VYPR

CVEs

347,108 total · page 5883 of 6,943

AllCriticalHighKEV
  • CVE-2012-5084Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality, integrity, and availability via…

  • CVE-2012-5083Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity,…

  • CVE-2012-5082Oct 16, 2012
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect availability via unknown vectors.

  • CVE-2012-5081Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.07cvss —epss 0.45

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to JSSE.

  • CVE-2012-5080Oct 16, 2012
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2012-5078.

  • CVE-2012-5079Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries,…

  • CVE-2012-5078Oct 16, 2012
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2012-5080.

  • CVE-2012-5077Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to…

  • CVE-2012-5076CriKEVOct 16, 2012
    Sun Corporation
    Java SE
    risk 0.86cvss 9.8epss 0.91

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

  • CVE-2012-5075Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, related to JMX.

  • CVE-2012-5074Oct 16, 2012
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.

  • CVE-2012-5073Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries,…

  • CVE-2012-5072Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security.

  • CVE-2012-5071Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity, related to JMX.

  • CVE-2012-5070Oct 16, 2012
    Oracle Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, related to JMX.

  • CVE-2012-5069Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Concurrency.

  • CVE-2012-5068Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

  • CVE-2012-5067Oct 16, 2012
    Sun Corporation
    Java SE
    risk 0.08cvss —epss 0.64

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

  • CVE-2012-4416Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot.

  • CVE-2012-3216Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to…

  • CVE-2012-3159Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different…

  • CVE-2012-3143Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different…

  • CVE-2012-1533Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.08cvss —epss 0.69

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different…

  • CVE-2012-1532Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier and 6 Update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

  • CVE-2012-1531Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier; and JavaFX 2.2 and earlier; allows remote attackers to affect confidentiality,…

  • CVE-2012-0227Oct 12, 2012
    Componentone
    Flexgrid
    risk 0.00cvss —epss 0.06

    Buffer overflow in the VSFlex7.VSFlexGrid ActiveX control in ComponentOne FlexGrid 7.1, as used in Open Automation Software OPC Systems.NET, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long archive file name argument to the…

  • CVE-2012-4193Oct 12, 2012
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers…

  • CVE-2012-4192Oct 12, 2012
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193.

  • CVE-2012-4191Oct 12, 2012
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.04

    The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or…

  • CVE-2012-4190Oct 12, 2012
    Cyanogenmod
    Cyanogenmod
    risk 0.00cvss —epss 0.04

    The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via…

  • CVE-2012-5386Oct 11, 2012
    PhpPaleo
    phpPaleo
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in index.php in phpPaleo 4.8b180 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phppaleo4_lang cookie, a different vulnerability than CVE-2012-1671. NOTE: the provenance of this information is…

  • CVE-2012-5385Oct 11, 2012
    Webcalendar
    Webcalendar
    risk 0.00cvss —epss 0.02

    install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference.

  • CVE-2012-5384Oct 11, 2012
    Webcalendar
    Webcalendar
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the (1) $name or (2) $description variables in edit_entry_handler.php, or (3) $url, (4) $tempfullname, or (5) $ext_users[] variables…

  • CVE-2012-5383Oct 11, 2012
    Oracle Corporation
    MySQL
    risk 0.03cvss —epss 0.01

    Untrusted search path vulnerability in the installation functionality in Oracle MySQL 5.5.28, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the "C:\MySQL\MySQL Server 5.5\bin" directory, which may be added to…

  • CVE-2012-5382Oct 11, 2012
    Zend
    Server
    risk 0.03cvss —epss 0.01

    Untrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Zend\ZendServer\share\ZendFramework\bin directory, which may…

  • CVE-2012-5381Oct 11, 2012
    PHP
    PHP
    risk 0.03cvss —epss 0.01

    Untrusted search path vulnerability in the installation functionality in PHP 5.3.17, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\PHP directory, which may be added to the PATH system environment…

  • CVE-2012-5380MedOct 11, 2012
    Ruby Lang
    Ruby
    risk 0.47cvss 6.7epss 0.01

    Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Ruby193\bin directory, which may be added to the PATH system…

  • CVE-2012-5379HigOct 11, 2012
    Activestate
    Activepython
    risk 0.51cvss 7.3epss 0.01

    Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Python27 or C:\Python27\Scripts directory, which may be added…

  • CVE-2012-5378Oct 11, 2012
    ActiveTcl
    ActiveTcl
    risk 0.03cvss —epss 0.01

    Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\TD\bin directory, which is added to the PATH system environment…

  • CVE-2012-5377Oct 11, 2012
    ActivePerl
    ActivePerl
    risk 0.03cvss —epss 0.01

    Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\Perl\Site\bin directory, which is added to the PATH system…

  • CVE-2012-5376CriOct 11, 2012
    Google
    Chrome
    risk 0.63cvss 9.6epss 0.02

    The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112.

  • CVE-2012-5112Oct 11, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2012-5166Oct 10, 2012
    Isc
    Bind
    risk 0.03cvss —epss 0.34

    ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.

  • CVE-2012-4467Oct 10, 2012
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorrect argument order, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (system crash) via a crafted ioctl…

  • CVE-2012-2286Oct 10, 2012
    EMC Corporation
    Rsa Adaptive Authentication On Premise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors.

  • CVE-2012-5356Oct 10, 2012
    Ubuntu
    Software Properties
    risk 0.00cvss —epss 0.02

    The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x before 0.81.13.5, 0.82.x before 0.82.7.3, and 0.92.x before 0.92.8 does not properly check PPA GPG keys imported from a keyserver, which allows remote attackers to…

  • CVE-2012-5355Oct 10, 2012
    Xdiagnose
    xdiagnose
    risk 0.00cvss —epss 0.00

    welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

  • CVE-2012-4899Oct 10, 2012
    Wellintech
    Kingview
    risk 0.00cvss —epss 0.00

    WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials by reading an unspecified file.

  • CVE-2012-4465Oct 10, 2012
    Lars Hjemli
    Cgit
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via an empty username in the "Author" field in a commit.

  • CVE-2012-4463Oct 10, 2012
    Midnight Commander
    Midnight Commander
    risk 0.00cvss —epss 0.02

    Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote attackers to execute arbitrary commands via a crafted file name.