VYPR

CVEs

346,118 total · page 6027 of 6,923

AllCriticalHighKEV
  • CVE-2011-0640Jan 25, 2011
    Systemd Project
    Udev
    risk 0.00cvss —epss 0.00

    The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data…

  • CVE-2011-0639Jan 25, 2011
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    Apple Mac OS X does not properly warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a…

  • CVE-2011-0638Jan 25, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Microsoft Windows does not properly warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware…

  • CVE-2011-0637Jan 25, 2011
    IBM
    Aix
    risk 0.00cvss —epss 0.00

    The FC SCSI protocol driver in IBM AIX 6.1 does not verify that a timer is unused before deallocating this timer, which might allow attackers to cause a denial of service (system crash) via unspecified vectors.

  • CVE-2011-0273Jan 25, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.13

    Buffer overflow in crs.exe in HP OpenView Storage Data Protector Cell Manager 6.11 allows remote attackers to execute arbitrary code via unspecified message types.

  • CVE-2010-4353Jan 25, 2011
    Menalto
    Gallery
    risk 0.00cvss —epss 0.02

    Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct…

  • CVE-2010-4341Jan 25, 2011
    SSSD
    Sssd
    risk 0.00cvss —epss 0.00

    The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.

  • CVE-2010-4255Jan 25, 2011
    Xen
    Xen
    risk 0.00cvss —epss 0.01

    The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handle_gdt_ldt_mapping_fault function, which allows guest OS users to cause a denial of…

  • CVE-2010-4708Jan 24, 2011
    Linux Pam
    Pam
    risk 0.00cvss —epss 0.00

    The pam_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam_environment file in a user's home directory, which might allow local users to run programs with an unintended environment by executing a program that relies on the pam_env PAM check.

  • CVE-2010-4707Jan 24, 2011
    Linux Pam
    pam_xauth
    risk 0.00cvss —epss 0.00

    The check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not verify that a certain ACL file is a regular file, which might allow local users to cause a denial of service (resource consumption) via a special file.

  • CVE-2010-4706Jan 24, 2011
    Linux Pam
    pam_xauth
    risk 0.00cvss —epss 0.00

    The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a failure to determine a certain target uid, which might allow local users to delete unintended files by executing a program that relies on…

  • CVE-2011-0410Jan 24, 2011
    Collabnet
    Scrumworks
    risk 0.00cvss —epss 0.02

    CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the…

  • CVE-2011-0352Jan 24, 2011
    Cisco Systems, Inc.
    Linksys WRT54GC
    risk 0.00cvss —epss 0.02

    Buffer overflow in the web-based management interface on the Cisco Linksys WRT54GC router with firmware before 1.06.1 allows remote attackers to cause a denial of service (device crash) via a long string in a POST request.

  • CVE-2011-0274Jan 24, 2011
    Microfocus
    Business Availability Center
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 7.x through 7.55 and 8.x through 8.05, and Business Service Management (BSM) through 9.01, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-0020Jan 24, 2011
    Pango
    Pango
    risk 0.05cvss —epss 0.19

    Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or…

  • CVE-2010-3927Jan 24, 2011
    Lunascape
    Lunascape
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in Lunascape before 6.4.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

  • CVE-2010-3853Jan 24, 2011
    Linux Pam
    pam_namespace
    risk 0.00cvss —epss 0.00

    pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on…

  • CVE-2010-3435Jan 24, 2011
    Linux Pam
    Pam
    risk 0.00cvss —epss 0.00

    The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem…

  • CVE-2010-3431Jan 24, 2011
    Linux Pam
    Pam
    risk 0.00cvss —epss 0.00

    The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not check the return value of the setfsuid system call, which might allow local users to obtain sensitive information by leveraging an unintended uid, as…

  • CVE-2010-3430Jan 24, 2011
    Linux Pam
    Pam
    risk 0.00cvss —epss 0.00

    The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not perform the required setfsgid and setgroups system calls, which might allow local users to obtain sensitive information by leveraging unintended group…

  • CVE-2010-3316Jan 24, 2011
    Linux Pam
    pam_xauth
    risk 0.00cvss —epss 0.00

    The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of the setuid, setgid, and setgroups system calls, which might allow local users to read arbitrary files by executing a program that relies on…

  • CVE-2011-0636Jan 22, 2011
    Nvidia
    Cuda Toolkit
    risk 0.00cvss —epss 0.00

    The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly other versions, do not initialize pinned memory, which allows local users to read potentially sensitive memory, such as file fragments during…

  • CVE-2011-0635Jan 22, 2011
    Simploo
    Simploo CMS
    risk 0.03cvss —epss 0.02

    Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter (FTP-Server field) to the sicore/updates/optionssav operation for index.php.

  • CVE-2011-0002Jan 22, 2011
    Libuser
    Libuser
    risk 0.00cvss —epss 0.04

    libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.

  • CVE-2010-4705Jan 22, 2011
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.01

    Integer overflow in the vorbis_residue_decode_internal function in libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspecified impact and remote attack vectors, related to the sizes of certain integer data types. NOTE: this might overlap CVE-2011-0480.

  • CVE-2010-4704Jan 22, 2011
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted .ogg file, related to the vorbis_floor0_decode function. NOTE: this might overlap CVE-2011-0480.

  • CVE-2010-4243Jan 22, 2011
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka…

  • CVE-2010-4238Jan 22, 2011
    Xen
    Xen
    risk 0.00cvss —epss 0.01

    The vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 is used, allows guest OS users to cause a denial of service (host OS panic) via an attempted access to a virtual CD-ROM device through the blkback driver. NOTE: some of these…

  • CVE-2010-3879Jan 22, 2011
    Fuse
    Fuse
    risk 0.04cvss —epss 0.10

    FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789.

  • CVE-2010-2743Jan 20, 2011
    Microsoft
    Windows
    risk 0.04cvss —epss 0.15

    The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by…

  • CVE-2011-0519Jan 20, 2011
    Gallarific
    PHP Photo Gallery Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2011-0518Jan 20, 2011
    Lotuscms
    Fraise
    risk 0.04cvss —epss 0.16

    Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via the system parameter to index.php.

  • CVE-2011-0517Jan 20, 2011
    Sielcosistemi
    Winlog Pro
    risk 0.06cvss —epss 0.40

    Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823.

  • CVE-2011-0516Jan 20, 2011
    Epromptc
    Betmore Site Suite
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers to execute arbitrary SQL commands via the bid parameter.

  • CVE-2011-0515Jan 20, 2011
    Kingsoft
    Antivirus
    risk 0.03cvss —epss 0.01

    KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause a denial of service (crash) via a crafted request that is not properly handled by the KiFastCallEntry hook.

  • CVE-2011-0514Jan 20, 2011
    Microfocus
    Data Protector Manager
    risk 0.07cvss —epss 0.49

    The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash) via a packet with a large data size to TCP port 1530.

  • CVE-2011-0513Jan 20, 2011
    Securstar
    Drivecrypt
    risk 0.03cvss —epss 0.01

    DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier allows local users to execute arbitrary code via a crafted argument to the 0x00073800 IOCTL.

  • CVE-2011-0512Jan 20, 2011
    PHP-Fusion
    Teams Structure
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the team_id parameter.

  • CVE-2011-0511Jan 20, 2011
    Joomla
    allCineVid
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the allCineVid component (com_allcinevid) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

  • CVE-2011-0510Jan 20, 2011
    Advanced Webhost Billing System
    Advanced Webhost Billing System
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an add_other action.

  • CVE-2011-0509Jan 20, 2011
    Vaadin
    Vaadin
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the index page.

  • CVE-2011-0508Jan 20, 2011
    Contao
    CMS
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in system/modules/comments/Comments.php in Contao CMS 2.9.2, and possibly other versions before 2.9.3, allows remote attackers to inject arbitrary web script or HTML via the HTTP X_FORWARDED_FOR header, which is stored by…

  • CVE-2011-0507Jan 20, 2011
    BlackMoon
    FTP
    risk 0.03cvss —epss 0.05

    FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.1737, allows remote attackers to cause a denial of service (crash) via a large number of PORT commands with long arguments, which triggers a NULL pointer…

  • CVE-2011-0506Jan 20, 2011
    Ax
    Ax Developer CMS
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers to execute arbitrary code via a .. (dot dot) in the aXconf[default_language] parameter.

  • CVE-2011-0505Jan 20, 2011
    Zwii
    Zwii
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the set[template][value] parameter.

  • CVE-2011-0504Jan 20, 2011
    VAM
    Shop
    risk 0.03cvss —epss 0.04

    Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote attackers to inject arbitrary web script or HTML via the (1) status parameter to admin/orders.php, (2) search parameter to admin/customers.php, or (3) STORE_NAME…

  • CVE-2011-0503Jan 20, 2011
    VaM Shop
    VaM Shop
    risk 0.03cvss —epss 0.02

    Cross-site request forgery (CSRF) vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier versions allows remote attackers to hijack the authentication of administrators for requests that (1) change user status via admin/customers.php or (2) change user permissions via…

  • CVE-2011-0502Jan 20, 2011
    Musanim
    Music Animation Machine Midi Player
    risk 0.03cvss —epss 0.06

    Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a long line in a MIDI (.mid) file.

  • CVE-2011-0501Jan 20, 2011
    Music Animation Machine
    MIDI Player
    risk 0.04cvss —epss 0.16

    Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long line in a .mamx file.

  • CVE-2011-0500Jan 20, 2011
    Verytools
    Videospirit Lite
    risk 0.05cvss —epss 0.31

    Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "value"…