VYPR

CVEs

347,160 total · page 5853 of 6,944

AllCriticalHighKEV
  • CVE-2013-1257Feb 13, 2013
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents…

  • CVE-2013-1256Feb 13, 2013
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents…

  • CVE-2013-1255Feb 13, 2013
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents…

  • CVE-2013-1254Feb 13, 2013
    Microsoft
    Windows
    risk 0.00cvss —epss 0.02

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents…

  • CVE-2013-1253HigFeb 13, 2013
    Microsoft
    Windows
    risk 0.46cvss 7.0epss 0.01

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents…

  • CVE-2013-1252Feb 13, 2013
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents…

  • CVE-2013-1251Feb 13, 2013
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents…

  • CVE-2013-1250Feb 13, 2013
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents…

  • CVE-2013-1249Feb 13, 2013
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain…

  • CVE-2013-1248Feb 13, 2013
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain…

  • CVE-2013-0077Feb 13, 2013
    Microsoft
    Windows
    risk 0.02cvss —epss 0.24

    Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a media file, (2) a media stream, or (3) a Microsoft Office document, aka "Media…

  • CVE-2013-0076Feb 13, 2013
    Microsoft
    Windows Server 2008
    risk 0.00cvss —epss 0.02

    The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability."

  • CVE-2013-0075Feb 13, 2013
    Microsoft
    Windows
    risk 0.06cvss —epss 0.70

    The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP…

  • CVE-2013-0073Feb 13, 2013
    Microsoft
    .net Framework
    risk 0.02cvss —epss 0.30

    The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser…

  • CVE-2013-0030Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.27

    The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via a crafted web site, aka "VML Memory Corruption Vulnerability."

  • CVE-2013-0029HigFeb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.51cvss 7.5epss 0.30

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CHTML Use After Free Vulnerability."

  • CVE-2013-0028Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.20

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CObjectElement Use After Free Vulnerability."

  • CVE-2013-0027Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.20

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CPasteCommand Use After Free Vulnerability."

  • CVE-2013-0026Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.20

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer InsertElement Use After Free Vulnerability."

  • CVE-2013-0025Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.07cvss —epss 0.56

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SLayoutRun Use After Free Vulnerability."

  • CVE-2013-0024Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.20

    Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer pasteHTML Use After Free Vulnerability."

  • CVE-2013-0023Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.19

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CDispNode Use After Free Vulnerability."

  • CVE-2013-0022CriFeb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.60cvss 9.0epss 0.17

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer LsGetTrailInfo Use After Free Vulnerability."

  • CVE-2013-0021Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.21

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer vtable Use After Free Vulnerability."

  • CVE-2013-0020Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.28

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CMarkup Use After Free Vulnerability."

  • CVE-2013-0019Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.06cvss —epss 0.35

    Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer COmWindowProxy Use After Free Vulnerability."

  • CVE-2013-0018Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.20

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SetCapture Use After Free Vulnerability."

  • CVE-2013-0015Feb 13, 2013
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.16

    Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS…

  • CVE-2013-1455Feb 13, 2013
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to an "Undefined variable."

  • CVE-2013-1454Feb 13, 2013
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to "Coding errors."

  • CVE-2013-1453Feb 13, 2013
    Joomla
    Joomla!
    risk 0.03cvss —epss 0.03

    plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and possibly have other impacts via…

  • CVE-2013-0277Feb 13, 2013
    Rubyonrails
    Rails
    risk 0.01cvss —epss 0.07

    ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML.

  • CVE-2013-0276Feb 13, 2013
    Rubyonrails
    Rails
    risk 0.00cvss —epss 0.02

    ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.

  • CVE-2013-0269Feb 13, 2013
    RubyGems
    JSON Gem
    risk 0.01cvss —epss 0.14

    The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby…

  • CVE-2013-0265Feb 13, 2013
    XNBD
    xNBD
    risk 0.00cvss —epss 0.00

    The redirect_stderr function in xnbd_common.c in xnbd-server and xndb-wrapper in xNBD 0.1.0 allow local users to overwrite arbitrary files via a symlink attack on /tmp/xnbd.log.

  • CVE-2013-0255Feb 13, 2013
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.04

    PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote…

  • CVE-2013-0241Feb 13, 2013
    Qxl Graphics Driver Project
    Xf86 Video Qxl
    risk 0.00cvss —epss 0.00

    The QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service (guest crash or hang) via a SPICE connection that prevents other threads from obtaining the qemu_mutex mutex. NOTE: some of these details are obtained from third party information.

  • CVE-2013-0238Feb 13, 2013
    Ircd Hybrid
    Ircd Hybrid
    risk 0.04cvss —epss 0.10

    The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.

  • CVE-2013-0231Feb 13, 2013
    Xen
    Xen
    risk 0.00cvss —epss 0.00

    The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. NOTE: some…

  • CVE-2013-0190Feb 13, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The xen_failsafe_callback function in Xen for the Linux kernel 2.6.23 and other versions, when running a 32-bit PVOPS guest, allows local users to cause a denial of service (guest crash) by triggering an iret fault, leading to use of an incorrect stack pointer and stack…

  • CVE-2013-0152Feb 13, 2013
    Xen
    Xen
    risk 0.00cvss —epss 0.00

    Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers errors that are not properly handled.

  • CVE-2012-6075Feb 13, 2013
    QEMU
    Qemu
    risk 0.00cvss —epss 0.05

    Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code…

  • CVE-2013-1374Feb 12, 2013
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.09

    Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and…

  • CVE-2013-1373Feb 12, 2013
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.10

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before…

  • CVE-2013-1372Feb 12, 2013
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.10

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before…

  • CVE-2013-1370Feb 12, 2013
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.10

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before…

  • CVE-2013-1369Feb 12, 2013
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.10

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before…

  • CVE-2013-1368Feb 12, 2013
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.10

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before…

  • CVE-2013-1367Feb 12, 2013
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.10

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before…

  • CVE-2013-1366Feb 12, 2013
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.10

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before…