VYPR

CVEs

346,462 total · page 5965 of 6,930

AllCriticalHighKEV
  • CVE-2011-1372Nov 28, 2011
    IBM
    TS3100
    risk 0.00cvss —epss 0.02

    The Web User Interface on the IBM TS3100 and TS3200 tape libraries with firmware before A.60 allows remote attackers to bypass authentication and obtain administrative access via unspecified vectors.

  • CVE-2011-4275Nov 26, 2011
    Combodo
    Itop
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted company name, (2) a crafted database server name, (3) a crafted CSV file, (4) a crafted…

  • CVE-2011-3828Nov 26, 2011
    Sunplus Tech
    Dvr Remote Activex Control
    risk 0.00cvss —epss 0.03

    DVRemoteAx.ax 2.1.0.39 in the DVR Remote ActiveX control allows remote attackers to execute arbitrary code via a crafted DVRobot.dll file in a manifest directory on a web server.

  • CVE-2011-1378Nov 26, 2011
    IBM
    Websphere Mq
    risk 0.00cvss —epss 0.00

    IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.

  • CVE-2011-4262Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file.

  • CVE-2011-4261Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted video dimensions in an MP4 file.

  • CVE-2011-4260Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file.

  • CVE-2011-4259Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in an MPG file.

  • CVE-2011-4258Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file.

  • CVE-2011-4257Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data.

  • CVE-2011-4256Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2011-4255Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec name.

  • CVE-2011-4254Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request.

  • CVE-2011-4253Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2011-4252Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height.

  • CVE-2011-4251Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file.

  • CVE-2011-4250Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2011-4249Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2011-4248Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file.

  • CVE-2011-4247Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream.

  • CVE-2011-4246Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2011-4245Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2011-4244Nov 24, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in the RealVideo renderer in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2011-4548Nov 24, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.44 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.

  • CVE-2011-4312Nov 24, 2011
    Reviewboard
    Reviewboard
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) diff viewer or (2) screenshot component.

  • CVE-2011-4160Nov 24, 2011
    Microfocus
    Operations Agent
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors.

  • CVE-2011-4332Nov 23, 2011
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-4321Nov 23, 2011
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which makes it easier for remote attackers to change the passwords of arbitrary users via unspecified vectors.

  • CVE-2010-5062Nov 23, 2011
    Mhproducts
    Kleinanzeigenmarkt
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter.

  • CVE-2010-5061Nov 23, 2011
    Rsstatic
    Rsstatic
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in index.php in RSStatic allows remote attackers to execute arbitrary SQL commands via the maxarticles parameter.

  • CVE-2010-5060Nov 23, 2011
    NUs
    Newssystem
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-5059Nov 23, 2011
    Cmscout
    Cmscout
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action.

  • CVE-2010-5058Nov 23, 2011
    CMS Ariadna
    CMS Ariadna
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL commands via the res_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2010-5057Nov 23, 2011
    CMS Ariadna
    CMS Ariadna
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL commands via the tipodoc_id parameter.

  • CVE-2010-5056Nov 23, 2011
    Joomla
    GBU Facebook
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the GBU Facebook (com_gbufacebook) component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the face_id parameter in a show_face action to index.php.

  • CVE-2010-5055Nov 23, 2011
    Almnzm
    Almnzm
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-5054Nov 23, 2011
    Jamwiki
    Jamwiki
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

  • CVE-2010-5053Nov 23, 2011
    XOBBIX
    XOBBIX
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the XOBBIX (com_xobbix) component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a prod_desc action to index.php.

  • CVE-2010-5052Nov 23, 2011
    Get Simple
    Getsimplecms
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in admin/components.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the val[] parameter.

  • CVE-2010-5051Nov 23, 2011
    Razorcms
    Razorcms
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in admin/core/admin_func.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php.

  • CVE-2010-5050Nov 23, 2011
    Manageengine
    Admanager Plus
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in jsp/admin/tools/remote_share.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter. NOTE: the provenance of this information is unknown; the details are…

  • CVE-2010-5049Nov 23, 2011
    Zabbix
    Zabbix
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the nav_time parameter.

  • CVE-2010-5048Nov 23, 2011
    Joomlatune
    Com Jcomments
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in admin.jcomments.php in the JoomlaTune JComments (com_jcomments) component 2.1.0.0 for Joomla! allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to index.php.

  • CVE-2010-5047Nov 23, 2011
    V Eva
    Press Release Script
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-5046Nov 23, 2011
    Ecocms
    Ecocms
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in admin.php in ecoCMS allows remote attackers to inject arbitrary web script or HTML via the p parameter.

  • CVE-2011-4507Nov 22, 2011
    Dlink
    Dir 685
    risk 0.01cvss —epss 0.06

    The D-Link DIR-685 router, when certain WPA and WPA2 configurations are used, does not maintain an encrypted wireless network during transfer of a large amount of network traffic, which allows remote attackers to obtain sensitive information or bypass authentication via a Wi-Fi…

  • CVE-2011-4506Nov 22, 2011
    Thomson
    TG585
    risk 0.00cvss —epss 0.01

    The UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding"…

  • CVE-2011-4505Nov 22, 2011
    Speedtouch
    5x6
    risk 0.00cvss —epss 0.01

    The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

  • CVE-2011-4504Nov 22, 2011
    Zyxel
    P-330W
    risk 0.00cvss —epss 0.01

    The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

  • CVE-2011-4503Nov 22, 2011
    Broadcom Corporation
    Broadcom Linux
    risk 0.00cvss —epss 0.02

    The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.