VYPR

CVEs

346,118 total · page 6019 of 6,923

AllCriticalHighKEV
  • CVE-2011-0373Feb 25, 2011
    Cisco Systems, Inc.
    TelePresence endpoint devices
    risk 0.00cvss —epss 0.03

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31685.

  • CVE-2011-0372Feb 25, 2011
    Cisco Systems, Inc.
    TelePresence endpoint devices
    risk 0.00cvss —epss 0.03

    The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640.

  • CVE-2011-1011Feb 24, 2011
    Red Hat
    Policycoreutils
    risk 0.00cvss —epss 0.00

    The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and earlier, and Fedora 14 and earlier, mounts a new directory on top of /tmp without assigning root ownership…

  • CVE-2011-0452Feb 24, 2011
    Lunascape
    Lunascape
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in the script function in Lunascape before 6.4.3 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

  • CVE-2011-1068Feb 23, 2011
    Microsoft
    Windows Azure SDK
    risk 0.01cvss —epss 0.10

    Microsoft Windows Azure Software Development Kit (SDK) 1.3.x before 1.3.20121.1237, when Full IIS and a Web Role are used with an ASP.NET application, does not properly support the use of cookies for maintaining state, which allows remote attackers to obtain potentially…

  • CVE-2011-1067Feb 23, 2011
    Fedoraproject
    389 Directory Server
    risk 0.00cvss —epss 0.01

    slapd (aka ns-slapd) in 389 Directory Server before 1.2.8.a2 does not properly manage the c_timelimit field of the connection table element, which allows remote attackers to cause a denial of service (daemon outage) via Simple Paged Results connections, as demonstrated by using…

  • CVE-2011-1003Feb 23, 2011
    ClamAV
    Clamav
    risk 0.00cvss —epss 0.04

    Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these…

  • CVE-2011-0999Feb 23, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    mm/huge_memory.c in the Linux kernel before 2.6.38-rc5 does not prevent creation of a transparent huge page (THP) during the existence of a temporary stack for an exec system call, which allows local users to cause a denial of service (memory consumption) or possibly have…

  • CVE-2011-0725Feb 23, 2011
    Sebastian Heinlein
    Aptdaemon
    risk 0.00cvss —epss 0.00

    Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sources_list argument, related to the D-Bus interface.

  • CVE-2011-0532Feb 23, 2011
    Fedoraproject
    389 Directory Server
    risk 0.00cvss —epss 0.00

    The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x) place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan…

  • CVE-2011-0414Feb 23, 2011
    Isc
    Bind
    risk 0.01cvss —epss 0.14

    ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at the time of (1) an IXFR transfer or (2) a DDNS update.

  • CVE-2011-0022Feb 23, 2011
    Fedoraproject
    389 Directory Server
    risk 0.00cvss —epss 0.00

    The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service (daemon outage or arbitrary…

  • CVE-2011-0019Feb 23, 2011
    Fedoraproject
    389 Directory Server
    risk 0.00cvss —epss 0.01

    slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via…

  • CVE-2010-4746Feb 23, 2011
    Fedoraproject
    389 Directory Server
    risk 0.00cvss —epss 0.02

    Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service (memory consumption) via "badly behaved applications," related to (1) Slapi_Attr mishandling in the DN normalization code and (2)…

  • CVE-2011-1066Feb 23, 2011
    Drupal
    Messaging
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Messaging module 6.x-2.x before 6.x-2.4 and 6.x-4.x before 6.x-4.0-beta8 for Drupal allows remote attackers with administer messaging permissions to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1065Feb 23, 2011
    Pipi
    Pipi Player
    risk 0.00cvss —epss 0.04

    Multiple stack-based buffer overflows in the PIPIWebPlayer ActiveX control (PIWebPlayer.ocx) in PIPI Player 2.8.0.0 allow remote attackers to execute arbitrary code via long arguments to the (1) PlayURL or (2) PlayURLWithLocalPlayer methods.

  • CVE-2011-1064Feb 23, 2011
    Qibosoft
    qibosoft
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB[] parameter.

  • CVE-2011-1063Feb 23, 2011
    Cherry Software
    Photopad
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) data[title] parameters in an edit action to files.php, or (3) id parameter in a view action to gallery.php.

  • CVE-2011-1062Feb 23, 2011
    Taskfreak
    Taskfreak\!
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) sContext, (2) sort, (3) dir, and (4) show parameters in a save action to index.php; the (5) dir and (6)…

  • CVE-2011-1061Feb 23, 2011
    Wsn
    Guest
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter.

  • CVE-2011-1060Feb 23, 2011
    Wsn
    Guest
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the wsnuser cookie to index.php.

  • CVE-2011-1059Feb 22, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in WebCore in WebKit before r77705, as used in Google Chrome before 11.0.672.2 and other products, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that…

  • CVE-2011-1038Feb 22, 2011
    IBM
    Sametime
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the messageString parameter in a WebMessage action or (2) the PATH_INFO.

  • CVE-2011-1002Feb 22, 2011
    Avahi
    Avahi
    risk 0.02cvss —epss 0.29

    avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

  • CVE-2011-0707Feb 22, 2011
    GNU
    Mailman
    risk 0.00cvss —epss 0.04

    Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.

  • CVE-2011-0530Feb 22, 2011
    Nbd
    nbd
    risk 0.00cvss —epss 0.05

    Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.

  • CVE-2011-1058Feb 22, 2011
    Moinmo
    Moinmoin
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the…

  • CVE-2011-1056Feb 21, 2011
    Rapid7
    Metasploit Framework
    risk 0.00cvss —epss 0.00

    The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse.

  • CVE-2011-1055Feb 21, 2011
    Lingxia
    I.C.E CMS
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in api/ice_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the session.user_id parameter to media.cfm.

  • CVE-2011-1054Feb 21, 2011
    Hex Rays
    Ida
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors.

  • CVE-2011-1053Feb 21, 2011
    Hex Rays
    Ida
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service (out-of-memory exception and inability to analyze code) via a crafted Mach-O file.

  • CVE-2011-1052Feb 21, 2011
    Hex Rays
    Ida
    risk 0.00cvss —epss 0.01

    Integer overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation.

  • CVE-2011-1051Feb 21, 2011
    Hex Rays
    Ida
    risk 0.00cvss —epss 0.01

    Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation.

  • CVE-2011-1050Feb 21, 2011
    Hex Rays
    Ida
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies in the handling of UTF8 sequences by the user interface."

  • CVE-2011-1049Feb 21, 2011
    Hex Rays
    Ida
    risk 0.00cvss —epss 0.04

    Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Macho-O file.

  • CVE-2011-1048Feb 21, 2011
    Mihantools
    Mihantools
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2011-1047Feb 21, 2011
    Vasthtml
    Forum Server
    risk 0.03cvss —epss 0.05

    Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) search_max parameter in a search action to index.php, which is not properly handled by…

  • CVE-2010-4745Feb 21, 2011
    Phpxref
    PHPXref
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string.

  • CVE-2011-1046Feb 21, 2011
    IBM
    Filenet P8 Content Manager
    risk 0.00cvss —epss 0.01

    IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to…

  • CVE-2011-1045Feb 21, 2011
    IBM
    Filenet P8 Content Manager
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Rendition Engine (aka P8RE) 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager (CM) allows remote attackers to gain privileges via unknown vectors.

  • CVE-2011-0694Feb 21, 2011
    RealNetworks
    Realplayer
    risk 0.01cvss —epss 0.07

    RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the…

  • CVE-2011-0449Feb 21, 2011
    Rubyonrails
    Rails
    risk 0.00cvss —epss 0.03

    actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access…

  • CVE-2011-0448Feb 21, 2011
    Rubyonrails
    Rails
    risk 0.00cvss —epss 0.02

    Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.

  • CVE-2011-0330Feb 21, 2011
    Dell
    Dellsystemlite.scanner Activex Control
    risk 0.00cvss —epss 0.01

    The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute arbitrary WMI Query Language (WQL) statements via a crafted value, as…

  • CVE-2011-0329Feb 21, 2011
    Dell
    Dellsystemlite.scanner Activex Control
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the GetData method in the Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 allows remote attackers to read arbitrary files via directory traversal sequences in the fileID parameter.

  • CVE-2011-1035Feb 19, 2011
    Pivotx
    Pivotx
    risk 0.00cvss —epss 0.04

    The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors.

  • CVE-2011-1000Feb 19, 2011
    Telepathy
    Gabble
    risk 0.00cvss —epss 0.03

    jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.

  • CVE-2011-0724Feb 19, 2011
    Ubuntu
    Edubuntu
    risk 0.00cvss —epss 0.03

    The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges.

  • CVE-2011-0721Feb 19, 2011
    W Shadow
    Shadow
    risk 0.00cvss —epss 0.02

    Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field.

  • CVE-2011-0706Feb 19, 2011
    IcedTea
    IcedTea-Web
    risk 0.00cvss —epss 0.03

    The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."