VYPR

CVEs

346,118 total · page 6018 of 6,923

AllCriticalHighKEV
  • CVE-2011-0278Mar 1, 2011
    Microfocus
    Jetadmin
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP Web Jetadmin 10.2 Service Release 3 and 4 allows local users to bypass intended access restrictions via unknown vectors.

  • CVE-2010-4753Mar 1, 2011
    Lightneasy
    Lightneasy
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, which is not properly handled in a forced SQL error message.

  • CVE-2010-4752Mar 1, 2011
    Lightneasy
    Lightneasy
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485. NOTE: the provenance…

  • CVE-2010-4751Mar 1, 2011
    Lightneasy
    Lightneasy
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the id parameter in an edituser action, a different vector than CVE-2008-6593, CVE-2010-3484, and…

  • CVE-2010-4750Mar 1, 2011
    Blogcms
    Blog\
    risk 0.03cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers to hijack the authentication of administrators.

  • CVE-2010-4749Mar 1, 2011
    Blogcms
    Blog\
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) body parameter to action.php and the (2) amount and (3) action parameters to admin/index.php.

  • CVE-2010-4748Mar 1, 2011
    Pmwiki
    Pmwiki
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox. NOTE: some of these details are obtained from third party information.

  • CVE-2010-4747Mar 1, 2011
    WordPress
    Processing Embed
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in wordpress-processing-embed/data/popup.php in the Processing Embed plugin 0.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pluginurl parameter.

  • CVE-2011-1105Feb 28, 2011
    Mutare
    Evm
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via (1) a delivery address and possibly (2) a PIN.

  • CVE-2011-1104Feb 28, 2011
    Mutare
    Evm
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that (1) change a PIN, (2) delete messages, (3) add a delivery address, or (4) change a delivery address.

  • CVE-2011-1020Feb 28, 2011
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of…

  • CVE-2011-1016Feb 28, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT)…

  • CVE-2011-1008Feb 28, 2011
    Bestpractical
    Rt
    risk 0.00cvss —epss 0.02

    Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field…

  • CVE-2011-1007Feb 28, 2011
    Bestpractical
    Rt
    risk 0.00cvss —epss 0.00

    Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers to obtain credentials by resubmitting the login form via the back button of a web browser on an unattended workstation after an RT logout.

  • CVE-2011-0925Feb 28, 2011
    Cisco Systems, Inc.
    Secure Desktop
    risk 0.00cvss —epss 0.03

    The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by identifying a Cisco program with a Cisco digital signature and then…

  • CVE-2011-1103Feb 25, 2011
    F-Secure
    Policy Manager
    risk 0.00cvss —epss 0.02

    The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to obtain sensitive information via a request to an invalid…

  • CVE-2011-1102Feb 25, 2011
    F-Secure
    Policy Manager
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary…

  • CVE-2011-1101Feb 25, 2011
    Citrix Systems
    Licensing Administration Console
    risk 0.00cvss —epss 0.01

    Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, formerly License Management Console, allow remote attackers to (1) access unauthorized "license administration functionality" or (2) cause a denial of service via…

  • CVE-2011-1018Feb 25, 2011
    Logwatch
    Logwatch
    risk 0.04cvss —epss 0.18

    logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server.

  • CVE-2011-0718Feb 25, 2011
    Red Hat
    Satellite
    risk 0.00cvss —epss 0.01

    Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks.

  • CVE-2011-0717Feb 25, 2011
    Red Hat
    Satellite
    risk 0.00cvss —epss 0.02

    Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk.

  • CVE-2011-0332Feb 25, 2011
    Foxitsoftware
    Reader
    risk 0.00cvss —epss 0.06

    Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow.

  • CVE-2010-4227Feb 25, 2011
    Novell
    Netware
    risk 0.04cvss —epss 0.17

    The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow.

  • CVE-2011-1036Feb 25, 2011
    Ca Technologies, A Broadcom Company
    Host-Based Intrusion Prevention System
    risk 0.00cvss —epss 0.03

    The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010,…

  • CVE-2011-0926Feb 25, 2011
    Cisco Systems, Inc.
    Secure Desktop
    risk 0.01cvss —epss 0.07

    A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability…

  • CVE-2011-0037Feb 25, 2011
    Microsoft
    Malware Protection Engine
    risk 0.00cvss —epss 0.02

    Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain…

  • CVE-2011-1100Feb 25, 2011
    Pixelpost
    Pixelpost
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) findfid, (2) id, (3) selectfcat, (4) selectfmon, or (5) selectftag parameter in an images action.

  • CVE-2011-0396Feb 25, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified…

  • CVE-2011-0395Feb 25, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a…

  • CVE-2011-0394Feb 25, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2 before 8.2(2.19), and 8.3 before 8.3(1.8); Cisco PIX Security Appliances 500 series devices; and Cisco…

  • CVE-2011-0393Feb 25, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.12), 7.1 and 7.2 before 7.2(5.2), 8.0 before 8.0(5.21), 8.1 before 8.1(2.49), 8.2 before 8.2(3.6), and 8.3 before 8.3(2.7) and Cisco PIX Security Appliances 500 series devices, when…

  • CVE-2011-0392Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Recording Server
    risk 0.00cvss —epss 0.02

    Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833.

  • CVE-2011-0391Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Recording Server
    risk 0.00cvss —epss 0.03

    Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (thread consumption and device outage) via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205.

  • CVE-2011-0390Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Multipoint Switch
    risk 0.00cvss —epss 0.03

    The XML-RPC implementation on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka Bug ID CSCtj44534.

  • CVE-2011-0389Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Multipoint Switch
    risk 0.00cvss —epss 0.03

    Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service (process crash) via a crafted Real-Time Transport Control Protocol (RTCP) UDP packet, aka Bug ID CSCth60993.

  • CVE-2011-0388Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Recording Server
    risk 0.00cvss —epss 0.03

    Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java servlet RMI interface, which allows remote attackers to cause a…

  • CVE-2011-0387Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Multipoint Switch
    risk 0.00cvss —epss 0.02

    The administrative web interface on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors involving access to a servlet, aka Bug…

  • CVE-2011-0386Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Recording Server
    risk 0.00cvss —epss 0.04

    The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed request, aka Bug ID CSCti50739.

  • CVE-2011-0385Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Recording Server
    risk 0.00cvss —epss 0.05

    The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly…

  • CVE-2011-0384Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Multipoint Switch
    risk 0.00cvss —epss 0.06

    The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request,…

  • CVE-2011-0383Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Recording Server
    risk 0.01cvss —epss 0.06

    The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions,…

  • CVE-2011-0382Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Recording Server
    risk 0.00cvss —epss 0.04

    The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a "command injection vulnerability," aka Bug ID CSCtf97221.

  • CVE-2011-0381Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Manager
    risk 0.00cvss —epss 0.05

    Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a "command injection vulnerability," aka Bug ID CSCtf97085.

  • CVE-2011-0380Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence Manager
    risk 0.00cvss —epss 0.02

    Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562.

  • CVE-2011-0379Feb 25, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x; and Cisco…

  • CVE-2011-0378Feb 25, 2011
    Cisco Systems, Inc.
    TelePresence endpoint
    risk 0.00cvss —epss 0.01

    The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587.

  • CVE-2011-0377Feb 25, 2011
    Cisco Systems, Inc.
    TelePresence endpoint devices
    risk 0.00cvss —epss 0.03

    Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605.

  • CVE-2011-0376Feb 25, 2011
    Cisco Systems, Inc.
    TelePresence endpoint
    risk 0.00cvss —epss 0.03

    The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID CSCte43876.

  • CVE-2011-0375Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence System Software
    risk 0.00cvss —epss 0.03

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCth24671.

  • CVE-2011-0374Feb 25, 2011
    Cisco Systems, Inc.
    Telepresence System Software
    risk 0.00cvss —epss 0.03

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659.