VYPR

CVEs

346,483 total · page 5953 of 6,930

AllCriticalHighKEV
  • CVE-2011-4699Jan 25, 2012
    Ubermedia
    Twidroyd Legacy
    risk 0.00cvss —epss 0.01

    The Ubermedia Twidroyd Legacy (com.twidroydlegacy) application 4.3.11 for Android does not properly protect data, which allows remote attackers to read or modify Twitter information via a crafted application.

  • CVE-2011-4698Jan 25, 2012
    Androidapptools
    Easy Filter
    risk 0.00cvss —epss 0.01

    The AndroidAppTools Easy Filter (com.phoneblocker.android) application 1.1 and 1.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and call records via a crafted application.

  • CVE-2011-4697Jan 25, 2012
    Xiaomi
    Mitalk Messenger
    risk 0.00cvss —epss 0.01

    The Xiaomi MiTalk Messenger (com.xiaomi.channel) application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging information via a crafted application.

  • CVE-2012-0919Jan 24, 2012
    Hitachi
    It Operations Director
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly other versions before 03-00-06, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-0918Jan 24, 2012
    Hitachi
    Cobol2002 Net Developer
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Hitachi COBOL2002 Net Developer, Net Server Suite, and Net Client Suite 01-00, 01-01 through 01-01-/D, 01-02 through 01-02-/F, 01-03 through 01-03-/F, 02-00 through 02-00-/D, 02-01 through 02-01-/C, and possibly other versions before 02-01-/D allows…

  • CVE-2012-0917Jan 24, 2012
    Hitachi
    It Operations Analyzer
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through 02-51-01, and 02-53 through 02-53-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-0916Jan 24, 2012
    Renren
    Talk
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via a crafted image in a chat message, as demonstrated using a PNG file.

  • CVE-2012-0915Jan 24, 2012
    Renren
    Talk
    risk 0.00cvss —epss 0.03

    Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leading to a heap-based buffer overflow, as demonstrated using a BMP image.

  • CVE-2012-0914Jan 24, 2012
    Drupal
    Panels
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in display_renderers/panels_renderer_editor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web…

  • CVE-2012-0913Jan 24, 2012
    Icloudcenter
    Ictimeattendance
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. NOTE: Some of these details are obtained from third party information.

  • CVE-2012-0909Jan 24, 2012
    Horde (software)
    Groupware Webmail Edition
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to email verification. NOTE: Some of these details are obtained from third…

  • CVE-2012-0908Jan 24, 2012
    Simplesamlphp
    Simplesamlphp
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the link_href parameter.

  • CVE-2012-0791Jan 24, 2012
    Horde (software)
    Imp
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page;…

  • CVE-2012-0790Jan 24, 2012
    SmokePing
    SmokePing
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in smokeping_cgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers to inject arbitrary web script or HTML via the displaymode parameter.

  • CVE-2012-0389Jan 24, 2012
    MailEnable
    Mailenable
    risk 0.04cvss —epss 0.08

    Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter.

  • CVE-2012-0069Jan 24, 2012
    Batavi
    Batavi
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.

  • CVE-2012-0040Jan 24, 2012
    Simplesamlphp
    Simplesamlphp
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter.

  • CVE-2012-0912Jan 24, 2012
    Stone Ware
    Webnetwork
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2012-0286Jan 24, 2012
    Stone Ware
    Webnetwork
    risk 0.03cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts.

  • CVE-2012-0285Jan 24, 2012
    Stone Ware
    Webnetwork
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-0313Jan 24, 2012
    Glucose
    Glucose 2
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in glucose 2 before stage 6.2 allows remote attackers to inject arbitrary web script or HTML via an RSS feed.

  • CVE-2011-3928Jan 24, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.

  • CVE-2011-3927Jan 24, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Skia, as used in Google Chrome before 16.0.912.77, does not perform all required initialization of values, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-3926Jan 24, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Heap-based buffer overflow in the tree builder in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-3925Jan 24, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors related to a navigation entry and an interstitial…

  • CVE-2011-3924Jan 24, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM selections.

  • CVE-2012-0192Jan 23, 2012
    IBM
    Lotus Symphony
    risk 0.00cvss —epss 0.05

    Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer…

  • CVE-2012-0907Jan 20, 2012
    Neoaxis
    Neoaxis Web Player
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier allows user-assisted remote attackers to write arbitrary files via a .. (dot dot) in a filename in the neoaxis_web_application_win32.zip ZIP archive.

  • CVE-2012-0906Jan 20, 2012
    Mystarmedia
    Moviebase Addon
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php.

  • CVE-2012-0905Jan 20, 2012
    Dzcp
    Gamebase addon
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php.

  • CVE-2012-0904Jan 20, 2012
    VideoLAN
    VLC media player
    risk 0.03cvss —epss 0.05

    VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.

  • CVE-2012-0903Jan 20, 2012
    Zimbra
    Desktop
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Desktop 7.1.2 b10978 allow remote attackers to inject arbitrary web script or HTML via the (1) Username or (2) MailBox Name.

  • CVE-2012-0902Jan 20, 2012
    Airties
    Air 4450
    risk 0.03cvss —epss 0.03

    AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader.

  • CVE-2012-0901Jan 20, 2012
    WordPress
    YouSayToo
    risk 0.04cvss —epss 0.08

    Cross-site scripting (XSS) vulnerability in yousaytoo.php in YouSayToo auto-publishing plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter.

  • CVE-2012-0900Jan 20, 2012
    Beehive Forum
    Beehive Forum
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) forum/register.php or (2) forum/logon.php.

  • CVE-2012-0899Jan 20, 2012
    Annuairephp
    Annuaire PHP
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in referencement/sites_inscription.php in Annuaire PHP allows remote attackers to inject arbitrary web script or HTML via the url parameter and possibly the nom parameter.

  • CVE-2012-0898Jan 20, 2012
    WordPress
    myEASYbackup
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in meb_download.php in the myEASYbackup plugin 1.0.8.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dwn_file parameter.

  • CVE-2012-0897Jan 20, 2012
    IrfanView
    Irfanview
    risk 0.07cvss —epss 0.53

    Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.

  • CVE-2012-0896Jan 20, 2012
    WordPress
    Count Per Day
    risk 0.00cvss —epss 0.25

    Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter.

  • CVE-2012-0895Jan 20, 2012
    WordPress
    Count Per Day
    risk 0.00cvss —epss 0.06

    Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter.

  • CVE-2012-0193Jan 20, 2012
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a…

  • CVE-2012-0050Jan 19, 2012
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.14

    OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.

  • CVE-2011-4374Jan 19, 2012
    Adobe Inc.
    Reader
    risk 0.00cvss —epss 0.04

    Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2011-4135Jan 19, 2012
    Revenera
    Flexnet Publisher
    risk 0.06cvss —epss 0.32

    Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap…

  • CVE-2011-4134Jan 19, 2012
    Revenera
    Flexnet Publisher
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allows remote attackers to execute arbitrary code via a crafted 0x2f packet.

  • CVE-2011-1389Jan 19, 2012
    IBM
    Rational License Key Server
    risk 0.01cvss —epss 0.07

    Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server (RLKS) 8.0 through 8.1.2 allow remote attackers to execute arbitrary code…

  • CVE-2007-6744Jan 19, 2012
    Revenera
    InstallShield
    risk 0.00cvss —epss 0.00

    Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an…

  • CVE-2012-0329Jan 19, 2012
    Cisco Systems, Inc.
    Digital Media Manager
    risk 0.00cvss —epss 0.03

    Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878.

  • CVE-2012-0268Jan 19, 2012
    Yahoo
    Messenger
    risk 0.00cvss —epss 0.02

    Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.

  • CVE-2012-0035Jan 19, 2012
    GNU
    Emacs
    risk 0.00cvss —epss 0.03

    Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.