VYPR

CVEs

8,966 total · page 176 of 180

AllCriticalHighKEV
  • CVE-2014-1514CriMar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.04

    vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause…

  • CVE-2014-1511CriMar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.72cvss 9.8epss 0.70

    Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.

  • CVE-2014-1510CriMar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.72cvss 9.8epss 0.71

    The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.

  • CVE-2014-1508CriMar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.59cvss 9.1epss 0.01

    The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of service (out-of-bounds read…

  • CVE-2014-1493CriMar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2014-2323CriMar 14, 2014
    Lighttpd
    Lighttpd
    risk 0.71cvss 9.8epss 0.91

    SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname.

  • CVE-2014-1486CriFeb 6, 2014
    Mozilla Corporation
    Firefox
    risk 0.65cvss 9.8epss 0.11

    Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving unspecified Content-Type values…

  • CVE-2014-1477CriFeb 6, 2014
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2014-0497CriKEVFeb 5, 2014
    Google
    Chrome
    risk 0.86cvss 9.8epss 0.93

    Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2013-7137CriJan 26, 2014
    Burden Project
    Burden
    risk 0.60cvss 9.8epss 0.10

    The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1.

  • CVE-2014-0808CriJan 22, 2014
    Ec Cube Co.,ltd.
    Ec Cube
    risk 0.59cvss 9.1epss 0.00

    Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a…

  • CVE-2013-6671CriDec 11, 2013
    Mozilla Corporation
    Firefox
    risk 0.65cvss 9.8epss 0.10

    The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.

  • CVE-2013-5618CriDec 11, 2013
    Mozilla Corporation
    Firefox
    risk 0.65cvss 9.8epss 0.10

    Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute…

  • CVE-2013-5616CriDec 11, 2013
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.03

    Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service…

  • CVE-2013-5615CriDec 11, 2013
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.02

    The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact…

  • CVE-2013-5613CriDec 11, 2013
    Mozilla Corporation
    Firefox
    risk 0.65cvss 9.8epss 0.11

    Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap…

  • CVE-2013-5609CriDec 11, 2013
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.03

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2013-6014CriOct 28, 2013
    Juniper Networks
    Junos
    risk 0.60cvss 9.3epss 0.00

    Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.2 before 12.2R6, 12.3 before 12.3R3, 13.1 before 13.1R3, and 13.2 before 13.2R1, when Proxy ARP is enabled on an…

  • CVE-2013-4810CriKEVSep 16, 2013
    Microfocus
    Application Lifecycle Management
    risk 0.86cvss 9.8epss 0.90

    HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet, aka ZDI-CAN-1760. NOTE:…

  • CVE-2013-3346CriKEVAug 30, 2013
    Adobe Inc.
    Acrobat
    risk 0.86cvss 9.8epss 0.90

    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720,…

  • CVE-2013-2251CriKEVJul 20, 2013
    Apache
    Struts
    risk 0.79cvss 9.8epss 0.94

    Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.

  • CVE-2013-2465CriKEVJun 18, 2013
    Sun Corporation
    Jre
    risk 0.92cvss 9.8epss 0.93

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown…

  • CVE-2011-1180CriJun 8, 2013
    Linux
    Kernel
    risk 0.57cvss 9.8epss 0.01

    Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging…

  • CVE-2013-2729CriKEVMay 16, 2013
    Adobe Inc.
    Acrobat
    risk 0.86cvss 9.8epss 0.90

    Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.

  • CVE-2012-3363CriFeb 13, 2013
    Zend
    Framework
    risk 0.60cvss 9.1epss 0.55

    Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC…

  • CVE-2013-0022CriFeb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.61cvss 9.0epss 0.31

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer LsGetTrailInfo Use After Free Vulnerability."

  • CVE-2013-1465CriFeb 8, 2013
    Cubecart
    Cubecart
    risk 0.69cvss 9.8epss 0.31

    The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter, as demonstrated by modifying the application configuration using the Config object.

  • CVE-2013-1591CriJan 31, 2013
    Palemoon
    Pale Moon
    risk 0.64cvss 9.8epss 0.01

    Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in…

  • CVE-2012-6437CriJan 24, 2013
    Rockwellautomation
    Guardlogix Controllers
    risk 0.64cvss 9.8epss 0.09

    The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image. Successful exploitation of this vulnerability could cause loss of availability,…

  • CVE-2012-6069CriJan 21, 2013
    Codesys
    Runtime Toolkit
    risk 0.65cvss 10.0epss 0.02

    The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the …

  • CVE-2012-6068CriJan 21, 2013
    Codesys
    Runtime Toolkit
    risk 0.64cvss 9.8epss 0.04

    The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.

  • CVE-2013-0632CriKEVJan 17, 2013
    Adobe Inc.
    Coldfusion
    risk 0.86cvss 9.8epss 0.93

    administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web…

  • CVE-2013-0422CriKEVJan 10, 2013
    IBM
    Java
    risk 0.92cvss 9.8epss 0.94

    Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary…

  • CVE-2013-0625CriKEVJan 9, 2013
    Adobe Inc.
    Coldfusion
    risk 0.85cvss 9.8epss 0.78

    Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited in the wild in January 2013.

  • CVE-2012-4787CriDec 12, 2012
    Microsoft
    Internet Explorer
    risk 0.62cvss 9.0epss 0.38

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly initialized or (2) is deleted, aka "Improper Ref Counting Use After Free…

  • CVE-2012-2239CriNov 24, 2012
    Mahara (software)
    Mahara
    risk 0.59cvss 9.1epss 0.00

    Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML external entity (XXE) injection attack, as demonstrated by reading config.php.

  • CVE-2012-4406CriOct 22, 2012
    OpenStack
    Swift
    risk 0.57cvss 9.8epss 0.05

    OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

  • CVE-2012-3152CriKEVOct 16, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.82cvss 9.1epss 0.94

    Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. NOTE: the previous…

  • CVE-2012-5076CriKEVOct 16, 2012
    Sun Corporation
    Java Se
    risk 0.86cvss 9.8epss 0.91

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

  • CVE-2012-5376CriOct 11, 2012
    Google
    Chrome
    risk 0.62cvss 9.6epss 0.00

    The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112.

  • CVE-2012-4681CriKEVAug 28, 2012
    Sun Corporation
    Java Se
    risk 0.92cvss 9.8epss 0.94

    Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findCla…

  • CVE-2012-3503CriAug 25, 2012
    Theforeman
    Katello
    risk 0.57cvss 9.8epss 0.01

    The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web…

  • CVE-2012-0911CriJul 12, 2012
    Tiki
    Tikiwiki CMS\/groupware
    risk 0.73cvss 9.8epss 0.78

    TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b)…

  • CVE-2012-1891CriJul 10, 2012
    Microsoft
    Data Access Components
    risk 0.68cvss 9.8epss 0.59

    Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO…

  • CVE-2012-1723CriKEVJun 16, 2012
    Sun Corporation
    Java Se
    risk 0.92cvss 9.8epss 0.94

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via…

  • CVE-2012-0507CriKEVJun 7, 2012
    Sun Corporation
    Jre
    risk 0.92cvss 9.8epss 0.94

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related…

  • CVE-2011-3188CriMay 24, 2012
    Linux
    Kernel
    risk 0.52cvss 9.1epss 0.04

    The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network…

  • CVE-2012-2926CriMay 22, 2012
    Atlassian
    Confluence
    risk 0.67cvss 9.1epss 0.65

    Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo before 3.3.4 and 3.4.x before 3.4.5; and Crowd before 2.0.9, 2.1 before 2.1.2, 2.2 before 2.2.9, 2.3…

  • CVE-2012-1823CriKEVMay 11, 2012
    PHP
    PHP
    risk 0.86cvss 9.8epss 0.94

    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options…

  • CVE-2012-1516CriMay 4, 2012
    VMware
    Esx
    risk 0.64cvss 9.9epss 0.02

    The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving…