VYPR

CVEs

346,574 total · page 5943 of 6,932

AllCriticalHighKEV
  • CVE-2012-0690Mar 13, 2012
    TIBCO Software
    Spotfire Analytics Server
    risk 0.00cvss —epss 0.02

    TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to…

  • CVE-2012-0689Mar 13, 2012
    TIBCO Software
    Activematrix Service Grid
    risk 0.00cvss —epss 0.01

    The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via…

  • CVE-2012-0688Mar 13, 2012
    TIBCO Software
    Activematrix Service Grid
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote…

  • CVE-2012-0687Mar 13, 2012
    TIBCO Software
    Activematrix Service Grid
    risk 0.00cvss —epss 0.01

    TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5,…

  • CVE-2012-1472Mar 13, 2012
    VMware
    Vcenter Chargeback Manager
    risk 0.00cvss —epss 0.02

    VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified vectors.

  • CVE-2012-0884Mar 13, 2012
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.13

    The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA)…

  • CVE-2012-0195Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2;…

  • CVE-2011-4819Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow remote attackers to inject arbitrary web script or HTML via the uisesionid parameter to (1) maximo.jsp or (2) the default URI under ui/.

  • CVE-2011-4818Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the uisessionid parameter to an unspecified component.

  • CVE-2011-4817Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and…

  • CVE-2011-4816Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli…

  • CVE-2011-1397Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the Labor Reporting page in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service…

  • CVE-2011-1396Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the reportType parameter to an unspecified component.

  • CVE-2011-1395Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in imicon.jsp in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the controlid parameter.

  • CVE-2011-1394Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.03

    IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB)…

  • CVE-2012-0647Mar 12, 2012
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.

  • CVE-2012-0640Mar 12, 2012
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie.

  • CVE-2012-0584Mar 12, 2012
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via unspecified homoglyphs.

  • CVE-2012-1558Mar 12, 2012
    Yassl
    Cyassl
    risk 0.00cvss —epss 0.01

    yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate.

  • CVE-2012-1557Mar 12, 2012
    Parallels
    Parallels Plesk Panel
    risk 0.00cvss —epss 0.06

    SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x before 9.5 MU#11, 10.0.x before MU#13, 10.1.x before MU#22, 10.2.x before MU#16, and 10.3.x before MU#5 allows remote attackers to execute arbitrary SQL commands…

  • CVE-2011-3047Mar 10, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    The GPU process in Google Chrome before 17.0.963.79 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by leveraging an error in the plug-in loading mechanism.

  • CVE-2012-1545Mar 9, 2012
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.20

    Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at…

  • CVE-2012-0325Mar 9, 2012
    Jenkins Project
    Jenkins
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different…

  • CVE-2012-0324Mar 9, 2012
    Jenkins Project
    Jenkins
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different…

  • CVE-2012-0323Mar 9, 2012
    SquirrelMail
    Autocomplete
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Autocomplete plugin before 3.0 for SquirrelMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-0245Mar 9, 2012
    Abb
    Interlink Module
    risk 0.01cvss —epss 0.08

    Multiple stack-based buffer overflows in RobNetScanHost.exe in ABB Robot Communications Runtime before 5.14.02, as used in ABB Interlink Module, IRC5 OPC Server, PC SDK, PickMaster 3 and 5, RobView 5, RobotStudio, WebWare SDK, and WebWare Server, allow remote attackers to…

  • CVE-2011-3046Mar 9, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.05

    The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS (UXSS)" issue.

  • CVE-2012-0648Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…

  • CVE-2012-0646Mar 8, 2012
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.05

    Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file.

  • CVE-2012-0645Mar 8, 2012
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary recipient.

  • CVE-2012-0644Mar 8, 2012
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture.

  • CVE-2012-0643Mar 8, 2012
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.05

    The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program.

  • CVE-2012-0642Mar 8, 2012
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.04

    Integer underflow in Apple iOS before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (device crash) via a crafted catalog file in an HFS disk image.

  • CVE-2012-0641Mar 8, 2012
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    CFNetwork in Apple iOS before 5.1 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL, a different vulnerability than CVE-2011-3447.

  • CVE-2012-0639Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…

  • CVE-2012-0638Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…

  • CVE-2012-0637Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…

  • CVE-2012-0636Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…

  • CVE-2012-0635Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2012-0634Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…

  • CVE-2012-0633Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2012-0632Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2012-0631Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2012-0630Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2012-0629Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2012-0628Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2012-0627Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2012-0626Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2012-0625Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2012-0624Mar 8, 2012
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…