VYPR

CVEs

346,392 total · page 6008 of 6,928

AllCriticalHighKEV
  • CVE-2011-1324May 9, 2011
    Buffalotech
    AS-100 routers
    risk 0.00cvss —epss 0.00

    Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of…

  • CVE-2011-1323May 9, 2011
    Yamaha
    RTX, RT, SRT, RTV, RTW, and RTA series routers
    risk 0.00cvss —epss 0.02

    Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service (device reboot) via a crafted…

  • CVE-2011-1090May 9, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.

  • CVE-2011-1013May 9, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in the kernel in OpenBSD before 4.9 allows local users to trigger…

  • CVE-2011-1736May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.10

    Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message.

  • CVE-2011-1735May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.14

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed bm message.

  • CVE-2011-1734May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.15

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed omniiaputil message.

  • CVE-2011-1733May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.14

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed HPFGConfig message.

  • CVE-2011-1732May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.02cvss —epss 0.25

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed stutil message.

  • CVE-2011-1731May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.15

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_INTEGUTIL message.

  • CVE-2011-1730May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.14

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_SCRIPT message.

  • CVE-2011-1729May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.14

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed GET_FILE message.

  • CVE-2011-1728May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.14

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_BAR message.

  • CVE-2011-1571May 7, 2011
    Liferay
    Portal
    risk 0.00cvss —epss 0.08

    Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.

  • CVE-2011-1570May 7, 2011
    Liferay
    Portal
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to inject arbitrary web script or HTML via a message title, a different vulnerability than CVE-2004-2030.

  • CVE-2011-1504May 7, 2011
    Liferay
    Portal
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA allows remote authenticated users to inject arbitrary web script or HTML via a blog title.

  • CVE-2011-1503May 7, 2011
    Liferay
    Portal
    risk 0.00cvss —epss 0.01

    The XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat or Oracle GlassFish is used, allows remote authenticated users to read arbitrary (1) XSL and (2) XML files via a file:/// URL.

  • CVE-2011-1502May 7, 2011
    Liferay
    Portal
    risk 0.00cvss —epss 0.02

    Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to read arbitrary files via an entity declaration in conjunction with an entity reference, related to an XML External Entity (aka XXE) issue.

  • CVE-2011-0081May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x before 4.0.1, and Thunderbird 3.1.x before 3.1.10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via…

  • CVE-2011-0080May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.06

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or…

  • CVE-2011-0079May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.07

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x before 4.0.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to…

  • CVE-2011-0078May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2011-0077May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2011-0076May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Java Embedding Plugin (JEP) in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, on Mac OS X allows remote attackers to bypass intended access restrictions via unknown vectors.

  • CVE-2011-0075May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2011-0074May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2011-0073May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.09cvss —epss 0.70

    Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."

  • CVE-2011-0072May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2011-0071May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrary files, and possibly load resources, via vectors involving…

  • CVE-2011-0070May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application…

  • CVE-2011-0069May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application…

  • CVE-2011-0067May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocompletion for forms, which allows remote attackers to read form history entries via a Java applet that spoofs interaction with the autocomplete controls.

  • CVE-2011-0066May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mObserverList.

  • CVE-2011-0065May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.09cvss —epss 0.74

    Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.

  • CVE-2011-1906May 5, 2011
    Trustwave
    Webdefend
    risk 0.00cvss —epss 0.01

    Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756.

  • CVE-2011-1905May 5, 2011
    Proofpoint
    Messaging Security Gateway
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allow remote attackers to hijack…

  • CVE-2011-1904May 5, 2011
    Proofpoint
    Messaging Security Gateway
    risk 0.00cvss —epss 0.02

    An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary commands via unknown vectors, related…

  • CVE-2011-1903May 5, 2011
    Proofpoint
    Messaging Security Gateway
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary SQL commands via unknown…

  • CVE-2011-1902May 5, 2011
    Proofpoint
    Messaging Security Gateway
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to read arbitrary files via unspecified vectors.

  • CVE-2011-1901May 5, 2011
    Proofpoint
    Messaging Security Gateway
    risk 0.00cvss —epss 0.02

    The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to bypass authentication via unspecified vectors.

  • CVE-2011-1826May 5, 2011
    Ca
    Arcot Webfort Versatile Authentication Server
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

  • CVE-2011-1825May 5, 2011
    Ca
    Arcot Webfort Versatile Authentication Server
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1423May 5, 2011
    Rsa
    Data Loss Prevention Enterprise Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in RSA Data Loss Prevention (DLP) Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1208May 5, 2011
    IBM
    Soliddb
    risk 0.00cvss —epss 0.03

    IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4) does not properly handle the (1) rpc_test_svc_readwrite and (2) rpc_test_svc_done commands, which allows remote attackers to cause a…

  • CVE-2011-1207May 5, 2011
    IBM
    Rational System Architect
    risk 0.00cvss —epss 0.05

    The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute…

  • CVE-2011-0756May 5, 2011
    Trustwave
    Webdefend
    risk 0.00cvss —epss 0.01

    The application server in Trustwave WebDefend Enterprise before 5.0 uses hardcoded console credentials, which makes it easier for remote attackers to read security-event data by using the remote console GUI to connect to the management port.

  • CVE-2011-1900May 4, 2011
    Indusoft
    Web Studio
    risk 0.06cvss —epss 0.32

    Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request.

  • CVE-2011-1209May 4, 2011
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encryption algorithm, which makes it easier for remote attackers to obtain plaintext data from a (1) JAX-RPC or (2) JAX-WS Web Services request via unspecified vectors…

  • CVE-2011-0714May 4, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 might allow remote attackers to cause a denial of service (crash) via malformed data in a packet, related to lockd and…

  • CVE-2011-0340May 4, 2011
    Indusoft
    Thin Client
    risk 0.06cvss —epss 0.32

    Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers…