VYPR

CVEs

346,392 total · page 6006 of 6,928

AllCriticalHighKEV
  • CVE-2011-2021May 20, 2011
    TIBCO Software
    Iprocess Engine
    risk 0.00cvss —epss 0.02

    Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.

  • CVE-2011-2020May 20, 2011
    TIBCO Software
    Iprocess Engine
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1838May 20, 2011
    TWiki
    Twiki
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a (1) view script or (2) login script.

  • CVE-2011-1784May 20, 2011
    Keepalived
    Keepalived
    risk 0.00cvss —epss 0.00

    The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

  • CVE-2011-1582May 20, 2011
    Apache
    Tomcat
    risk 0.00cvss —epss 0.06

    Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this vulnerability exists…

  • CVE-2011-1327May 20, 2011
    Trend Micro
    Internet Security
    risk 0.00cvss —epss 0.00

    The Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and PC-cillin 2009) does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger.

  • CVE-2011-0966May 20, 2011
    Cisco Systems, Inc.
    Ciscoworks Common Services
    risk 0.06cvss —epss 0.41

    Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, aka Bug ID CSCto35577.

  • CVE-2011-0962May 20, 2011
    Cisco Systems, Inc.
    Unified Operations Manager
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before 8.6 allows remote attackers to inject arbitrary web script or HTML via the tag parameter, aka Bug…

  • CVE-2011-0961May 20, 2011
    Cisco Systems, Inc.
    Ciscoworks Common Services
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the device parameter, aka Bug ID CSCto12704.

  • CVE-2011-0960May 20, 2011
    Cisco Systems, Inc.
    Unified Operations Manager
    risk 0.03cvss —epss 0.04

    Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID…

  • CVE-2011-0959May 20, 2011
    Cisco Systems, Inc.
    Unified Operations Manager
    risk 0.05cvss —epss 0.21

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do, (2) the deviceInstanceName parameter to iptm/ddv.do, the…

  • CVE-2011-0723May 20, 2011
    MPlayer
    Mplayer
    risk 0.00cvss —epss 0.04

    FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-1 file.

  • CVE-2011-0722May 20, 2011
    MPlayer
    Mplayer
    risk 0.00cvss —epss 0.04

    FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a malformed RealMedia file.

  • CVE-2010-3908May 20, 2011
    MPlayer
    Mplayer
    risk 0.00cvss —epss 0.03

    FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed WMV file.

  • CVE-2010-0217May 20, 2011
    Zeacom
    Chat Server
    risk 0.00cvss —epss 0.01

    Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote attackers to hijack sessions or cause a denial of service (Chat Server crash or Tomcat daemon crash) via a brute-force attack.

  • CVE-2009-5075May 20, 2011
    Monkeysaudio
    Monkey\'s Audio
    risk 0.00cvss —epss 0.01

    Monkey's Audio before 4.02 allows remote attackers to cause a denial of service (application crash) via a malformed APE file.

  • CVE-2006-7245May 20, 2011
    Monkeysaudio
    Monkey\'s Audio
    risk 0.00cvss —epss 0.01

    Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service (application crash) via an APX file that lacks NULL termination.

  • CVE-2011-2144May 16, 2011
    IBM
    Datacap Taskmaster Capture
    risk 0.00cvss —epss 0.01

    The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service (batch abort) via a long subject line in an e-mail message that is represented in a .eml file.

  • CVE-2011-2143May 16, 2011
    IBM
    Datacap Taskmaster Capture
    risk 0.00cvss —epss 0.01

    IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obtain login access by using an incorrect password in conjunction with an account name from a different domain.

  • CVE-2011-2142May 16, 2011
    IBM
    Datacap Taskmaster Capture
    risk 0.00cvss —epss 0.01

    The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unspecified impact and attack vectors.

  • CVE-2011-2141May 16, 2011
    IBM
    Datacap Taskmaster Capture
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2011-1856May 16, 2011
    Microfocus
    Business Availability Center
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1828May 16, 2011
    Evan Dandrea
    USB Creator
    risk 0.00cvss —epss 0.00

    usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbitrary unmount operations via the UnmountFile method in a dbus-send command.

  • CVE-2011-1407May 16, 2011
    Exim
    Exim
    risk 0.00cvss —epss 0.04

    The DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to lookup items, instead of only strings, which allows remote attackers to execute arbitrary code or access a filesystem via a crafted identity.

  • CVE-2011-1899May 16, 2011
    Ca
    Ehealth
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

  • CVE-2011-1800May 16, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1799May 16, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-0615May 16, 2011
    Adobe Inc.
    Audition
    risk 0.01cvss —epss 0.07

    Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data in unspecified fields in the TRKM chunk in an Audition Session (aka .ses) file,…

  • CVE-2011-0614May 16, 2011
    Adobe Inc.
    Audition
    risk 0.04cvss —epss 0.14

    Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Audition Session (aka .ses) file.

  • CVE-2011-0613May 16, 2011
    Adobe Inc.
    Robohelp
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to (1) wf_status.htm and (2) wf_topicfs.htm in RoboHTML/WildFireExt/TemplateStock/.

  • CVE-2011-0612May 16, 2011
    Adobe Inc.
    Flash Media Server
    risk 0.00cvss —epss 0.02

    Adobe Flash Media Server (FMS) before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause a denial of service (XML data corruption) via unspecified vectors.

  • CVE-2011-0419May 16, 2011
    Apache
    HTTP Server
    risk 0.05cvss —epss 0.30

    Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris…

  • CVE-2011-1406May 13, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.02

    Mahara before 1.3.6 does not properly handle an https URL in the wwwroot configuration setting, which makes it easier for user-assisted remote attackers to obtain credentials by sniffing the network at a time when an http URL is used for a login.

  • CVE-2011-1405May 13, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Mahara before 1.3.6 allows remote authenticated users to inject arbitrary web script or HTML via vectors associated with HTML e-mail messages, related to artefact/comment/lib.php and interaction/forum/lib.php.

  • CVE-2011-1404May 13, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.02

    Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with (1) blocktype/myfriends/myfriends.json.php, (2) json/usersearch.php, (3)…

  • CVE-2011-1403May 13, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys.

  • CVE-2011-1402May 13, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.03

    Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a…

  • CVE-2011-1326May 13, 2011
    Fon
    La Fonera\+
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows remote attackers to cause a denial of service via unknown vectors.

  • CVE-2011-0633May 13, 2011
    Perl Foundation
    libwww-perl (LWP)
    risk 0.00cvss —epss 0.04

    The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote…

  • CVE-2011-0627HigMay 13, 2011
    Adobe Inc.
    Flashplayer
    risk 0.58cvss 8.8epss 0.05

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May…

  • CVE-2011-0626May 13, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624,…

  • CVE-2011-0625May 13, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624,…

  • CVE-2011-0624May 13, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0625,…

  • CVE-2011-0623May 13, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0624, CVE-2011-0625,…

  • CVE-2011-0622May 13, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619,…

  • CVE-2011-0621May 13, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619,…

  • CVE-2011-0620May 13, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619,…

  • CVE-2011-0619May 13, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0620,…

  • CVE-2011-0618May 13, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2011-0579May 13, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to obtain sensitive information via unspecified vectors.