VYPR

CVEs

346,583 total · page 5931 of 6,932

AllCriticalHighKEV
  • CVE-2012-0202May 4, 2012
    IBM
    Cognos Tm1
    risk 0.07cvss —epss 0.55

    Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data.

  • CVE-2012-1328May 3, 2012
    Cisco Systems, Inc.
    Unified IP Phone Firmware
    risk 0.00cvss —epss 0.00

    Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.

  • CVE-2011-3620May 3, 2012
    Apache
    Qpid
    risk 0.00cvss —epss 0.05

    Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.

  • CVE-2012-1710CriKEVMay 3, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.83cvss 9.8epss 0.12

    Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.

  • CVE-2012-1709May 3, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1710.

  • CVE-2012-1708May 3, 2012
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Application Express component in Oracle Database Server 4.0 and 4.1 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2012-1707May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base, a different…

  • CVE-2012-1706May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Logging.

  • CVE-2012-1704May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base, a different…

  • CVE-2012-1703May 3, 2012
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer, a different vulnerability than CVE-2012-1690.

  • CVE-2012-1698May 3, 2012
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Oracle Sun Solaris 11 allows remote authenticated users to affect confidentiality, related to Kernel/GLD.

  • CVE-2012-1697May 3, 2012
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.21 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

  • CVE-2012-1696May 3, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

  • CVE-2012-1695MedMay 3, 2012
    Sun Corporation
    Jdk
    risk 0.45cvss 6.8epss 0.04

    Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2012-1694May 3, 2012
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality and integrity, related to libsasl.

  • CVE-2012-1693May 3, 2012
    Oracle Corporation
    Xcp
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 allows remote attackers to affect availability, related to XSCF Control Package (XCP).

  • CVE-2012-1692May 3, 2012
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability, related to SCTP.

  • CVE-2012-1691May 3, 2012
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel/Privileges.

  • CVE-2012-1690May 3, 2012
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer, a different vulnerability than CVE-2012-1703.

  • CVE-2012-1688May 3, 2012
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability, related to Server DML.

  • CVE-2012-1684May 3, 2012
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Password Policy.

  • CVE-2012-1683May 3, 2012
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to gssd.

  • CVE-2012-1681May 3, 2012
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect availability via unknown vectors related to Kernel/sockfs.

  • CVE-2012-1679May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect integrity via unknown vectors related to Core-Base.

  • CVE-2012-1676May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Virtual Banking.

  • CVE-2012-1674May 3, 2012
    Oracle Corporation
    Industry Applications
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-0582.

  • CVE-2012-0583May 3, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.60 and earlier, and 5.5.19 and earlier, allows remote authenticated users to affect availability, related to MyISAM.

  • CVE-2012-0582May 3, 2012
    Oracle Corporation
    Industry Applications
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-1674.

  • CVE-2012-0581May 3, 2012
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity, related to SCRM - Company Profiles.

  • CVE-2012-0580May 3, 2012
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Supplier Portal.

  • CVE-2012-0579May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core.

  • CVE-2012-0577May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect availability via unknown vectors related to Core.

  • CVE-2012-0576May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 6.0.1 and 6.2.0 allows remote authenticated users to affect integrity via unknown vectors related to Core-Help.

  • CVE-2012-0575May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Core.

  • CVE-2012-0573May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core.

  • CVE-2012-0571May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect integrity via unknown vectors related to Core, a different vulnerability…

  • CVE-2012-0567May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core, a…

  • CVE-2012-0566May 3, 2012
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Supplier Portal.

  • CVE-2012-0565May 3, 2012
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Install.

  • CVE-2012-0564May 3, 2012
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50 and 8.51 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Query.

  • CVE-2012-0562May 3, 2012
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway, a different vulnerability than CVE-2012-1748.

  • CVE-2012-1936May 3, 2012
    WordPress
    WordPress
    risk 0.00cvss —epss 0.03

    The wp_create_nonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of a user session, which might make it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks on specific actions and…

  • CVE-2012-1327May 3, 2012
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    dot11t/t_if_dot11_hal_ath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (assertion failure and reboot) via 802.11 wireless traffic, as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S, aka Bug ID CSCtt94391.

  • CVE-2012-1324May 3, 2012
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a denial of service (device crash) by sending IPv6 packets, aka Bug ID CSCtk53534.

  • CVE-2012-0378May 3, 2012
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow remote attackers to cause a denial of service (connection limit exceeded) by triggering a large number of stale connections that result in an incorrect value for an MPF connection…

  • CVE-2012-0376May 3, 2012
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.01

    The voice-sipstack component in Cisco Unified Communications Manager (CUCM) 8.5 allows remote attackers to cause a denial of service (core dump) via vectors involving SIP messages that arrive after an upgrade, aka Bug ID CSCtj87367.

  • CVE-2012-0561May 3, 2012
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity, related to PIA Core Technology.

  • CVE-2012-0560May 3, 2012
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote attackers to affect integrity via unknown vectors related to Portal.

  • CVE-2012-0559May 3, 2012
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Billing.

  • CVE-2012-0558May 3, 2012
    Oracle Corporation
    Primavera Products Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 6.2.1, 8.0, 8.1, and 8.2 allows remote attackers to affect integrity via unknown vectors related to Web application.