VYPR

CVEs

346,118 total · page 6012 of 6,923

AllCriticalHighKEV
  • CVE-2010-4776Mar 23, 2011
    Preprojects
    Pre Online Tests Generator
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers to execute arbitrary SQL commands via the tid2 parameter.

  • CVE-2010-4775Mar 23, 2011
    Drupal
    Relevant Content
    risk 0.00cvss —epss 0.01

    The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which allows remote attackers to discover restricted node titles and relationships.

  • CVE-2010-4774Mar 23, 2011
    Auracms
    Auracms
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171.

  • CVE-2010-4773Mar 23, 2011
    Hitachi
    Eur Form Client
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Hitachi EUR Form Client before 05-10 -/D 2010.11.15 and 05-10-CA (* 2) 2010.11.15; Hitachi EUR Form Service before 05-10 -/D 2010.11.15; and uCosminexus EUR Form Service before 07-60 -/D 2010.11.15 on Windows, before 05-10 -/D 2010.11.15 and 07-50…

  • CVE-2010-4772Mar 23, 2011
    Matteoiammarrone
    S CMS
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php.

  • CVE-2010-4771Mar 23, 2011
    Matteoiammarrone
    S CMS
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-4770Mar 23, 2011
    Commodityrentals
    Dvd Rentals Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a catalog action.

  • CVE-2010-4769Mar 23, 2011
    Joomla
    Jimtawl
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the task parameter to index.php.

  • CVE-2011-0194Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG encoding.

  • CVE-2011-0193Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Canon RAW image.

  • CVE-2011-0190Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.

  • CVE-2011-0189Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for man-in-the-middle attackers to spoof SSH servers by leveraging protocol vulnerabilities.

  • CVE-2011-0188Mar 23, 2011
    Ruby Lang
    Ruby
    risk 0.00cvss —epss 0.03

    The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of…

  • CVE-2011-0187Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect.

  • CVE-2011-0186Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG2000 image.

  • CVE-2011-0184Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an Excel spreadsheet with a crafted formula that uses unspecified opcodes.

  • CVE-2011-0183Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service (lockd, statd, mountd, or portmap outage) via a crafted packet, related to an "integer truncation issue."

  • CVE-2011-0182Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.03cvss —epss 0.02

    The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry.

  • CVE-2011-0181Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XBM image.

  • CVE-2011-0180Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.03cvss —epss 0.01

    Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.

  • CVE-2011-0179Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a document that contains a crafted embedded font.

  • CVE-2011-0178Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory.

  • CVE-2011-0177Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font.

  • CVE-2011-0176Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font.

  • CVE-2011-0175Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded TrueType font.

  • CVE-2011-0174Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted embedded OpenType font.

  • CVE-2011-0173Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) display dialog or (2) display alert command in…

  • CVE-2011-0172Mar 23, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service (divide-by-zero error and reboot) via Wi-Fi frames on the local wireless network, a different vulnerability than CVE-2011-0162.

  • CVE-2011-1506Mar 22, 2011
    Kerio Technologies
    Connect
    risk 0.00cvss —epss 0.02

    The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in…

  • CVE-2011-1505Mar 22, 2011
    IBM
    Lotus Quickr
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.27 services for Lotus Domino has unknown impact and attack vectors, aka SPR ESEO8DQME2.

  • CVE-2011-1414Mar 22, 2011
    TIBCO Software
    Tibbr
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the tibbr web server, as used in TIBCO tibbr 1.0.0 through 1.5.0 and tibbr Service 1.0.0 through 1.5.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1022Mar 22, 2011
    Libcg
    Control Group Configuration
    risk 0.00cvss —epss 0.00

    The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource…

  • CVE-2011-1006Mar 22, 2011
    Libcg
    Control Group Configuration
    risk 0.00cvss —epss 0.00

    Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. …

  • CVE-2011-0759Mar 22, 2011
    WordPress
    Recaptcha
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration page in the Recaptcha (aka WP-reCAPTCHA) plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert…

  • CVE-2011-0331Mar 22, 2011
    Honeywell
    Scanserver Activex Control
    risk 0.00cvss —epss 0.04

    Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbitrary code via a crafted HTML document.

  • CVE-2010-4228Mar 22, 2011
    Novell
    Netware
    risk 0.04cvss —epss 0.15

    Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arbitrary code or cause a denial of service (abend) via a long DELE command, a different vulnerability than CVE-2010-0625.4.

  • CVE-2009-5062Mar 22, 2011
    IBM
    Lotus Quickr
    risk 0.00cvss —epss 0.01

    IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated users to cause a denial of service (daemon crash) by subscribing to an Atom feed, aka SPR JRIE7VKMP9.

  • CVE-2009-5061Mar 22, 2011
    IBM
    Lotus Quickr
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.14 services for Lotus Domino, when Domino Native Authentication is enabled, might allow remote authenticated users to cause a denial of service (daemon crash) by going offline, aka SPR MLZG7UPB9N.

  • CVE-2009-5060Mar 22, 2011
    IBM
    Lotus Quickr
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.11 services for Lotus Domino might allow remote authenticated users to cause a denial of service (daemon crash) by accessing an entry in a calendar, aka SPR MZHA7SEBJX.

  • CVE-2009-5059Mar 22, 2011
    IBM
    Lotus Quickr
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service (daemon crash) by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J.

  • CVE-2009-5058Mar 22, 2011
    IBM
    Lotus Quickr
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.5 services for Lotus Domino allows remote authenticated users to cause a denial of service (daemon crash) by deleting an item that is accessed through a connector, aka SPR RELS7LARKR.

  • CVE-2008-7286Mar 22, 2011
    IBM
    Lotus Quickr
    risk 0.00cvss —epss 0.01

    IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino does not properly handle URLs that request images, which allows remote authenticated users to cause a denial of service (daemon crash) via a request to resources.nsf, aka SPR XFXF7JDBCX.

  • CVE-2008-7285Mar 22, 2011
    IBM
    Lotus Quickr
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the docnote string handling implementation in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, aka SPR JFLD7GZT25.

  • CVE-2008-7284Mar 22, 2011
    IBM
    Lotus Quickr
    risk 0.00cvss —epss 0.01

    IBM Lotus Quickr 8.1 before 8100.003 services for Lotus Domino allows remote authenticated users to cause a denial of service (daemon crash) by clicking a download link, aka SPR QCAO7E6AM8.

  • CVE-2011-1471Mar 20, 2011
    PHP
    PHP
    risk 0.04cvss —epss 0.13

    Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.

  • CVE-2011-1470Mar 20, 2011
    PHP
    PHP
    risk 0.04cvss —epss 0.10

    The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.

  • CVE-2011-1469Mar 20, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.

  • CVE-2011-1468Mar 20, 2011
    PHP
    PHP
    risk 0.04cvss —epss 0.13

    Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.

  • CVE-2011-1467Mar 20, 2011
    PHP
    PHP
    risk 0.04cvss —epss 0.13

    Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.

  • CVE-2011-1466Mar 20, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.06

    Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.