VYPR

CVEs

346,392 total · page 5998 of 6,928

AllCriticalHighKEV
  • CVE-2011-2628Jul 1, 2011
    Opera
    Opera
    risk 0.04cvss —epss 0.13

    Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to page unload.

  • CVE-2011-2627Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the DOM implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by live.com.

  • CVE-2011-2626Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 11.50 allows remote attackers to cause a denial of service (application crash) by using "injected script" to set the SRC attribute of an IFRAME element.

  • CVE-2011-2625Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a SELECT element that contains many OPTION elements.

  • CVE-2011-2624Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application hang) via a large table, which is not properly handled during a print preview.

  • CVE-2011-2623Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the SVG BiDi implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash or hang) via unknown vectors.

  • CVE-2011-2622Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Web Workers implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown vectors.

  • CVE-2011-2621Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to form layout.

  • CVE-2011-2620Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving SVG animation.

  • CVE-2011-2619Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets (CSS).

  • CVE-2011-2618Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element or (2) VIDEO element between windows.

  • CVE-2011-2617Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to selecting a text node, and closed pop-up windows, removed pop-up windows, and IFRAME elements.

  • CVE-2011-2616Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (memory consumption) via unknown content on a web page, as demonstrated by test262.ecmascript.org.

  • CVE-2011-2615Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application hang) via unknown content on a web page, as demonstrated by domiteca.com.

  • CVE-2011-2614Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    The SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving a path on which many characters are drawn.

  • CVE-2011-2613Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    The Array.prototype.join method in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a non-array object that contains initial holes.

  • CVE-2011-2612Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by progorod.ru.

  • CVE-2011-2611Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the printing functionality in Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page.

  • CVE-2011-2610Jul 1, 2011
    Opera
    Opera Browser
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Opera before 11.50 has unknown impact and attack vectors, related to a "moderately severe issue."

  • CVE-2011-2609Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 11.50 does not properly restrict data: URIs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.

  • CVE-2011-2608Jul 1, 2011
    Microfocus
    Operations Agent
    risk 0.00cvss —epss 0.05

    ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register…

  • CVE-2011-1866Jul 1, 2011
    Microfocus
    Storage Data Protector
    risk 0.05cvss —epss 0.21

    Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXEC_CMD functionality.

  • CVE-2011-1865Jul 1, 2011
    Microfocus
    Storage Data Protector
    risk 0.10cvss —epss 0.89

    Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters.

  • CVE-2011-1515Jul 1, 2011
    Microfocus
    Storage Data Protector
    risk 0.00cvss —epss 0.04

    The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (daemon exit) via a request containing crafted parameters.

  • CVE-2011-1514Jul 1, 2011
    Microfocus
    Storage Data Protector
    risk 0.00cvss —epss 0.04

    The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request containing crafted parameters.

  • CVE-2011-1337Jul 1, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.03

    Opera before 11.50 allows remote attackers to cause a denial of service (disk consumption) via invalid URLs that trigger creation of error pages.

  • CVE-2011-2607Jun 30, 2011
    IBM
    Rational Team Concert
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165513.

  • CVE-2011-2606Jun 30, 2011
    IBM
    Rational Team Concert
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.

  • CVE-2011-2605Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a…

  • CVE-2011-2377Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.04

    Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace image.

  • CVE-2011-2376Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

  • CVE-2011-2375Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.06

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

  • CVE-2011-2374Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via…

  • CVE-2011-2373Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document.

  • CVE-2011-2371Jun 30, 2011
    Seamonkey
    Seamonkey
    risk 0.09cvss —epss 0.76

    Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.

  • CVE-2011-2370Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors.

  • CVE-2011-2369Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitrary web script or HTML via an SVG element containing an HTML-encoded entity.

  • CVE-2011-2368Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.04

    The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

  • CVE-2011-2367Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via…

  • CVE-2011-2365Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different…

  • CVE-2011-2364Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different…

  • CVE-2011-2363Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.06

    Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application…

  • CVE-2011-2362Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers.

  • CVE-2011-0085Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.06

    Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via a crafted XUL document that dequeues the current command updater.

  • CVE-2011-0083Jun 30, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.06

    Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application…

  • CVE-2011-2604Jun 30, 2011
    Intel
    G41 Driver
    risk 0.00cvss —epss 0.02

    The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL…

  • CVE-2011-2603Jun 30, 2011
    Nvidia
    9400m Driver
    risk 0.00cvss —epss 0.02

    The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service (desktop hang) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.

  • CVE-2011-2602Jun 30, 2011
    Nvidia
    Geforce 310
    risk 0.00cvss —epss 0.02

    The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the…

  • CVE-2011-2601Jun 30, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows remote attackers to cause a denial of service (desktop hang) via vectors involving WebGL and (1) shader programs or (2) complex 3D geometry, as demonstrated by using Mozilla Firefox…

  • CVE-2011-2600Jun 30, 2011
    Microsoft
    Windows Xp
    risk 0.01cvss —epss 0.12

    The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to cause a denial of service (system crash) via vectors involving WebGL and (1) shader programs or (2) complex 3D geometry, as demonstrated by using Mozilla…