VYPR

CVEs

347,160 total · page 5855 of 6,944

AllCriticalHighKEV
  • CVE-2012-3283Feb 6, 2013
    Microfocus
    LeftHand Virtual SAN Appliance
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1511.

  • CVE-2012-3282Feb 6, 2013
    Microfocus
    LeftHand Virtual SAN Appliance
    risk 0.04cvss —epss 0.17

    Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468.

  • CVE-2012-3281Feb 6, 2013
    Microfocus
    XP P9000 Command View Advanced Edition
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Device Manager in HP XP P9000 Command View Advanced Edition before 7.4.0-00 allows remote attackers to cause a denial of service via unknown vectors.

  • CVE-2012-3279Feb 6, 2013
    Microfocus
    OpenView Network Node Manager
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-2294Feb 6, 2013
    EMC Corporation
    Rsa Archer Smartsuite
    risk 0.00cvss —epss 0.01

    EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allow remote attackers to conduct clickjacking attacks via a crafted web page.

  • CVE-2012-2293Feb 6, 2013
    EMC Corporation
    Rsa Archer Smartsuite
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allows remote authenticated users to upload files, and consequently execute arbitrary code, via a relative path.

  • CVE-2012-2292Feb 6, 2013
    EMC Corporation
    Rsa Archer Smartsuite
    risk 0.00cvss —epss 0.01

    The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

  • CVE-2012-1064Feb 6, 2013
    EMC Corporation
    Rsa Archer Smartsuite
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-0218Feb 5, 2013
    Red Hat
    Jboss Enterprise Application Platform
    risk 0.00cvss —epss 0.00

    The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for the auto-install XML file, which allows local users to obtain the administrator password and the sucker password by…

  • CVE-2013-0176Feb 5, 2013
    Libssh
    Libssh
    risk 0.00cvss —epss 0.03

    The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet.

  • CVE-2012-5478Feb 5, 2013
    Red Hat
    Jboss Enterprise Application Platform
    risk 0.00cvss —epss 0.02

    The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role…

  • CVE-2012-3370Feb 5, 2013
    Red Hat
    Jboss Enterprise Application Platform
    risk 0.00cvss —epss 0.02

    The SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 returns the credentials of the previous user when a security context is not…

  • CVE-2012-3369Feb 5, 2013
    Red Hat
    Jboss Enterprise Application Platform
    risk 0.00cvss —epss 0.03

    The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes…

  • CVE-2012-0874Feb 5, 2013
    Red Hat
    Jboss Enterprise Application Platform
    risk 0.04cvss —epss 0.14

    The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 do not require authentication by default in certain…

  • CVE-2012-0034Feb 5, 2013
    Red Hat
    Jboss Enterprise Application Platform
    risk 0.00cvss —epss 0.00

    The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platform (EWP) 5.1.2 and 5.2.0, and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain…

  • CVE-2011-4575Feb 5, 2013
    Red Hat
    Jboss Enterprise Application Platform
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via…

  • CVE-2011-1352Feb 5, 2013
    Google
    Android
    risk 0.00cvss —epss 0.00

    The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device.

  • CVE-2011-1350Feb 5, 2013
    Google
    Android
    risk 0.03cvss —epss 0.01

    The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device.

  • CVE-2013-1471Feb 4, 2013
    Fortinet
    Fortimail
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) the Add field for the Black…

  • CVE-2013-1590Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.

  • CVE-2013-1589Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.

  • CVE-2013-1588Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    Multiple buffer overflows in the dissect_pft_fec_detailed function in the DCP-ETSI dissector in epan/dissectors/packet-dcp-etsi.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allow remote attackers to cause a denial of service (application crash) via a malformed…

  • CVE-2013-1587Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_rohc_ir_packet function in epan/dissectors/packet-rohc.c in the ROHC dissector in Wireshark 1.8.x before 1.8.5 does not properly handle unknown profiles, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

  • CVE-2013-1586Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The fragment_set_tot_len function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service (application crash)…

  • CVE-2013-1585Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly validate certain length values for the MS-MMC dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

  • CVE-2013-1584Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_version_5_and_6_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via…

  • CVE-2013-1583Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_version_4_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a…

  • CVE-2013-1582Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service (infinite loop or application crash)…

  • CVE-2013-1581Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_pft_fec_detailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service (loop) via a malformed…

  • CVE-2013-1580Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service…

  • CVE-2013-1579Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The rtps_util_add_bitmap function in epan/dissectors/packet-rtps.c in the RTPS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly implement certain nested loops for processing bitmap data, which allows remote attackers to cause a denial of…

  • CVE-2013-1578Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_pw_eth_heuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service…

  • CVE-2013-1577Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_sip_p_charging_func_addresses function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle offset data associated with a quoted string, which allows remote attackers to cause a denial…

  • CVE-2013-1576Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_sdp_media_attribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service (infinite loop) via…

  • CVE-2013-1575Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service (infinite loop)…

  • CVE-2013-1574Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a counter variable, which allows remote attackers to cause a denial of service…

  • CVE-2013-1573Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service (infinite loop) via…

  • CVE-2013-1572Feb 3, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The dissect_oampdu_event_notification function in epan/dissectors/packet-slowprotocols.c in the IEEE 802.3 Slow Protocols dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle certain short lengths, which allows remote attackers to cause a…

  • CVE-2013-0214Feb 2, 2013
    Samba (software)
    Samba
    risk 0.00cvss —epss 0.02

    Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and…

  • CVE-2013-0213Feb 2, 2013
    Samba (software)
    Samba
    risk 0.00cvss —epss 0.03

    The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.

  • CVE-2012-6352Feb 2, 2013
    IBM
    Sterling Connect\
    risk 0.00cvss —epss 0.02

    The Session Manager in IBM Sterling Connect:Direct through 4.1.0.3 on UNIX allows remote attackers to cause a denial of service (daemon crash and disk consumption) via crafted data.

  • CVE-2013-1483Feb 2, 2013
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.

  • CVE-2013-1482Feb 2, 2013
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.

  • CVE-2013-1481Feb 2, 2013
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.

  • CVE-2013-1480Feb 2, 2013
    Openjdk
    OpenJDK
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and…

  • CVE-2013-1479Feb 2, 2013
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2013-1478Feb 2, 2013
    Openjdk
    OpenJDK
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and…

  • CVE-2013-1477Feb 2, 2013
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.

  • CVE-2013-1476Feb 2, 2013
    Openjdk
    OpenJDK
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and…

  • CVE-2013-1475Feb 2, 2013
    Openjdk
    OpenJDK
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and…