VYPR

CVEs

346,462 total · page 5966 of 6,930

AllCriticalHighKEV
  • CVE-2011-4502Nov 22, 2011
    Edimax
    6114wg
    risk 0.00cvss —epss 0.05

    The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15…

  • CVE-2011-4501Nov 22, 2011
    Edimax
    6114wg
    risk 0.00cvss —epss 0.04

    The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15…

  • CVE-2011-4500Nov 22, 2011
    Linksys
    Wrt54gx
    risk 0.00cvss —epss 0.01

    The UPnP IGD implementation on the Cisco Linksys WRT54GX with firmware 2.00.05, when UPnP is enabled, configures the SOAP server to listen on the WAN port, which allows remote attackers to administer the firewall via SOAP requests.

  • CVE-2011-4499Nov 22, 2011
    Linksys
    Wrt54g
    risk 0.00cvss —epss 0.01

    The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a…

  • CVE-2011-4498Nov 21, 2011
    Zenprise
    Zenprise Device Manager
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices.

  • CVE-2011-4497Nov 21, 2011
    Asus
    Rt N56u Firmware
    risk 0.00cvss —epss 0.01

    QIS_wizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request.

  • CVE-2011-4496Nov 21, 2011
    Aviosoft
    Dtv Player
    risk 0.04cvss —epss 0.11

    Buffer overflow in Aviosoft DTV Player 1.0.1.2 allows remote attackers to execute arbitrary code via a crafted .plf (aka playlist) file.

  • CVE-2011-4040Nov 21, 2011
    Njstar
    Njstar Communicator
    risk 0.08cvss —epss 0.65

    Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet.

  • CVE-2011-4465Nov 19, 2011
    IBM
    Lotus Mobile Connect
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Lotus Mobile Connect (LMC) 6.1.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden redirect URL.

  • CVE-2011-4404Nov 19, 2011
    VMware
    Vcenter Update Manager
    risk 0.08cvss —epss 0.60

    The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related…

  • CVE-2011-4311Nov 19, 2011
    ResourceSpace
    ResourceSpace
    risk 0.00cvss —epss 0.01

    ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote attackers to bypass intended resource restrictions via unspecified vectors.

  • CVE-2011-4159Nov 19, 2011
    Microfocus
    Event Monitoring Service
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in System Administration Manager (SAM) in EMS before A.04.20.11.04_01 on HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors.

  • CVE-2011-3849Nov 19, 2011
    Ca
    CA Directory
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before SP7 CR1 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP packet.

  • CVE-2011-4457Nov 17, 2011
    Owasp Java HTML Sanitizer Project
    Owasp Java HTML Sanitizer
    risk 0.00cvss —epss 0.01

    OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element.

  • CVE-2011-3900Nov 17, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google V8, as used in Google Chrome before 15.0.874.121, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write operation.

  • CVE-2011-4122Nov 17, 2011
    OpenPAM
    OpenPAM
    risk 0.03cvss —epss 0.01

    Directory traversal vulnerability in openpam_configure.c in OpenPAM before r478 on FreeBSD 8.1 allows local users to load arbitrary DSOs and gain privileges via a .. (dot dot) in the service_name argument to the pam_start function, as demonstrated by a .. in the -c option to…

  • CVE-2011-4107MedNov 17, 2011
    PhpMyAdmin
    phpMyAdmin
    risk 0.39cvss 6.5epss 0.13

    The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external…

  • CVE-2011-4096Nov 17, 2011
    Squid Cache
    Squid
    risk 0.03cvss —epss 0.37

    The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.

  • CVE-2011-4073Nov 17, 2011
    Xelerance
    Openswan
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1…

  • CVE-2011-3646Nov 17, 2011
    PhpMyAdmin
    phpMyAdmin
    risk 0.00cvss —epss 0.01

    phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed js_frame parameter to phpmyadmin.css.php, which reveals the installation path in an error message.

  • CVE-2011-3627Nov 17, 2011
    ClamAV
    Clamav
    risk 0.00cvss —epss 0.03

    The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.

  • CVE-2011-3380Nov 17, 2011
    Xelerance
    Openswan
    risk 0.00cvss —epss 0.02

    Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly handled by the error handling function.

  • CVE-2011-2770Nov 17, 2011
    Robert Luberda
    Man2html
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages.

  • CVE-2011-4156Nov 16, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4155.

  • CVE-2011-4155Nov 16, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4156.

  • CVE-2011-4158Nov 16, 2011
    Microfocus
    Directories Support for ProLiant Management Processors
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP Directories Support for ProLiant Management Processors 3.10 and 3.20 for Integrated Lights-Out iLO2 and iLO3 allows remote authenticated users to obtain sensitive information via unknown vectors.

  • CVE-2011-4157Nov 16, 2011
    Microfocus
    StorageWorks P4000 Virtual SAN Appliance
    risk 0.01cvss —epss 0.13

    Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers to execute arbitrary code via a crafted login request.

  • CVE-2011-1516Nov 15, 2011
    Apple Inc.
    Mac OS X
    risk 0.03cvss —epss 0.04

    The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of…

  • CVE-2008-7303Nov 15, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.04

    The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's…

  • CVE-2011-4118Nov 15, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.02

    Mahara before 1.4.1, when MNet (aka the Moodle network feature) is used, allows remote authenticated users to gain privileges via a jump to an XMLRPC target.

  • CVE-2011-2774Nov 15, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.01

    The "Reply to message" feature in Mahara 1.3.x and 1.4.x before 1.4.1 allows remote authenticated users to read the messages of a different user via a modified replyto parameter.

  • CVE-2011-2773Nov 15, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Mahara before 1.4.1 allows remote attackers to hijack the authentication of administrators for requests that add a user to an institution.

  • CVE-2011-2772Nov 15, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.02

    The get_dataroot_image_path function in lib/file.php in Mahara before 1.4.1 does not properly validate uploaded image files, which allows remote attackers to cause a denial of service (memory consumption) via a (1) large or (2) invalid image.

  • CVE-2011-2771Nov 15, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) URI attributes and (2) the External Feed component, as demonstrated by the guid element in an RSS feed.

  • CVE-2011-4436Nov 12, 2011
    Dell
    Kace K2000 Systems Deployment Appliance
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface on the Dell KACE K2000 System Deployment Appliance allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-4048Nov 12, 2011
    Dell
    Kace K2000 Systems Deployment Appliance
    risk 0.00cvss —epss 0.01

    The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credentials.

  • CVE-2011-4047Nov 12, 2011
    Dell
    Kace K2000 Systems Deployment Appliance
    risk 0.00cvss —epss 0.03

    The Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary commands by leveraging database write access.

  • CVE-2011-4046Nov 12, 2011
    Dell
    Kace K2000 Systems Deployment Appliance
    risk 0.00cvss —epss 0.01

    The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent attackers to obtain sensitive information by examining script source code.

  • CVE-2011-4435Nov 11, 2011
    IBM
    DB2 Tools
    risk 0.00cvss —epss 0.01

    The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests.

  • CVE-2011-4434Nov 11, 2011
    Microsoft
    Windows Server 2008
    risk 0.00cvss —epss 0.02

    Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office…

  • CVE-2011-3376Nov 11, 2011
    Apache
    Tomcat
    risk 0.00cvss —epss 0.01

    org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application's…

  • CVE-2011-1375Nov 11, 2011
    IBM
    Aix
    risk 0.00cvss —epss 0.00

    IBM AIX 6.1 and 7.1 does not restrict the wpar_limits_config and wpar_limits_modify system calls, which allows local users to cause a denial of service (system crash) via a crafted call.

  • CVE-2011-3442Nov 11, 2011
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app.

  • CVE-2011-3441Nov 11, 2011
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname.

  • CVE-2011-3440Nov 11, 2011
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirmation.

  • CVE-2011-3439Nov 11, 2011
    Apple Inc.
    Coregraphics
    risk 0.00cvss —epss 0.05

    FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.

  • CVE-2011-2460Nov 11, 2011
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…

  • CVE-2011-2459Nov 11, 2011
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…

  • CVE-2011-2458Nov 11, 2011
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted…

  • CVE-2011-2457Nov 11, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.09

    Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.