VYPR

CVEs

346,118 total · page 6020 of 6,923

AllCriticalHighKEV
  • CVE-2011-0431Feb 19, 2011
    Openafs
    Openafs
    risk 0.00cvss —epss 0.02

    The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions does not properly handle errors, which allows attackers to cause a denial of service via unknown vectors. NOTE: some of these details are…

  • CVE-2011-0430Feb 19, 2011
    Openafs
    Openafs
    risk 0.00cvss —epss 0.03

    Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to cause a denial of service and execute arbitrary code via unknown vectors.

  • CVE-2011-0420Feb 19, 2011
    PHP
    PHP
    risk 0.04cvss —epss 0.14

    The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.

  • CVE-2011-0364Feb 19, 2011
    Cisco Systems, Inc.
    Security Agent
    risk 0.05cvss —epss 0.20

    The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.

  • CVE-2011-0050Feb 19, 2011
    Cgiirc
    Cgi\
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in the nonjs interface (interfaces/nonjs.pm) in CGI:IRC before 0.5.10 allows remote attackers to inject arbitrary web script or HTML via the R parameter.

  • CVE-2011-0014Feb 19, 2011
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.10

    ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an…

  • CVE-2011-0013Feb 19, 2011
    Apache
    Tomcat
    risk 0.00cvss —epss 0.10

    Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.

  • CVE-2010-4328Feb 19, 2011
    Novell
    iPrint for Linux Open Enterprise Server
    risk 0.04cvss —epss 0.15

    Multiple stack-based buffer overflows in opt/novell/iprint/bin/ipsmd in Novell iPrint for Linux Open Enterprise Server 2 SP2 and SP3 allow remote attackers to execute arbitrary code via unspecified LPR opcodes.

  • CVE-2010-4323Feb 19, 2011
    Novell
    Zenworks Configuration Management
    risk 0.04cvss —epss 0.08

    Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request.

  • CVE-2011-1044Feb 18, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to…

  • CVE-2011-0712Feb 18, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the…

  • CVE-2011-0710Feb 18, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/.

  • CVE-2011-0709HigFeb 18, 2011
    Linux
    Kernel
    risk 0.49cvss 7.5epss 0.04

    The br_mdb_ip_get function in net/bridge/br_multicast.c in the Linux kernel before 2.6.35-rc5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an IGMP packet, related to lack of a multicast table.

  • CVE-2010-4649Feb 18, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large value of a certain structure…

  • CVE-2010-4744Feb 18, 2011
    Lewdlime
    Abcm2ps
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in abcm2ps before 5.9.13 have unknown impact and attack vectors, a different issue than CVE-2010-3441.

  • CVE-2010-4743Feb 18, 2011
    Lewdlime
    Abcm2ps
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in the getarena function in abc2ps.c in abcm2ps before 5.9.13 might allow remote attackers to execute arbitrary code via a crafted ABC file, a different vulnerability than CVE-2010-3441. NOTE: some of these details are obtained from third party…

  • CVE-2010-4742Feb 18, 2011
    Moxa
    Activex SDK
    risk 0.08cvss —epss 0.56

    Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value.

  • CVE-2010-4741Feb 18, 2011
    Moxa
    Device Manager
    risk 0.05cvss —epss 0.28

    Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code via crafted data in a session on TCP port 54321.

  • CVE-2011-1042Feb 18, 2011
    Google
    ChromeOS
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to cause a denial of service (daemon crash) by providing the name of a hidden WiFi network that does not respond to connection attempts.

  • CVE-2011-0453Feb 18, 2011
    F-Secure
    Internet Gatekeeper
    risk 0.00cvss —epss 0.02

    F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port.

  • CVE-2010-3441Feb 18, 2011
    Abcm2ps
    abcm2ps
    risk 0.00cvss —epss 0.06

    Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via (1) a crafted input file, related to the PUT0 and PUT1 output macros; (2) a crafted input file, related to the trim_title function; and possibly (3) a long -O option on…

  • CVE-2010-4476Feb 17, 2011
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.23

    The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a…

  • CVE-2010-4475Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…

  • CVE-2010-4474Feb 17, 2011
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Java DB component in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows local users to affect confidentiality via unknown vectors related to Security, a similar vulnerability to CVE-2009-4269.

  • CVE-2010-4473Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…

  • CVE-2010-4472Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs. NOTE: the previous information was obtained…

  • CVE-2010-4471Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown…

  • CVE-2010-4470Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was…

  • CVE-2010-4469Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…

  • CVE-2010-4468Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity…

  • CVE-2010-4467Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via…

  • CVE-2010-4466Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, Solaris, and, Linux; 5.0 Update 27 and earlier for Windows; and 1.4.2_29 and earlier for Windows allows remote untrusted Java Web Start…

  • CVE-2010-4465Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…

  • CVE-2010-4463Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 21 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via…

  • CVE-2010-4462Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…

  • CVE-2010-4454Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…

  • CVE-2010-4452Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.10cvss —epss 0.83

    Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and…

  • CVE-2010-4451Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, when using Java Update, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…

  • CVE-2010-4450Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Solaris and Linux; 5.0 Update 27 and earlier for Solaris and Linux; and 1.4.2_29 and earlier for Solaris and Linux allows local standalone…

  • CVE-2010-4448Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via…

  • CVE-2010-4447Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…

  • CVE-2010-4422Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

  • CVE-2011-0533Feb 17, 2011
    Apache
    Archiva
    risk 0.00cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the…

  • CVE-2011-0355Feb 17, 2011
    VMware
    Esx
    risk 0.00cvss —epss 0.02

    Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service (ESX or ESXi host OS crash) by sending an…

  • CVE-2010-3274Feb 17, 2011
    Zohocorp
    Manageengine Adselfservice Plus
    risk 0.05cvss —epss 0.21

    Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a (1) showList or…

  • CVE-2010-3273Feb 17, 2011
    Zohocorp
    Manageengine Adselfservice Plus
    risk 0.00cvss —epss 0.03

    ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResult.

  • CVE-2010-3272Feb 17, 2011
    Zohocorp
    Manageengine Adselfservice Plus
    risk 0.03cvss —epss 0.04

    accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, via a modified (1)…

  • CVE-2011-1034Feb 16, 2011
    IBM
    Rational Build Forge
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter to the fullcontrol program. NOTE: some of these details are obtained from third party information.

  • CVE-2010-4740Feb 16, 2011
    Scadaengine
    Bacnet Opc Client
    risk 0.06cvss —epss 0.42

    Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message.

  • CVE-2010-4739Feb 16, 2011
    Maian Media
    Maian Media Silver
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Maian Media Silver (com_maianmedia) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a music action to index.php.