VYPR

CVEs

346,118 total · page 6011 of 6,923

AllCriticalHighKEV
  • CVE-2010-4235Apr 4, 2011
    RealNetworks
    Helix Mobile Server
    risk 0.00cvss —epss 0.04

    Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

  • CVE-2010-3693Apr 4, 2011
    Horde (software)
    Groupware
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via vectors related to displaying mailbox names.

  • CVE-2010-3447Apr 4, 2011
    Horde (software)
    Gollem
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the file parameter in a view_file action.

  • CVE-2011-1554Mar 31, 2011
    Xpdf
    Xpdf
    risk 0.00cvss —epss 0.05

    Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer…

  • CVE-2011-1553Mar 31, 2011
    Glyphandcog
    Xpdfreader
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write,…

  • CVE-2011-1552Mar 31, 2011
    Xpdf
    Xpdf
    risk 0.01cvss —epss 0.10

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than…

  • CVE-2011-1175Mar 31, 2011
    Asterisk
    Asterisk Open Source
    risk 0.00cvss —epss 0.03

    tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by establishing many short TCP sessions to…

  • CVE-2011-1174Mar 31, 2011
    Asterisk
    Asterisk Open Source
    risk 0.00cvss —epss 0.03

    manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a series of manager sessions involving invalid data.

  • CVE-2011-0963Mar 31, 2011
    Cisco Systems, Inc.
    Nac Guest Server
    risk 0.00cvss —epss 0.02

    The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control (NAC) Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID…

  • CVE-2011-0764Mar 31, 2011
    Glyphandcog
    Xpdfreader
    risk 0.01cvss —epss 0.13

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by…

  • CVE-2011-0727Mar 31, 2011
    GNOME Foundation
    Gdm
    risk 0.00cvss —epss 0.00

    GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

  • CVE-2010-3695Mar 31, 2011
    Horde (software)
    Imp
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related to the…

  • CVE-2011-1551Mar 30, 2011
    Novell
    Opensuse Factory
    risk 0.00cvss —epss 0.00

    SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon.

  • CVE-2011-1550Mar 30, 2011
    File Project
    Logrotate
    risk 0.00cvss —epss 0.00

    The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted…

  • CVE-2011-1549Mar 30, 2011
    File Project
    Logrotate
    risk 0.00cvss —epss 0.00

    The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories,…

  • CVE-2011-1548Mar 30, 2011
    File Project
    Logrotate
    risk 0.00cvss —epss 0.00

    The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted…

  • CVE-2011-1155Mar 30, 2011
    Logrotate
    logrotate
    risk 0.00cvss —epss 0.00

    The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is…

  • CVE-2011-1154Mar 30, 2011
    Logrotate
    logrotate
    risk 0.00cvss —epss 0.00

    The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or…

  • CVE-2011-1098Mar 30, 2011
    Logrotate
    logrotate
    risk 0.00cvss —epss 0.00

    Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.

  • CVE-2011-1097Mar 30, 2011
    Rsync
    Rsync
    risk 0.00cvss —epss 0.03

    rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.

  • CVE-2009-5064Mar 30, 2011
    GNU
    Glibc
    risk 0.00cvss —epss 0.01

    ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense.…

  • CVE-2011-1472Mar 29, 2011
    Nokia
    E75
    risk 0.00cvss —epss 0.00

    The Nokia E75 phone with firmware before 211.12.01 allows physically proximate attackers to bypass the Device Lock code by entering an unspecified button sequence at boot time.

  • CVE-2011-1205Mar 29, 2011
    IBM
    Rational Clearcase
    risk 0.00cvss —epss 0.00

    Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4, ClearQuest 7.0.0.4 through 7.1.1.4, and other products allow local users to gain privileges via a Trojan horse HTML document…

  • CVE-2011-1176Mar 29, 2011
    Mpm Itk Project
    Mpm Itk
    risk 0.00cvss —epss 0.03

    The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote…

  • CVE-2011-0892Mar 29, 2011
    Microfocus
    Diagnostics
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HP Diagnostics 7.5x and 8.0x before 8.05.54.225 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2011-0728Mar 29, 2011
    Michael Hudson Doyle
    Loggerhead
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view.

  • CVE-2011-0441Mar 29, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.00

    The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

  • CVE-2010-1675Mar 29, 2011
    Quagga (software)
    Quagga
    risk 0.00cvss —epss 0.03

    bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.

  • CVE-2010-1674Mar 29, 2011
    Quagga (software)
    Quagga
    risk 0.01cvss —epss 0.13

    The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.

  • CVE-2011-1524Mar 28, 2011
    Symantec
    Liveupdate Administrator
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event…

  • CVE-2011-1420Mar 28, 2011
    EMC Corporation
    Data Protection Advisor
    risk 0.00cvss —epss 0.00

    EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

  • CVE-2011-1167Mar 28, 2011
    LibTIFF
    Libtiff
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value.

  • CVE-2011-0760Mar 28, 2011
    WordPress
    WP Related Posts
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting…

  • CVE-2011-0545Mar 28, 2011
    Symantec
    Liveupdate Administrator
    risk 0.03cvss —epss 0.03

    Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts, and possibly have unspecified other…

  • CVE-2011-0458Mar 28, 2011
    Google
    Picasa
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

  • CVE-2011-0440Mar 28, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs.

  • CVE-2011-0439Mar 28, 2011
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box.

  • CVE-2011-0024Mar 28, 2011
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted capture file.

  • CVE-2010-3276Mar 28, 2011
    VideoLAN
    VLC media player
    risk 0.01cvss —epss 0.07

    libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.

  • CVE-2010-3275Mar 28, 2011
    VideoLAN
    VLC media player
    risk 0.09cvss —epss 0.76

    libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability."

  • CVE-2011-1520Mar 25, 2011
    IBM
    Lotus Domino
    risk 0.00cvss —epss 0.00

    The default configuration of the server console in IBM Lotus Domino does not require a password (aka Server_Console_Password), which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a (1) Load, (2) Tell, or (3) Set…

  • CVE-2011-1519Mar 25, 2011
    IBM
    Lotus Domino
    risk 0.04cvss —epss 0.09

    The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing…

  • CVE-2011-1400Mar 25, 2011
    Debian
    linux
    risk 0.00cvss —epss 0.04

    The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux squeeze, Ubuntu 10.10 and 10.04 LTS, and possibly other operating systems lists certain programs, which might allow remote…

  • CVE-2011-1296Mar 25, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-1295Mar 25, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service (DOM tree corruption), conduct cross-site scripting (XSS) attacks, or possibly have unspecified…

  • CVE-2011-1294Mar 25, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 10.0.648.204 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-1293Mar 25, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1292Mar 25, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1291Mar 25, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "buffer error."

  • CVE-2011-0890Mar 25, 2011
    Microfocus
    Discovery\&dependency Mapping Inventory
    risk 0.00cvss —epss 0.03

    HP Discovery & Dependency Mapping Inventory (DDMI) 7.50, 7.51, 7.60, 7.61, 7.70, and 9.30 launches the Windows SNMP service with its default configuration, which allows remote attackers to obtain potentially sensitive information or have unspecified other impact by leveraging…