VYPR

CVEs

347,079 total · page 5899 of 6,942

AllCriticalHighKEV
  • CVE-2010-5237Sep 7, 2012
    Cyberlink
    Powerdirector
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in CyberLink PowerDirector 7 allows local users to gain privileges via a Trojan horse mfc71loc.dll file in the current working directory, as demonstrated by a directory that contains a .pdl, .iso, .pds, .p2g, or .p2i file. NOTE: some of these…

  • CVE-2010-5236Sep 7, 2012
    Roxio
    Easy Media Creator
    risk 0.03cvss —epss 0.01

    Untrusted search path vulnerability in Roxio Easy Media Creator Home 9.0.136 allows local users to gain privileges via a Trojan horse homeutils9.dll file in the current working directory, as demonstrated by a directory that contains a .roxio, .c2d, or .gi file. NOTE: some of…

  • CVE-2010-5235Sep 7, 2012
    Izarc
    Izarc
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in IZArc Archiver 4.1.2 allows local users to gain privileges via a Trojan horse ztv7z.dll file in the current working directory, as demonstrated by a directory that contains a .arj file. NOTE: some of these details are obtained from third…

  • CVE-2010-5234Sep 7, 2012
    Techsmith
    Camtasia Studio
    risk 0.00cvss —epss 0.00

    Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse (1) MFC90ENU.DLL or (2) MFC90LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .cmmp or .camrec…

  • CVE-2010-5233Sep 7, 2012
    Virtualdj
    Virtual Dj
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in Virtual DJ 6.1.2 Trial b301 allows local users to gain privileges via a Trojan horse HDJAPI.dll file in the current working directory, as demonstrated by a directory that contains a .mp3 file. NOTE: some of these details are obtained from…

  • CVE-2010-5232Sep 7, 2012
    Divx
    Divx Plus Player
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in DivX Plus Player 8.1.0 allows local users to gain privileges via a Trojan horse ssleay32.dll file in a certain directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2010-5231Sep 7, 2012
    Divx
    Player
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in DivX Player 7.2.019 allows local users to gain privileges via a Trojan horse VersionCheckDLL.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: the provenance of this information is…

  • CVE-2010-5230Sep 7, 2012
    Bentley
    Microstation Connect
    risk 0.00cvss —epss 0.01

    Multiple untrusted search path vulnerabilities in MicroStation 7.1 allow local users to gain privileges via a Trojan horse (1) mptools.dll, (2) baseman.dll, (3) wintab32.dll, or (4) wintab.dll file in the current working directory, as demonstrated by a directory that contains a…

  • CVE-2010-5229Sep 7, 2012
    Sweetscape
    010 Editor
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in 010 Editor before 3.1.3 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .hex file. NOTE: some of these details are obtained from…

  • CVE-2010-5228Sep 7, 2012
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: some of these details are obtained…

  • CVE-2010-5227Sep 7, 2012
    Opera
    Opera
    risk 0.03cvss —epss 0.01

    Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl file. NOTE: some of…

  • CVE-2010-5226Sep 7, 2012
    Autodesk
    Design Review
    risk 0.00cvss —epss 0.00

    Multiple untrusted search path vulnerabilities in Autodesk Design Review 2011 11.0.0.86 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll, (2) whiptk_wt.7.12.601.dll, or (3) xaml_wt.7.6.0.dll file in the current working directory, as demonstrated by a…

  • CVE-2012-4879Sep 7, 2012
    Wago
    I/O System 758
    risk 0.00cvss —epss 0.03

    The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the (1) root and (2) admin accounts, (3) a default password of user for the user account, and (4) a default password of guest…

  • CVE-2012-3013Sep 7, 2012
    Wago
    I/O System 758
    risk 0.00cvss —epss 0.03

    WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Based Management accounts, which makes it easier for remote attackers to obtain administrative access via a TCP session.

  • CVE-2012-4878Sep 6, 2012
    FlatnuX CMS
    FlatnuX CMS
    risk 0.04cvss —epss 0.09

    Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action.

  • CVE-2012-4877Sep 6, 2012
    FlatnuX CMS
    FlatnuX CMS
    risk 0.03cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.

  • CVE-2012-4876Sep 6, 2012
    Trendnet
    SecurView TV-IP121WN
    risk 0.09cvss —epss 0.71

    Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method.

  • CVE-2012-4875Sep 6, 2012
    Artifex
    Ghostscript
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote attackers to execute arbitrary code via a long file name in a PostScript document. NOTE: as of 20120314, the developer was not able to…

  • CVE-2012-4874Sep 6, 2012
    WordPress
    Another Wordpress Classifieds Plugin
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Another WordPress Classifieds Plugin before 2.0 for WordPress has unknown impact and attack vectors related to "image uploads."

  • CVE-2012-4873Sep 6, 2012
    Sir
    Gnuboard
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.

  • CVE-2012-4872Sep 6, 2012
    Kayako
    Fusion
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web script or HTML via certain vectors, possibly a crafted ticket description.

  • CVE-2012-4871Sep 6, 2012
    Litespeedtech
    Web Server
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter.

  • CVE-2012-1612Sep 6, 2012
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-1611Sep 6, 2012
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" information via unknown attack vectors. NOTE: this might be a duplicate of CVE-2012-1599.

  • CVE-2012-1469Sep 6, 2012
    Pkp
    Open Journal Systems
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and remote authenticated users to inject arbitrary web script or HTML via the (1) editor or (2) callback parameters to lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibr…

  • CVE-2012-1468Sep 6, 2012
    Pkp
    Open Journal Systems
    risk 0.03cvss —epss 0.03

    Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to execute arbitrary code by uploading a file with an executable extension that is not ".php", then accessing it via a direct request to the…

  • CVE-2012-1467Sep 6, 2012
    Pkp
    Open Journal Systems
    risk 0.03cvss —epss 0.03

    Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authenticated users to (1) delete or (2) rename arbitrary files via a .. (dot dot) in the param parameter to…

  • CVE-2012-0837Sep 6, 2012
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation path via unspecified vectors related to "administrator."

  • CVE-2012-0836Sep 6, 2012
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 allows attackers to read the error log via unknown vectors.

  • CVE-2012-0835Sep 6, 2012
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain sensitive information via unknown vectors related to "administrator."

  • CVE-2012-0822Sep 6, 2012
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Joomla! 1.6 and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0820.

  • CVE-2012-0821Sep 6, 2012
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2012-0819.

  • CVE-2012-0820Sep 6, 2012
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0822.

  • CVE-2012-0819Sep 6, 2012
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2012-0821.

  • CVE-2006-7247Sep 6, 2012
    Mambo (software)
    com_weblinks
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter.

  • CVE-2012-1584Sep 6, 2012
    Taglib
    Taglib
    risk 0.00cvss —epss 0.03

    Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation.

  • CVE-2012-1112Sep 6, 2012
    Open Realty
    Open Realty
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the select_users_template parameter to index.php.

  • CVE-2012-1110Sep 6, 2012
    Etano
    Etano
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user, (2) email, (3) email2, (4) f17_zip, or (5) agree parameter to join.php; (6) PATH_INFO, (7) st, (8) f17_city, (9)…

  • CVE-2012-1108Sep 6, 2012
    Taglib
    Taglib
    risk 0.00cvss —epss 0.03

    The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.

  • CVE-2012-1107Sep 6, 2012
    Taglib
    Taglib
    risk 0.00cvss —epss 0.02

    The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.

  • CVE-2012-4870Sep 6, 2012
    Freepbx
    Freepbx
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) context parameter to panel/index_amp.php or (2) panel/dhtml/index.php; (3) clid or (4) clidname parameters to…

  • CVE-2012-4869Sep 6, 2012
    Freepbx
    Freepbx
    risk 0.09cvss —epss 0.70

    The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action.

  • CVE-2012-4868Sep 6, 2012
    Kunena
    Kunena
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2012-4867Sep 6, 2012
    Vtiger
    vTiger
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the module_name parameter.

  • CVE-2012-4866Sep 6, 2012
    Xtremerat
    Xtremerat
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from…

  • CVE-2012-4865Sep 6, 2012
    Oreans
    Themida
    risk 0.04cvss —epss 0.06

    Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file.

  • CVE-2012-4864Sep 6, 2012
    Oreans
    Winlicense
    risk 0.03cvss —epss 0.06

    Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted xml file.

  • CVE-2012-2741Sep 6, 2012
    Phplist
    Phplist
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a reconcileusers action.

  • CVE-2012-2740Sep 6, 2012
    Phplist
    Phplist
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in public_html/lists/admin in phpList before 2.10.18 allows remote attackers to execute arbitrary SQL commands via the sortby parameter in a find action.

  • CVE-2012-2069Sep 6, 2012
    Drupal
    Wishlist
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via the (1)…