VYPR

CVEs

346,414 total · page 5988 of 6,929

AllCriticalHighKEV
  • CVE-2010-4830Aug 24, 2011
    Techno Dreams
    Job Career Package
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the z_Residency parameter.

  • CVE-2010-4829Aug 24, 2011
    Techno Dreams
    Cars Ads Package
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter.

  • CVE-2010-4828Aug 24, 2011
    SolarWinds
    Orion Network Performance Monitor
    risk 0.00cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3)…

  • CVE-2010-4827Aug 24, 2011
    Snitz Forums 2000
    Snitz Forums 2000
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to inject arbitrary web script or HTML via the M_NAME parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2010-4826Aug 24, 2011
    Snitz Forums 2000
    Snitz Forums 2000
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the M_NAME parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2010-4825Aug 24, 2011
    Pleer
    Wp Twitter Feed
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in magpie_debug.php in the Twitter Feed plugin (wp-twitter-feed) 0.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.

  • CVE-2011-3266Aug 24, 2011
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in…

  • CVE-2011-2735Aug 23, 2011
    EMC Corporation
    Autostart
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.1 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted message over TCP.

  • CVE-2011-2698Aug 23, 2011
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (infinite loop) via an invalid packet.

  • CVE-2011-2652Aug 23, 2011
    Marcus Schafer
    Kiwi
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted archive file list that is used in an overlay file.

  • CVE-2011-2651Aug 23, 2011
    Marcus Schafer
    Kiwi
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename.

  • CVE-2011-2650Aug 23, 2011
    Marcus Schafer
    Kiwi
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted pattern name that is included in an RPM info display.

  • CVE-2011-2649Aug 23, 2011
    Marcus Schafer
    Kiwi
    risk 0.00cvss —epss 0.02

    Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.

  • CVE-2011-2648Aug 23, 2011
    Marcus Schafer
    Kiwi
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file.

  • CVE-2011-2647Aug 23, 2011
    Marcus Schafer
    Kiwi
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files.

  • CVE-2011-2646Aug 23, 2011
    Marcus Schafer
    Kiwi
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files.

  • CVE-2011-2645Aug 23, 2011
    Marcus Schafer
    Kiwi
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM.

  • CVE-2011-2644Aug 23, 2011
    Marcus Schafer
    Kiwi
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display.

  • CVE-2011-2226Aug 23, 2011
    Marcus Schafer
    Kiwi
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a pattern listing.

  • CVE-2011-2225Aug 23, 2011
    Marcus Schafer
    Kiwi
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh.

  • CVE-2011-3265Aug 19, 2011
    Zabbix
    Zabbix
    risk 0.00cvss —epss 0.01

    popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.

  • CVE-2011-3264Aug 19, 2011
    Zabbix
    Zabbix
    risk 0.00cvss —epss 0.01

    Zabbix before 1.8.6 allows remote attackers to obtain sensitive information via an invalid srcfld2 parameter to popup.php, which reveals the installation path in an error message.

  • CVE-2011-3263Aug 19, 2011
    Zabbix
    Zabbix
    risk 0.00cvss —epss 0.01

    zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device.

  • CVE-2011-2904Aug 19, 2011
    Zabbix
    Zabbix
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in acknow.php in Zabbix before 1.8.6 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter.

  • CVE-2011-1342Aug 19, 2011
    Aimluck
    Aipo
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Aimluck Aipo before 5.1.1, and Aipo for ASP before 5.1.1, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2011-1341Aug 19, 2011
    Aimluck
    Aipo
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data.

  • CVE-2011-0547Aug 19, 2011
    Symantec
    Storage Foundation
    risk 0.01cvss —epss 0.07

    Multiple integer overflows in vxsvc.exe in the Veritas Enterprise Administrator service in Symantec Veritas Storage Foundation 5.1 and earlier, Veritas Storage Foundation Cluster File System (SFCFS) 5.1 and earlier, Veritas Storage Foundation Cluster File System Enterprise for…

  • CVE-2011-3262Aug 19, 2011
    Xen
    Xen
    risk 0.00cvss —epss 0.00

    tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via unspecified vectors related to "Lack of error checking in the decompression loop."

  • CVE-2011-3170Aug 19, 2011
    Apple Inc.
    Cups
    risk 0.00cvss —epss 0.04

    The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different…

  • CVE-2011-2896Aug 19, 2011
    GIMP
    Gimp
    risk 0.00cvss —epss 0.13

    The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the…

  • CVE-2011-2895Aug 19, 2011
    FreeType
    Freetype
    risk 0.01cvss —epss 0.08

    The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType…

  • CVE-2011-2410Aug 19, 2011
    Microfocus
    Performance Insight
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-2955Aug 18, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via vectors…

  • CVE-2011-2954Aug 18, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2011-2953Aug 18, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    An unspecified ActiveX control in the browser plugin in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors,…

  • CVE-2011-2952Aug 18, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via vectors related to a dialog box.

  • CVE-2011-2951Aug 18, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.05

    Buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.0.0.1569 allows remote attackers to execute arbitrary code via a crafted raw_data_frame field in an AAC file.

  • CVE-2011-2950Aug 18, 2011
    RealNetworks
    Realplayer
    risk 0.05cvss —epss 0.29

    Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file.

  • CVE-2011-2949Aug 18, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via crafted ID3v2 tags in an MP3 file.

  • CVE-2011-2948Aug 18, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.0 through 2.1.5, and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files, which allows remote attackers to execute arbitrary…

  • CVE-2011-2947Aug 18, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.01

    Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a local HTML…

  • CVE-2011-2946Aug 18, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2011-2945Aug 18, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted SIPR stream.

  • CVE-2011-2733Aug 18, 2011
    EMC Corporation
    Rsa Adaptive Authentication On Premise
    risk 0.00cvss —epss 0.01

    EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related…

  • CVE-2011-2993Aug 18, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not prevent calls from unsigned JavaScript code to signed code, which allows remote attackers to bypass the Same Origin Policy and…

  • CVE-2011-2992Aug 18, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.04

    The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code…

  • CVE-2011-2991Aug 18, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement JavaScript, which allows remote attackers to cause a denial of service (memory corruption and application crash) or…

  • CVE-2011-2990Aug 18, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    The implementation of Content Security Policy (CSP) violation reports in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not remove proxy-authorization credentials from the listed request headers, which allows attackers to obtain…

  • CVE-2011-2989Aug 18, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement WebGL, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2011-2988Aug 18, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Buffer overflow in an unspecified string class in the WebGL shader implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service…