VYPR

CVEs

346,483 total · page 5955 of 6,930

AllCriticalHighKEV
  • CVE-2012-0082Jan 18, 2012
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity and availability via unknown vectors.

  • CVE-2012-0081Jan 18, 2012
    Oracle Corporation
    Glassfish Server
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.1.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Administration.

  • CVE-2012-0080Jan 18, 2012
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Management.

  • CVE-2012-0079Jan 18, 2012
    Oracle Corporation
    Opensso
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Oracle OpenSSO 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Administration.

  • CVE-2012-0078Jan 18, 2012
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services (Menu, LOV).

  • CVE-2012-0077Jan 18, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote authenticated users to affect integrity, related to WLS-Console.

  • CVE-2012-0076Jan 18, 2012
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance.

  • CVE-2012-0075Jan 18, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknown vectors.

  • CVE-2012-0074Jan 18, 2012
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect integrity via unknown vectors related to Sales.

  • CVE-2012-0073Jan 18, 2012
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Forms component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2012-0072Jan 18, 2012
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Listener component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote attackers to affect availability via unknown vectors.

  • CVE-2011-3574Jan 18, 2012
    Oracle Corporation
    Communications Unified
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality and integrity via unknown vectors related to Calendar Server.

  • CVE-2011-3573Jan 18, 2012
    Oracle Corporation
    Communications Unified
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Oracle Communications Unified 7.0 allows remote authenticated users to affect availability via unknown vectors related to Calendar Server.

  • CVE-2011-3571Jan 18, 2012
    Oracle Corporation
    Virtualization
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a…

  • CVE-2011-3570Jan 18, 2012
    Oracle Corporation
    Communications Unified
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality via unknown vectors related to Calendar Server.

  • CVE-2011-3569Jan 18, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Web Services Security.

  • CVE-2011-3568Jan 18, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security.

  • CVE-2011-3566Jan 18, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote attackers to affect availability via unknown vectors related to Web Container.

  • CVE-2011-3565Jan 18, 2012
    Oracle Corporation
    Communications Unified
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Calendar Server.

  • CVE-2011-3564Jan 18, 2012
    Oracle Corporation
    Glassfish Server
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle GlassFish Enterprise Server 2.1.1 allows local users to affect confidentiality via unknown vectors related to Administration.

  • CVE-2011-3531Jan 18, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect availability via unknown vectors related to Web Services Security.

  • CVE-2011-3524Jan 18, 2012
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and…

  • CVE-2011-3514Jan 18, 2012
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC (JDENET).

  • CVE-2011-3509Jan 18, 2012
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and…

  • CVE-2011-2326Jan 18, 2012
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-3509, and…

  • CVE-2011-2325Jan 18, 2012
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2326, CVE-2011-3509, and…

  • CVE-2011-2324Jan 18, 2012
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC (JDENET).

  • CVE-2011-2321Jan 18, 2012
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDNET).

  • CVE-2011-2317Jan 18, 2012
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastucture SEC (JDNET).

  • CVE-2011-2271Jan 18, 2012
    Oracle Corporation
    Application Object Library
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors related to Attachments / File Upload.

  • CVE-2011-2262Jan 18, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote attackers to affect availability via unknown vectors.

  • CVE-2012-0781Jan 18, 2012
    PHP
    PHP
    risk 0.04cvss —epss 0.11

    The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability…

  • CVE-2012-0190Jan 18, 2012
    IBM
    Spss Data Collection
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in ExportHTML.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.

  • CVE-2012-0189Jan 18, 2012
    IBM
    Spss Samplepower
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsVIEW6.ocx in IBM SPSS SamplePower 3.0 allow remote attackers to execute arbitrary code via a crafted HTML document.

  • CVE-2012-0188Jan 18, 2012
    IBM
    Spss Data Collection
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.

  • CVE-2012-0031Jan 18, 2012
    Apache
    HTTP Server
    risk 0.03cvss —epss 0.03

    scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an…

  • CVE-2011-4153Jan 18, 2012
    PHP
    PHP
    risk 0.04cvss —epss 0.12

    PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted…

  • CVE-2011-3328Jan 17, 2012
    Libpng
    Libpng
    risk 0.00cvss —epss 0.04

    The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed PNG image containing a cHRM chunk associated with a certain…

  • CVE-2010-5082Jan 17, 2012
    Microsoft
    Windows Server 2008
    risk 0.01cvss —epss 0.18

    Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a…

  • CVE-2012-0267Jan 15, 2012
    Ntrglobal
    Ntr Activex Control
    risk 0.06cvss —epss 0.39

    The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer.

  • CVE-2012-0266Jan 15, 2012
    Ntrglobal
    Ntr Activex Control
    risk 0.06cvss —epss 0.42

    Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3)…

  • CVE-2011-5066Jan 15, 2012
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.00

    The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 does not properly handle a Service Integration Bus (SIB) dump operation involving the First Failure Data Capture (FFDC) introspection code,…

  • CVE-2011-5065Jan 15, 2012
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging.

  • CVE-2011-4868Jan 15, 2012
    Isc
    DHCP
    risk 0.00cvss —epss 0.04

    The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash)…

  • CVE-2011-1377Jan 15, 2012
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors.

  • CVE-2011-1362Jan 15, 2012
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 and 7.0 before 7.0.0.19 allows remote attackers to inject arbitrary web script or HTML via…

  • CVE-2011-5064Jan 14, 2012
    Apache
    Tomcat
    risk 0.01cvss —epss 0.07

    DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass…

  • CVE-2011-5063Jan 14, 2012
    Apache
    Tomcat
    risk 0.00cvss —epss 0.07

    The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a…

  • CVE-2011-5062Jan 14, 2012
    Apache
    Tomcat
    risk 0.00cvss —epss 0.08

    The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a…

  • CVE-2011-1184Jan 14, 2012
    Apache
    Tomcat
    risk 0.00cvss —epss 0.09

    The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access…