VYPR

CVEs

346,118 total · page 6021 of 6,923

AllCriticalHighKEV
  • CVE-2010-4738Feb 16, 2011
    Rae Media
    Real Estate Single And Multi Agent System
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent…

  • CVE-2010-4737Feb 16, 2011
    Hotwebscripts
    Rentals
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort parameter.

  • CVE-2010-4736Feb 16, 2011
    Gatesoft
    Docusafe
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the ECO_ID parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2010-4735Feb 16, 2011
    Ecommercemax
    Digital Goods Seller
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in shoppingcart.asp in Ecommercemax Solutions Digital-goods seller (DGS) 1.5 allows remote attackers to execute arbitrary SQL commands via the d parameter.

  • CVE-2010-4734Feb 16, 2011
    Skeletonz
    Skeletonz CMS
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Email parameters. NOTE: some of these details…

  • CVE-2011-0654Feb 16, 2011
    Microsoft
    Windows Server 2003
    risk 0.08cvss —epss 0.68

    Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold,…

  • CVE-2010-2928Feb 16, 2011
    VMware
    Vcenter Server
    risk 0.00cvss —epss 0.00

    The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log-on credentials in a configuration file, which allows local users to gain privileges by reading this file.

  • CVE-2011-1033Feb 15, 2011
    IBM
    Informix Dynamic Server
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED session environment option in a SQL SET ENVIRONMENT statement.

  • CVE-2011-1032Feb 15, 2011
    IBM
    Connections
    risk 0.00cvss —epss 0.01

    IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login module, which has unspecified impact and attack vectors.

  • CVE-2010-4733Feb 15, 2011
    Intellicom
    Netbiter Webscada Ws100
    risk 0.00cvss —epss 0.02

    WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via…

  • CVE-2010-4732Feb 15, 2011
    Intellicom
    Netbiter Webscada Ws100
    risk 0.00cvss —epss 0.05

    cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html…

  • CVE-2010-4731Feb 15, 2011
    Intellicom
    Netbiter Webscada Ws100
    risk 0.00cvss —epss 0.02

    Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read…

  • CVE-2010-4730Feb 15, 2011
    Intellicom
    Netbiter Webscada Ws100
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read…

  • CVE-2008-7274Feb 15, 2011
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password.

  • CVE-2011-1031Feb 14, 2011
    Feh
    feh
    risk 0.00cvss —epss 0.00

    The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh_ temporary file, a different vulnerability than CVE-2011-0702.

  • CVE-2011-1030Feb 14, 2011
    IBM
    Connections
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Confirm New Page scene."

  • CVE-2011-1029Feb 14, 2011
    IBM
    Rational Team Concert
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 2.0.0.x allows remote authenticated users to inject arbitrary web script or HTML via the name of a shared report.

  • CVE-2011-0987Feb 14, 2011
    PhpMyAdmin
    phpMyAdmin
    risk 0.00cvss —epss 0.03

    The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL query by…

  • CVE-2011-0986Feb 14, 2011
    PhpMyAdmin
    phpMyAdmin
    risk 0.00cvss —epss 0.02

    phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.

  • CVE-2011-0702Feb 14, 2011
    Feh
    feh
    risk 0.00cvss —epss 0.00

    The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack on a /tmp/feh_ temporary file.

  • CVE-2011-0698Feb 14, 2011
    Djangoproject
    Django
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.

  • CVE-2011-0697Feb 14, 2011
    Djangoproject
    Django
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.

  • CVE-2011-0696Feb 14, 2011
    Djangoproject
    Django
    risk 0.00cvss —epss 0.02

    Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged AJAX requests that leverage a…

  • CVE-2011-0447Feb 14, 2011
    Rubyonrails
    Rails
    risk 0.00cvss —epss 0.01

    Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged (1) AJAX or (2)…

  • CVE-2011-0446Feb 14, 2011
    Rubyonrails
    Rails
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the mail_to helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascript encoding is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) name or (2) email value.

  • CVE-2011-0985Feb 10, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspecified impact and remote attack vectors.

  • CVE-2011-0984Feb 10, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

  • CVE-2011-0983Feb 10, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-0982Feb 10, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Use-after-free vulnerability in Google Chrome before 9.0.597.94 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG font faces.

  • CVE-2011-0981Feb 10, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-0980Feb 10, 2011
    Microsoft
    Office
    risk 0.02cvss —epss 0.26

    Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling…

  • CVE-2011-0979Feb 10, 2011
    Microsoft
    Office
    risk 0.02cvss —epss 0.27

    Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; and Excel Viewer SP2 do not properly handle errors during the parsing of Office Art records in Excel spreadsheets, which allows remote attackers…

  • CVE-2011-0978Feb 10, 2011
    Microsoft
    Office
    risk 0.06cvss —epss 0.43

    Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an…

  • CVE-2011-0977Feb 10, 2011
    Microsoft
    Office
    risk 0.03cvss —epss 0.32

    Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka…

  • CVE-2011-0976Feb 10, 2011
    Microsoft
    Powerpoint
    risk 0.02cvss —epss 0.25

    Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 do not properly handle Office Art…

  • CVE-2011-0975Feb 10, 2011
    BMC Software
    Performance Analysis For Servers
    risk 0.01cvss —epss 0.07

    Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00…

  • CVE-2011-0758Feb 10, 2011
    Ca
    Etrust Secure Content Manager
    risk 0.01cvss —epss 0.08

    The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a…

  • CVE-2011-0647Feb 10, 2011
    EMC Corporation
    Networker Module
    risk 0.08cvss —epss 0.64

    The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.

  • CVE-2011-0606Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors…

  • CVE-2011-0605Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2011-0604Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than…

  • CVE-2011-0603Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.09

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image, a different vulnerability than CVE-2011-0566 and…

  • CVE-2011-0602Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file, which causes heap corruption, a different vulnerability…

  • CVE-2011-0600Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.03cvss —epss 0.40

    The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and…

  • CVE-2011-0599Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.09

    The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted image that causes an invalid pointer calculation related to…

  • CVE-2011-0598Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.10

    Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code via crafted ICC data, a different vulnerability than CVE-2011-0596, CVE-2011-0599, and…

  • CVE-2011-0596Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with crafted (1) height and (2) width values for an RLE_8…

  • CVE-2011-0595Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.10

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, a different vulnerability than…

  • CVE-2011-0594Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a font.

  • CVE-2011-0593Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.50

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, a different vulnerability than…