VYPR

CVEs

347,079 total · page 5909 of 6,942

AllCriticalHighKEV
  • CVE-2012-3302Aug 21, 2012
    IBM
    Lotus Domino
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL accessed during use of the Mail template in the WebMail UI or (2) a URL accessed during use of Domino Help…

  • CVE-2012-3301Aug 21, 2012
    IBM
    Lotus Domino
    risk 0.00cvss —epss 0.01

    Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0.9 and earlier or (2)…

  • CVE-2012-3293Aug 21, 2012
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via…

  • CVE-2012-2985Aug 21, 2012
    Cutesoft Components
    Cute Editor
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the _UploadID parameter.

  • CVE-2012-2980Aug 21, 2012
    Att
    Status
    risk 0.00cvss —epss 0.02

    The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer,…

  • CVE-2012-2190Aug 21, 2012
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service (daemon crash) via a…

  • CVE-2012-4362Aug 20, 2012
    Microfocus
    Virtual SAN Appliance
    risk 0.03cvss —epss 0.03

    hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$agent account, which allows remote attackers to obtain access to a management service via a login: request to TCP port 13838.

  • CVE-2012-4361Aug 20, 2012
    Microfocus
    San\/iq
    risk 0.07cvss —epss 0.48

    lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter.

  • CVE-2012-3252Aug 20, 2012
    Microfocus
    Serviceguard
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in HP Serviceguard A.11.19 and A.11.20 allows remote attackers to cause a denial of service via unknown vectors.

  • CVE-2012-2986Aug 20, 2012
    Microfocus
    San\/iq
    risk 0.03cvss —epss 0.04

    lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) first, (2) third, or (3) fourth parameter. NOTE: this vulnerability exists because of an incomplete fix…

  • CVE-2012-4238Aug 20, 2012
    TCExam
    TCExam
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question_subject_id parameter.

  • CVE-2012-4237Aug 20, 2012
    TCExam
    TCExam
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_answer.php or (2) tce_edit_question.php.

  • CVE-2012-4052Aug 20, 2012
    Jease
    Jease
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter.

  • CVE-2011-4579Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause…

  • CVE-2011-4364Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.05

    Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service…

  • CVE-2011-4353Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allow remote attackers…

  • CVE-2011-4352Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.01cvss —epss 0.07

    Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers…

  • CVE-2011-3945Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service…

  • CVE-2012-4236Aug 20, 2012
    Total Shop UK
    eCommerce Open Source
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the refresh_page function in application/modules/_main/views/_top.php in Total Shop UK eCommerce Open Source before 2.1.2_p1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

  • CVE-2012-3461Aug 20, 2012
    Libotr
    libotr
    risk 0.00cvss —epss 0.03

    The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_proto_accept_data functions in src/proto.c; and (4) decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which…

  • CVE-2012-3455Aug 20, 2012
    KDE
    Koffice
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted…

  • CVE-2012-0857Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service (application crash) via unspecified vectors.

  • CVE-2012-0856Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.02

    Heap-based buffer overflow in the MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted H263 media file. NOTE: this vulnerability…

  • CVE-2012-0854Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.02

    The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors, which triggers a heap-based buffer…

  • CVE-2012-0850Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.02

    The sbr_qmf_synthesis function in libavcodec/aacsbr.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted mpg file that triggers memory corruption involving the v_off variable, probably a buffer underflow.

  • CVE-2012-0848Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.02

    Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file, related to an incorrect calculation, aka "wrong samples count."

  • CVE-2012-0847Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.01

    Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file.

  • CVE-2012-3456Aug 20, 2012
    Calligra
    Calligra
    risk 0.05cvss —epss 0.20

    Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted…

  • CVE-2012-3447Aug 20, 2012
    OpenStack
    Nova
    risk 0.00cvss —epss 0.02

    virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability…

  • CVE-2012-2387Aug 20, 2012
    Debian
    Devotee
    risk 0.00cvss —epss 0.01

    devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack.

  • CVE-2012-2132Aug 20, 2012
    GNOME Foundation
    Libsoup
    risk 0.00cvss —epss 0.02

    libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection.

  • CVE-2012-0947Aug 20, 2012
    Libav
    Libav
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute…

  • CVE-2012-0859Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.04

    The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier. NOTE: this…

  • CVE-2012-0858Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.04

    The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (application crash) and…

  • CVE-2012-0853Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.04

    The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of…

  • CVE-2012-0852Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary…

  • CVE-2012-0851Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly…

  • CVE-2011-3952Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via…

  • CVE-2011-3951Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary…

  • CVE-2011-3947Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.04

    Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute…

  • CVE-2011-3940Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted NSV…

  • CVE-2011-3936Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and…

  • CVE-2011-3929Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.05

    The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (NULL pointer…

  • CVE-2012-4359Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.00cvss —epss 0.03

    Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified…

  • CVE-2012-4358Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.00cvss —epss 0.03

    Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified…

  • CVE-2012-4357Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.04cvss —epss 0.07

    Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an…

  • CVE-2012-4356Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.05cvss —epss 0.27

    Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a…

  • CVE-2012-4355Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.04cvss —epss 0.08

    TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorrect function-pointer…

  • CVE-2012-4354Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.04cvss —epss 0.08

    TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer…

  • CVE-2012-4353Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.05cvss —epss 0.25

    Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the…