VYPR

CVEs

346,117 total · page 6030 of 6,923

AllCriticalHighKEV
  • CVE-2010-4263Jan 18, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.03

    The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Linux kernel before 2.6.34, when Single Root I/O Virtualization (SR-IOV) and promiscuous mode are enabled but no VLANs are registered, allows remote attackers to…

  • CVE-2010-4166Jan 18, 2011
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via (1) the filter_order parameter in a com_weblinks category action to index.php, (2) the filter_order_Dir parameter in a com_weblinks category action…

  • CVE-2009-5051Jan 18, 2011
    Hastymail
    Hastymail2
    risk 0.00cvss —epss 0.01

    Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

  • CVE-2010-4566Jan 14, 2011
    Citrix Systems
    Access Gateway
    risk 0.05cvss —epss 0.28

    The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute…

  • CVE-2010-4339Jan 14, 2011
    Hypermail
    Hypermail
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Hypermail 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted From address, which is not properly handled when indexing messages.

  • CVE-2010-4337Jan 14, 2011
    Gnash
    gnash
    risk 0.00cvss —epss 0.00

    The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/gnash-configure-errors.$$, (2) /tmp/gnash-configure-warnings.$$, or (3) /tmp/gnash-configure-recommended.$$ files.

  • CVE-2010-4335Jan 14, 2011
    Cakephp
    Cakephp
    risk 0.00cvss —epss 0.55

    The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize…

  • CVE-2010-3086Jan 14, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    include/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception fixup, which allows local users to cause a denial of service (panic) via an invalid application that triggers a page fault.

  • CVE-2010-0115Jan 14, 2011
    Symantec
    Web Gateway
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter.

  • CVE-2010-3840Jan 14, 2011
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line…

  • CVE-2010-3839Jan 14, 2011
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.

  • CVE-2010-3838Jan 14, 2011
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses the (1) GREATEST or (2) LEAST function with a mixed list of numeric and LONGBLOB arguments, which is not properly…

  • CVE-2010-3837Jan 14, 2011
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied…

  • CVE-2010-3836Jan 14, 2011
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (assertion failure and server crash) via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers.

  • CVE-2010-3835Jan 14, 2011
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the…

  • CVE-2010-3834Jan 14, 2011
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and…

  • CVE-2010-3833Jan 14, 2011
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value functions such as (1) LEAST and (2) GREATEST, related to…

  • CVE-2010-4695Jan 14, 2011
    Catb
    Gif2png
    risk 0.00cvss —epss 0.02

    A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png_2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in…

  • CVE-2010-4694Jan 14, 2011
    Catb
    Gif2png
    risk 0.00cvss —epss 0.02

    Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output…

  • CVE-2011-0485Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "stale pointer."

  • CVE-2011-0484Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale rendering node."

  • CVE-2011-0483Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-0482Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML…

  • CVE-2011-0481Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF shading.

  • CVE-2011-0480Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified…

  • CVE-2011-0479Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer.

  • CVE-2011-0478Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-0477Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-0476Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers an out-of-memory error.

  • CVE-2011-0475Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a PDF document.

  • CVE-2011-0474Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown…

  • CVE-2011-0473Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via…

  • CVE-2011-0472Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a multi-page…

  • CVE-2011-0471Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    The node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 does not properly handle pointers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-0470Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle extensions notification, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.

  • CVE-2009-5018Jan 14, 2011
    Catb
    Gif2png
    risk 0.04cvss —epss 0.11

    Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long command-line argument, as demonstrated by a CGI program that launches gif2png.

  • CVE-2010-4334Jan 14, 2011
    Perl Foundation
    IO::Socket::SSL
    risk 0.00cvss —epss 0.02

    The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions.

  • CVE-2011-0310Jan 13, 2011
    IBM
    Websphere Mq
    risk 0.00cvss —epss 0.03

    Buffer overflow in IBM WebSphere MQ 7.0 before 7.0.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted header field in a message.

  • CVE-2011-0271Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.07

    The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection…

  • CVE-2011-0270Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.16

    Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in input data that involves an invalid template name.

  • CVE-2011-0269Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.17

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long schd_select1 parameter.

  • CVE-2011-0268Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.16

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long text1 parameter.

  • CVE-2011-0267Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.09cvss —epss 0.72

    Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long (1) schdParams or (2) nameParams parameter, a different vulnerability than CVE-2011-0266.

  • CVE-2011-0266Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.09cvss —epss 0.70

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long nameParams parameter, a different vulnerability than CVE-2011-0267.2.

  • CVE-2011-0265Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.17

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long data_select1 parameter.

  • CVE-2011-0264Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.17

    Stack-based buffer overflow in ovutil.dll in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long COOKIE variable.

  • CVE-2011-0263Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.17

    Multiple stack-based buffer overflows in ovas.exe in the OVAS service in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long (1) Source Node or (2) Destination Node variable.

  • CVE-2011-0262Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.17

    Buffer overflow in the stringToSeconds function in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via large values of variables to jovgraph.exe.

  • CVE-2011-0261Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.16

    Unspecified vulnerability in jovgraph.exe in jovgraph in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a malformed displayWidth option in the arg parameter.

  • CVE-2010-4647Jan 13, 2011
    Eclipse
    Eclipse Ide
    risk 0.03cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.