.17 and 5.0.x before 5.0.8 have a hardcoded passphrase for the Fortimanager_Access…

  • CVE-2016-0859CriJan 15, 2016
    Advantech
    Webaccess
    risk 0.64cvss 9.8epss 0.01

    Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted RPC request.

  • CVE-2016-0857CriJan 15, 2016
    Advantech
    Webaccess
    risk 0.64cvss 9.8epss 0.03

    Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2016-0856CriJan 15, 2016
    Advantech
    Webaccess
    risk 0.68cvss 9.8epss 0.51

    Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2016-0854CriJan 15, 2016
    Advantech
    Webaccess
    risk 0.72cvss 9.8epss 0.72

    Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors.

  • CVE-2015-6323CriJan 15, 2016
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.64cvss 9.8epss 0.01

    The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253.

  • CVE-2015-6314CriJan 15, 2016
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.64cvss 9.8epss 0.01

    Cisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors, aka Bug ID CSCuw06153.

  • CVE-2016-0946CriJan 14, 2016
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.03

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…

  • CVE-2016-0945CriJan 14, 2016
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.03

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…

  • CVE-2016-0944CriJan 14, 2016
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.03

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…

  • CVE-2016-0942CriJan 14, 2016
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.03

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…

  • CVE-2016-0940CriJan 14, 2016
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.04

    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified…

  • CVE-2016-0933CriJan 14, 2016
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.03

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…

  • CVE-2016-0003CriJan 13, 2016
    Microsoft
    Edge
    risk 0.63cvss 9.6epss 0.06

    Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption Vulnerability."

  • CVE-2015-8611CriJan 12, 2016
    F5, Inc.
    Big IP
    risk 0.64cvss 9.8epss 0.04

    BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not properly sync passwords with the Always-On Management (AOM) subsystem, which might allow remote attackers to obtain login access…

  • CVE-2015-8396CriJan 12, 2016
    GDCM
    Grassroots DICOM
    risk 0.69cvss 10.0epss 0.19

    Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a…

  • CVE-2015-8659CriJan 12, 2016
    Nghttp2
    Nghttp2
    risk 0.65cvss 10.0epss 0.02

    The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.

  • CVE-2015-8098CriJan 12, 2016
    F5, Inc.
    Big IP
    risk 0.65cvss 9.8epss 0.11

    F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors related to processing a Citrix Remote Desktop connection through a virtual server…

  • CVE-2015-7939CriJan 9, 2016
    Unitronics
    Visilogic Oplc Ide
    risk 0.63cvss 9.6epss 0.02

    Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.

  • CVE-2015-7938CriJan 9, 2016
    Advantech
    EKI-132x
    risk 0.64cvss 9.8epss 0.01

    Advantech EKI-132x devices with firmware before 2015-12-31 allow remote attackers to bypass authentication via unspecified vectors.

  • CVE-2015-7541CriJan 8, 2016
    Colorscore Project
    Colorscore
    risk 0.58cvss 10.0epss 0.01

    The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth variable.

  • CVE-2015-7512CriJan 8, 2016
    QEMU
    Qemu
    risk 0.60cvss 9.0epss 0.13

    Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.

  • CVE-2015-8557CriJan 8, 2016
    Pygments
    Pygments
    risk 0.52cvss 9.0epss 0.07

    The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.

  • CVE-2015-8761CriJan 8, 2016
    Values Project
    Values
    risk 0.59cvss 9.0epss 0.00

    The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permission to execute arbitrary PHP code via the exported values list in a ctools import.

  • CVE-2015-8753CriJan 8, 2016
    SAP
    Afaria
    risk 0.59cvss 9.1epss 0.00

    SAP Afaria 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock mobile devices via a crafted request, related to "Insecure signature," aka SAP Security Note 2134905.

  • CVE-2015-8668CriJan 8, 2016
    LibTIFF
    Libtiff
    risk 0.64cvss 9.8epss 0.07

    Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.

  • CVE-2015-7554CriJan 8, 2016
    LibTIFF
    Libtiff
    risk 0.64cvss 9.8epss 0.02

    The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.

  • CVE-2015-5254CriJan 8, 2016
    Apache
    Activemq
    risk 0.63cvss 9.8epss 0.76

    Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.

  • CVE-2015-8261CriJan 8, 2016
    Progress (organisation)
    Whatsup Gold
    risk 0.67cvss 9.8epss 0.04

    The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL injection attacks via a crafted SOAP request.

  • CVE-2015-6642CriJan 6, 2016
    Google
    Android
    risk 0.64cvss 9.8epss 0.00

    The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka…

  • CVE-2015-6636CriJan 6, 2016
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 25070493 and 24686670.

  • CVE-2016-1283CriJan 3, 2016
    Pcre
    Pcre
    risk 0.64cvss 9.8epss 0.02

    The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote…

  • CVE-2015-7450CriKEVJan 2, 2016
    Apache
    Commons Collections
    risk 0.86cvss 9.8epss 0.93

    Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the…

  • CVE-2015-7426CriJan 2, 2016
    IBM
    Spectrum Protect For Virtual Environments
    risk 0.65cvss 10.0epss 0.03

    The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.3.0 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot)…

  • CVE-2015-5989CriDec 31, 2015
    Belkin
    F9K1102
    risk 0.64cvss 9.8epss 0.03

    Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative privileges via certain changes to LockStatus and Login_Success values.

  • CVE-2015-5988CriDec 31, 2015
    Belkin
    F9K1102
    risk 0.64cvss 9.8epss 0.02

    The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative privileges by leveraging a LAN session.

  • CVE-2015-7280CriDec 31, 2015
    Readynet Solutions
    Wrt300n Dd Firmware
    risk 0.64cvss 9.8epss 0.00

    The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session.

  • CVE-2015-7277CriDec 31, 2015
    Amped Wireless
    R10000
    risk 0.64cvss 9.8epss 0.01

    The web administration interface on Amped Wireless R10000 devices with firmware 2.5.2.11 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session.

  • CVE-2015-6018CriDec 31, 2015
    Zyxel
    PMG5318-B20A
    risk 0.69cvss 9.8epss 0.27

    The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter.

  • CVE-2015-6016CriDec 31, 2015
    Zyxel
    PMG5318-B20A
    risk 0.64cvss 9.8epss 0.04

    ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote attackers to obtain administrative access via unspecified vectors.

  • CVE-2015-5995CriDec 31, 2015
    Tenda
    N3 Wireless N150
    risk 0.70cvss 9.8epss 0.38

    Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header.

  • CVE-2015-2874CriDec 31, 2015
    Seagate
    Wireless Mobile Storage
    risk 0.64cvss 9.8epss 0.03

    Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET…