VYPR

CVEs

346,483 total · page 5956 of 6,930

AllCriticalHighKEV
  • CVE-2012-0039HigJan 14, 2012
    GNOME Foundation
    Glib
    risk 0.49cvss 7.5epss 0.02

    GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application…

  • CVE-2012-0693Jan 14, 2012
    Whmcs
    Whmcompletesolution
    risk 0.00cvss —epss 0.01

    submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticket data, a different vulnerability than CVE-2011-5061. NOTE: the vendor disputes this issue, noting that some of the details overlap…

  • CVE-2011-5061Jan 14, 2012
    Whmcs
    Whmcompletesolution
    risk 0.00cvss —epss 0.02

    functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field.

  • CVE-2011-5060Jan 13, 2012
    Perl Foundation
    PAR
    risk 0.00cvss —epss 0.00

    The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed…

  • CVE-2012-0030Jan 13, 2012
    OpenStack
    Nova
    risk 0.00cvss —epss 0.02

    Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.

  • CVE-2011-4114Jan 13, 2012
    PAR::Packer
    PAR::Packer
    risk 0.00cvss —epss 0.00

    The par_mktmpdir function in the PAR::Packer module before 1.012 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR…

  • CVE-2011-4057Jan 13, 2012
    Wibu
    Codemeter Runtime
    risk 0.00cvss —epss 0.05

    Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attackers to cause a denial of service (CodeMeter.exe crash) via certain crafted packets to TCP port 22350.

  • CVE-2011-3597Jan 13, 2012
    Libwww Perl
    Digest
    risk 0.04cvss —epss 0.14

    Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.

  • CVE-2011-2939Jan 13, 2012
    Perl Foundation
    Perl
    risk 0.00cvss —epss 0.03

    Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based…

  • CVE-2011-2776Jan 13, 2012
    Robert Luberda
    Super
    risk 0.00cvss —epss 0.00

    Buffer overflow in the Error function in super.c in Super 3.30.0 might allow local users to execute arbitrary code via vectors related to syslog logging. NOTE: some of these details are obtained from third party information.

  • CVE-2012-0697Jan 13, 2012
    Microfocus
    StorageWorks P2000 G3 MSA array systems
    risk 0.01cvss —epss 0.08

    HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via unspecified vectors, a different vulnerability than CVE-2011-4788.

  • CVE-2012-0696Jan 13, 2012
    IBM
    Cognos Tm1
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified requests to (1) aspnet_client or (2) evserver/createcontrol.js.

  • CVE-2012-0310Jan 13, 2012
    Cogentdatahub
    Cascade Datahub
    risk 0.00cvss —epss 0.02

    CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

  • CVE-2012-0309Jan 13, 2012
    Cogentdatahub
    Cascade Datahub
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-4925Jan 13, 2012
    Clusterresources
    Torque Resource Manager
    risk 0.00cvss —epss 0.01

    Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors.

  • CVE-2011-4789Jan 13, 2012
    Microfocus
    Diagnostics
    risk 0.08cvss —epss 0.65

    Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but…

  • CVE-2011-4788Jan 13, 2012
    Microfocus
    StorageWorks P2000 G3 MSA
    risk 0.00cvss —epss 0.05

    Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI.

  • CVE-2011-4787Jan 12, 2012
    Microfocus
    Easy Printer Care Software
    risk 0.00cvss —epss 0.04

    A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and…

  • CVE-2011-4786Jan 12, 2012
    Microfocus
    Easy Printer Care Software
    risk 0.06cvss —epss 0.41

    A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and…

  • CVE-2012-0695Jan 12, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.

  • CVE-2011-5059Jan 10, 2012
    Finaldraft
    Finaldraft
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in Final Draft 8 before 8.02 allows remote attackers to execute arbitrary code via a crafted SmartType element, a different vulnerability than CVE-2011-5002. NOTE: the provenance of this information is unknown; the details are obtained solely from…

  • CVE-2011-5058Jan 10, 2012
    3ssoftware
    Codesys
    risk 0.00cvss —epss 0.02

    The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ (backslash) characters in an HTTP GET request.

  • CVE-2012-0013Jan 10, 2012
    Microsoft
    Windows
    risk 0.09cvss —epss 0.74

    Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a…

  • CVE-2012-0009Jan 10, 2012
    Microsoft
    Windows Xp
    risk 0.02cvss —epss 0.21

    Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that…

  • CVE-2012-0007Jan 10, 2012
    Microsoft
    AntiXSS Library
    risk 0.05cvss —epss 0.19

    The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka…

  • CVE-2012-0005Jan 10, 2012
    Microsoft
    Windows
    risk 0.00cvss —epss 0.02

    The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of…

  • CVE-2012-0004Jan 10, 2012
    Microsoft
    Windows
    risk 0.02cvss —epss 0.23

    Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file,…

  • CVE-2012-0003HigJan 10, 2012
    Microsoft
    Windows
    risk 0.61cvss 8.1epss 0.69

    Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote…

  • CVE-2012-0001Jan 10, 2012
    Microsoft
    Windows
    risk 0.01cvss —epss 0.10

    The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH…

  • CVE-2011-4373CriJan 10, 2012
    Adobe Inc.
    Acrobat
    risk 0.66cvss 9.8epss 0.31

    Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4372.

  • CVE-2011-4372CriJan 10, 2012
    Adobe Inc.
    Acrobat
    risk 0.65cvss 9.8epss 0.13

    Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4373.

  • CVE-2011-4371Jan 10, 2012
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.06

    Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

  • CVE-2011-4370Jan 10, 2012
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.06

    Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4372 and CVE-2011-4373.

  • CVE-2011-4785Jan 10, 2012
    Microfocus
    LaserJet 2430
    risk 0.00cvss —epss 0.04

    Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 printer with firmware 07.006.0, and LaserJet 2430 printer with firmware 08.113.0_I35128 allows remote attackers to read arbitrary…

  • CVE-2011-4532Jan 8, 2012
    Siemens Foundation
    Automation License Manager
    risk 0.03cvss —epss 0.04

    Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method.

  • CVE-2011-4531Jan 8, 2012
    Siemens Foundation
    Automation License Manager
    risk 0.04cvss —epss 0.09

    Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_target_ocx_param or (2) send_target_ocx_param command.

  • CVE-2011-4530Jan 8, 2012
    Siemens Foundation
    Automation License Manager
    risk 0.03cvss —epss 0.04

    Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon crash) via long fields, as demonstrated by fields to the (1)…

  • CVE-2011-4529Jan 8, 2012
    Siemens Foundation
    Automation License Manager
    risk 0.04cvss —epss 0.07

    Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as demonstrated by the (1) check_licensekey or (2) read_licensekey command.

  • CVE-2011-5057Jan 8, 2012
    Apache
    Struts
    risk 0.05cvss —epss 0.29

    Apache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict access to collections such as the session and request collections, which might allow remote attackers to modify run-time data values via a crafted parameter to an application that…

  • CVE-2012-0394Jan 8, 2012
    Apache
    Struts
    risk 0.02cvss —epss 0.74

    The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor characterizes this behavior as not "a security vulnerability itself.

  • CVE-2012-0393Jan 8, 2012
    Apache
    Struts
    risk 0.00cvss —epss 0.37

    The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object.

  • CVE-2012-0392Jan 8, 2012
    Apache
    Struts
    risk 0.04cvss —epss 0.98

    The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method.

  • CVE-2012-0391CriKEVJan 8, 2012
    Apache
    Struts
    risk 0.78cvss 9.8epss 0.75

    The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.

  • CVE-2011-4361Jan 8, 2012
    MediaWiki
    Mediawiki
    risk 0.00cvss —epss 0.03

    MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by (1) leveraging the SpecialUpload::ajaxGetExistsWarning function, or by (2) leveraging an extension, as demonstrated…

  • CVE-2011-4360Jan 8, 2012
    MediaWiki
    Mediawiki
    risk 0.00cvss —epss 0.02

    MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.

  • CVE-2012-0024Jan 8, 2012
    Maradns
    Maradns
    risk 0.00cvss —epss 0.03

    MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the…

  • CVE-2011-5056Jan 8, 2012
    Maradns
    Maradns
    risk 0.00cvss —epss 0.00

    The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service (CPU consumption) via crafted records in zone files, a…

  • CVE-2011-5055Jan 8, 2012
    Maradns
    Maradns
    risk 0.00cvss —epss 0.02

    MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired…

  • CVE-2011-4870Jan 8, 2012
    Invensys
    Wonderware Inbatch
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long…

  • CVE-2011-4056Jan 8, 2012
    Siemens Foundation
    Tecnomatix Factorylink
    risk 0.00cvss —epss 0.01

    An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to create or overwrite arbitrary files via the save method.