VYPR

CVEs

346,473 total · page 5957 of 6,930

AllCriticalHighKEV
  • CVE-2011-3919Jan 7, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-5054Jan 6, 2012
    KDE
    Kcheckpass
    risk 0.00cvss —epss 0.00

    kcheckpass passes a user-supplied argument to the pam_start function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability…

  • CVE-2011-5053Jan 6, 2012
    Wi Fi Alliance
    Wi-Fi Protected Setup (WPS)
    risk 0.03cvss —epss 0.03

    The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi…

  • CVE-2012-0287Jan 6, 2012
    WordPress
    WordPress
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the…

  • CVE-2011-4616Jan 6, 2012
    Perl Foundation
    HTML-Template-Pro
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.

  • CVE-2012-0390Jan 6, 2012
    GNU
    Gnutls
    risk 0.00cvss —epss 0.01

    The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel…

  • CVE-2012-0027Jan 6, 2012
    OpenSSL Project
    OpenSSL
    risk 0.00cvss —epss 0.05

    The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.

  • CVE-2011-4619Jan 6, 2012
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.17

    The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.

  • CVE-2011-4577Jan 6, 2012
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.09

    OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System…

  • CVE-2011-4576Jan 6, 2012
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.15

    The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.

  • CVE-2011-4109Jan 6, 2012
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.18

    Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.

  • CVE-2011-4108Jan 6, 2012
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.16

    The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.

  • CVE-2011-4858Jan 5, 2012
    Apache
    Tomcat
    risk 0.09cvss —epss 0.80

    Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many…

  • CVE-2011-5019Jan 5, 2012
    Textpattern
    Textpattern
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the ddb parameter.

  • CVE-2011-4905Jan 5, 2012
    Apache
    Activemq
    risk 0.00cvss —epss 0.09

    Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.

  • CVE-2011-5052Jan 4, 2012
    Cocsoft
    Stream Down
    risk 0.05cvss —epss 0.30

    Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request.

  • CVE-2011-5051Jan 4, 2012
    WordPress
    Wp Symposium
    risk 0.00cvss —epss 0.04

    Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_avatar.php or (2)…

  • CVE-2011-5050Jan 4, 2012
    Elitecore
    Cyberoam UTM
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party…

  • CVE-2011-5049Jan 4, 2012
    MySQL
    MySQL
    risk 0.03cvss —epss 0.05

    MySQL 5.5.8, when running on Windows, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted packet to TCP port 3306.

  • CVE-2011-4921Jan 4, 2012
    E107
    E107
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter.

  • CVE-2011-4920Jan 4, 2012
    E107
    E107
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to (1) e107_images/thumb.php or (2) rate.php, (3) resend_name parameter to e107_admin/users.php, and (4)…

  • CVE-2007-6751Jan 4, 2012
    H Fj
    Mailform Plugin
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-3337Jan 4, 2012
    Eeye
    Retina Network Security Scanner
    risk 0.00cvss —epss 0.00

    eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/.

  • CVE-2011-1386Jan 4, 2012
    IBM
    Tivoli Federated Identity Manager
    risk 0.00cvss —epss 0.01

    IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0, 1.1, and 2.0, which allows remote attackers to bypass intended authentication or…

  • CVE-2011-1384Jan 4, 2012
    IBM
    invscout
    risk 0.00cvss —epss 0.00

    The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an…

  • CVE-2011-5048Jan 3, 2012
    IBM
    Web Experience Factory
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Web Experience Factory (aka WEF, formerly WebSphere Portlet Factory) 7.0 and 7.0.1 allow remote attackers to inject arbitrary web script or HTML via a (1) text INPUT element or (2) TEXTAREA element, related to an…

  • CVE-2011-5047Jan 3, 2012
    Pfsense
    Pfsense
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter.

  • CVE-2011-4197Jan 3, 2012
    Pfsense
    Pfsense
    risk 0.00cvss —epss 0.02

    etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key.

  • CVE-2011-4778Jan 3, 2012
    Splunk
    Splunk
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPL-44614.

  • CVE-2011-4644Jan 3, 2012
    Splunk
    Splunk
    risk 0.04cvss —epss 0.08

    Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to (1) read arbitrary files via a management-console session that…

  • CVE-2011-4643Jan 3, 2012
    Splunk
    Splunk
    risk 0.04cvss —epss 0.08

    Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243.

  • CVE-2011-4642Jan 3, 2012
    Splunk
    Splunk
    risk 0.05cvss —epss 0.29

    mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application, as…

  • CVE-2011-3669Jan 2, 2012
    Mozilla Corporation
    Bugzilla
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijack the authentication of arbitrary users for requests that upload attachments.

  • CVE-2011-3668Jan 2, 2012
    Mozilla Corporation
    Bugzilla
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in post_bug.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijack the authentication of arbitrary users for requests that create bug reports.

  • CVE-2011-3667Jan 2, 2012
    Mozilla Corporation
    Bugzilla
    risk 0.00cvss —epss 0.01

    The User.offer_account_by_email WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when createemailregexp is not empty, does not properly handle user_can_create_account settings, which…

  • CVE-2011-3657Jan 2, 2012
    Mozilla Corporation
    Bugzilla
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when debug mode is used, allow remote attackers to inject arbitrary web script or HTML via vectors…

  • CVE-2011-4620Dec 31, 2011
    TORCS
    TORCS
    risk 0.04cvss —epss 0.13

    Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS.…

  • CVE-2011-4617Dec 31, 2011
    Python (programming language)
    Virtualenv
    risk 0.00cvss —epss 0.00

    virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.

  • CVE-2011-1710Dec 31, 2011
    Novell
    Xtier Framework
    risk 0.00cvss —epss 0.04

    Multiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables.

  • CVE-2011-5046Dec 30, 2011
    Microsoft
    Windows
    risk 0.07cvss —epss 0.45

    The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which…

  • CVE-2011-5045Dec 30, 2011
    Jjwdesign
    Phpbookingcalendar
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in details_view.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the page_info_message parameter.

  • CVE-2011-5044Dec 30, 2011
    Sopcast
    Sopcast
    risk 0.03cvss —epss 0.01

    SopCast 3.4.7.45585 uses weak permissions (Everyone:Full Control) for Diagnose.exe, which allows local users to execute arbitrary code by replacing Diagnose.exe with a Trojan horse program.

  • CVE-2011-5043Dec 30, 2011
    Tomatosoft
    Free Mp3 Player
    risk 0.03cvss —epss 0.02

    TomatoSoft Free Mp3 Player 1.0 allows remote attackers to cause a denial of service (application crash) via a long string in an MP3 file, possibly a buffer overflow.

  • CVE-2011-5042Dec 30, 2011
    Sasha
    SASHA
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in inc/lib/lib.base.php in SASHA 0.2.0 allows remote attackers to inject arbitrary web script or HTML via the instructors parameter. NOTE: the original disclosure also mentions the section_title parameter, but this was disputed by the…

  • CVE-2011-5041Dec 30, 2011
    Pulse Pro
    Pulse Pro CMS
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter in a blocks action and (2) post_id parameter in an edit-post action to index.php.

  • CVE-2011-5040Dec 30, 2011
    Infoproject
    Biznis Heroj
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to (1) nalozi_naslov.php and (2) widget.dokumenti_lista.php.

  • CVE-2011-5039Dec 30, 2011
    Infoproject
    Biznis Heroj
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to login.php, (3) the filter parameter to widget.dokumenti_lista.php, and (4) the fin_nalog_id parameter…

  • CVE-2011-5038Dec 30, 2011
    Hitcode
    Hitappoint
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2011-5037Dec 30, 2011
    Google
    V8
    risk 0.00cvss —epss 0.02

    Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, as demonstrated by attacks against Node.js.

  • CVE-2011-5036Dec 30, 2011
    Rack
    Rack
    risk 0.00cvss —epss 0.04

    Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted…