VYPR

CVEs

347,079 total · page 5910 of 6,942

AllCriticalHighKEV
  • CVE-2012-4007Aug 17, 2012
    Mixi
    Mixi
    risk 0.00cvss —epss 0.01

    The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a crafted application that leverages the storage of these comments on an SD card.

  • CVE-2012-4006Aug 17, 2012
    Gree
    Gree
    risk 0.00cvss —epss 0.01

    The GREE application before 1.4.0, GREE Tanken Dorirando application before 1.0.7, GREE Tsurisuta application before 1.5.0, GREE Monpura application before 1.1.1, GREE Kaizokuoukoku Columbus application before 1.3.5, GREE haconiwa application before 1.1.0, GREE Seisen Cerberus…

  • CVE-2012-3296Aug 17, 2012
    IBM
    Power Hardware Management Console
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Help link in the login panel in IBM Power Hardware Management Console (HMC) 7R7.1.0 before SP4, 7R7.2.0 before SP2, and 7R7.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-2205Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a workspace query.

  • CVE-2012-2169Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field.

  • CVE-2012-2168Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.00cvss —epss 0.01

    IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter.

  • CVE-2012-2165Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.00cvss —epss 0.01

    IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote authenticated users to read password hashes via a user query.

  • CVE-2012-2164Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.00cvss —epss 0.01

    The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access restrictions, and use the Site Administration menu to modify system settings, via a parameter-tampering attack.

  • CVE-2012-0744Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.04cvss —epss 0.08

    IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information via a request to a (1) snoop, (2) hello, (3) ivt/, (4) hitcount, (5) HitCount.jsp, (6) HelloHTMLError.jsp, (7) HelloHTML.jsp, (8)…

  • CVE-2012-3308Aug 17, 2012
    IBM
    Sametime
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat.

  • CVE-2012-3294Aug 17, 2012
    IBM
    Websphere Mq
    risk 0.03cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier, and WebSphere MQ - Managed File Transfer 7.5, allow remote attackers to hijack the authentication of arbitrary users for requests…

  • CVE-2012-2206Aug 17, 2012
    IBM
    Websphere Mq
    risk 0.03cvss —epss 0.02

    The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.

  • CVE-2012-3381Aug 17, 2012
    SBLIM
    SFCB
    risk 0.00cvss —epss 0.00

    sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

  • CVE-2012-2750Aug 17, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has not commented on this possibility.

  • CVE-2012-2749Aug 17, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.

  • CVE-2012-2102Aug 17, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.

  • CVE-2012-1908Aug 17, 2012
    Splunk
    Splunk
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2012-1597Aug 17, 2012
    Ez
    Ezjscore
    risk 0.00cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-1585Aug 17, 2012
    OpenStack
    Nova
    risk 0.00cvss —epss 0.02

    OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.

  • CVE-2009-5026Aug 17, 2012
    MySQL
    MySQL
    risk 0.04cvss —epss 0.08

    The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments.

  • CVE-2012-4298Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.06

    Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.

  • CVE-2012-4297Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet.

  • CVE-2012-4296Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet.

  • CVE-2012-4295Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    Array index error in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service (application crash) via a crafted speed (aka rate) value.

  • CVE-2012-4294Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.03

    Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed (aka rate) value.

  • CVE-2012-4293Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly handle certain integer fields, which allows remote attackers to cause a denial of service (application exit) via a…

  • CVE-2012-4292Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote…

  • CVE-2012-4291Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.

  • CVE-2012-4290Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.

  • CVE-2012-4289Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries.

  • CVE-2012-4288Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large…

  • CVE-2012-4287Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.

  • CVE-2012-4286Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file.

  • CVE-2012-4285Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a…

  • CVE-2012-3251Aug 16, 2012
    Microfocus
    Service Manager Web Tier
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 7.11, 9.21, and 9.30, and HP Service Center Web Tier 6.28, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-3250Aug 16, 2012
    Microfocus
    Service Center Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP Service Manager Server 7.11, 9.21, and 9.30, and HP Service Center Server 6.28, allows remote attackers to cause a denial of service via unknown vectors.

  • CVE-2012-3249Aug 16, 2012
    Microfocus
    Fortify Software Security Center
    risk 0.00cvss —epss 0.01

    HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.

  • CVE-2012-3248Aug 16, 2012
    Microfocus
    Fortify Software Security Center
    risk 0.00cvss —epss 0.02

    HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote attackers to obtain sensitive information via unspecified vectors.

  • CVE-2012-3247Aug 16, 2012
    Microfocus
    Integrity Server BL860c i2
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability on the HP Integrity Server BL860c i2, BL870c i2, and BL890c i2 with firmware before 26.31 and the HP Integrity Server rx2800 i2 with firmware before 26.30 allows local users to cause a denial of service via unknown vectors.

  • CVE-2012-3025Aug 16, 2012
    Tridium
    Niagara Ax
    risk 0.00cvss —epss 0.02

    The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.

  • CVE-2012-3024Aug 16, 2012
    Tridium
    Niagara Ax
    risk 0.00cvss —epss 0.02

    Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.

  • CVE-2012-3009Aug 16, 2012
    Siemens Foundation
    Comos
    risk 0.00cvss —epss 0.02

    Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls.

  • CVE-2012-2283Aug 16, 2012
    Iomega
    Home Media Network Hard Drive
    risk 0.00cvss —epss 0.01

    The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmware before 3.2.3.15290, iConnect with EMC Lifeline firmware before 2.5.26.18966, and StorCenter with EMC Lifeline firmware before…

  • CVE-2012-4344Aug 15, 2012
    Progress (organisation)
    Whatsup Gold
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP system name of the attacking host.

  • CVE-2012-2601Aug 15, 2012
    Progress (organisation)
    Whatsup Gold
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter.

  • CVE-2012-4343Aug 15, 2012
    Menalto
    Gallery
    risk 0.00cvss —epss 0.01

    Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown vectors.

  • CVE-2012-4342Aug 15, 2012
    Menalto
    Gallery
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-4341Aug 15, 2012
    SAP
    Netweaver Abap
    risk 0.01cvss —epss 0.09

    Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value, (2) crafted string size field, or (3) long Parameter Name string in a package…

  • CVE-2012-4340Aug 15, 2012
    Sybase
    Easerver
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-3434Aug 15, 2012
    WordPress
    Count Per Day
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) datemin, or (3) datemax parameter.