VYPR

CVEs

346,118 total · page 6022 of 6,923

AllCriticalHighKEV
  • CVE-2011-0592Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.48

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to "Texture bmp," a…

  • CVE-2011-0591Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.48

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to Texture and rgba, a…

  • CVE-2011-0590Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.06

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file, a different vulnerability than CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0595, and…

  • CVE-2011-0589Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.05

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0563 and…

  • CVE-2011-0588Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and…

  • CVE-2011-0587Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than…

  • CVE-2011-0586Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X do not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.

  • CVE-2011-0585Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than…

  • CVE-2011-0570Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and…

  • CVE-2011-0568Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

  • CVE-2011-0567Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.03cvss —epss 0.40

    AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image that triggers an incorrect pointer…

  • CVE-2011-0566Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.08

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image, a different vulnerability than CVE-2011-0567 and…

  • CVE-2011-0565Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than…

  • CVE-2011-0564Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.03

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows use weak permissions for unspecified files, which allows attackers to gain privileges via unknown vectors.

  • CVE-2011-0563Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0589 and…

  • CVE-2011-0562Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0570 and…

  • CVE-2011-0539HigFeb 10, 2011
    OpenSSL Project
    OpenSSL
    risk 0.49cvss 7.5epss 0.02

    The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it…

  • CVE-2011-0534Feb 10, 2011
    Apache
    Tomcat
    risk 0.00cvss —epss 0.08

    Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request.

  • CVE-2011-0283Feb 10, 2011
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.03

    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request packet that does not trigger a response packet.

  • CVE-2011-0282Feb 10, 2011
    Mit
    Kerberos
    risk 0.00cvss —epss 0.03

    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (NULL pointer dereference or buffer over-read, and daemon crash) via a crafted principal name.

  • CVE-2011-0281Feb 10, 2011
    Mit
    Kerberos
    risk 0.00cvss —epss 0.04

    The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use…

  • CVE-2010-4327Feb 10, 2011
    Novell
    Edirectory
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the NCP service in Novell eDirectory 8.8.5 before 8.8.5.6 and 8.8.6 before 8.8.6.2 allows remote attackers to cause a denial of service (hang) via a malformed FileSetLock request to port 524.

  • CVE-2010-4022Feb 10, 2011
    Mit
    krb5
    risk 0.00cvss —epss 0.04

    The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service…

  • CVE-2010-3718Feb 10, 2011
    Apache
    Tomcat
    risk 0.00cvss —epss 0.01

    Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a…

  • CVE-2011-0608Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573,…

  • CVE-2011-0607Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573,…

  • CVE-2011-0584Feb 10, 2011
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.03

    Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors.

  • CVE-2011-0583Feb 10, 2011
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via the cfform tag.

  • CVE-2011-0582Feb 10, 2011
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allows attackers to obtain sensitive information via unknown vectors.

  • CVE-2011-0581Feb 10, 2011
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.03

    Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags.

  • CVE-2011-0580Feb 10, 2011
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-0578Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to a constructor for an unspecified ActionScript3 object and improper type checking, a different vulnerability than…

  • CVE-2011-0577Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in Adobe Flash Player before 10.2.152.26 allows remote attackers to execute arbitrary code via a crafted font.

  • CVE-2011-0575Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

  • CVE-2011-0574Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573,…

  • CVE-2011-0573Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0574,…

  • CVE-2011-0572Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0573, CVE-2011-0574,…

  • CVE-2011-0571Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574,…

  • CVE-2011-0569Feb 10, 2011
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.05

    The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PFR1 chunk containing an invalid size value that leads to an unexpected sign extension and a buffer overflow, a…

  • CVE-2011-0561Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.01cvss —epss 0.06

    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574,…

  • CVE-2011-0560Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.01cvss —epss 0.06

    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574,…

  • CVE-2011-0559Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted parameters to an unspecified ActionScript method that cause a parameter to be used as an object pointer, a different vulnerability than…

  • CVE-2011-0558Feb 10, 2011
    Adobe Inc.
    Flashplayer
    risk 0.01cvss —epss 0.07

    Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.

  • CVE-2011-0557Feb 10, 2011
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.05

    Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a large count value in 3D assets type 0xFFFFFF45 record, which triggers a "faulty allocation" and memory corruption.

  • CVE-2011-0556Feb 10, 2011
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PFR1 chunk that leads to an unexpected sign extension and an invalid pointer dereference, a different…

  • CVE-2011-0555Feb 10, 2011
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.05

    The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a Director file with a crafted DEMX RIFF chunk that triggers incorrect buffer allocation, a different…

  • CVE-2011-0093Feb 10, 2011
    Microsoft
    Visio
    risk 0.02cvss —epss 0.20

    ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption…

  • CVE-2011-0092Feb 10, 2011
    Microsoft
    Visio
    risk 0.02cvss —epss 0.24

    The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that…

  • CVE-2011-0091Feb 10, 2011
    Microsoft
    Windows Server 2008
    risk 0.00cvss —epss 0.05

    Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos…

  • CVE-2011-0043Feb 10, 2011
    Microsoft
    Windows Xp
    risk 0.00cvss —epss 0.02

    Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum…