VYPR

CVEs

346,031 total · page 6049 of 6,921

AllCriticalHighKEV
  • CVE-2010-3576Oct 14, 2010
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect integrity and availability, related to the SCSI enclosure services device driver.

  • CVE-2010-3575Oct 14, 2010
    Oracle Corporation
    Communications Messaging Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 6.0, 6.2, 6.3, and 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Mail.

  • CVE-2010-3564Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous…

  • CVE-2010-3547Oct 14, 2010
    Oracle Corporation
    PeopleSoft FMS ESA - EX
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft FMS ESA - EX component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3546Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Sun Java System Identity Manager component in Oracle Sun Products Suite 8.1 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3545Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.

  • CVE-2010-3544Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration. NOTE: the previous information was…

  • CVE-2010-3542Oct 14, 2010
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality, related to USB.

  • CVE-2010-3540Oct 14, 2010
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to ZFS.

  • CVE-2010-3539Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Fms
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS - GL component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different…

  • CVE-2010-3538Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Fms
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS - GL component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different…

  • CVE-2010-3537Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Fms
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS - AM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3536Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Scm
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3535Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Directory Server Enterprise Edition component in Oracle Sun Products Suite 6.0, 6.1, 6.2, and 6.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Identity Synchronization for Windows.

  • CVE-2010-3534Oct 14, 2010
    Oracle Corporation
    Primavera P6 Enterprise Project Portfolio Management
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 6.21.3.0 and 7.0.1.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Project Management…

  • CVE-2010-3533Oct 14, 2010
    Oracle Corporation
    Peoplesoft And Jdedwards Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise SCM OM and CRM Order Capture component in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3532Oct 14, 2010
    Oracle Corporation
    PeopleSoft Enterprise CRM - Order Capture
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise CRM - Order Capture component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #28 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3531Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Fms
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS ESA - RM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3530Oct 14, 2010
    Oracle Corporation
    Peoplesoft And Jdedwards Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HCM - HR component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #13 and 9.1 Bundle #3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3529Oct 14, 2010
    Oracle Corporation
    Peoplesoft And Jdedwards Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS - Cash Management component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3528Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise CRM - Common Components component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #41, 9.0 Bundle #28, and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2010-3527Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Fms
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS - AM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect integrity and availability via unknown vectors.

  • CVE-2010-3526Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise SCM - PO component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3525Oct 14, 2010
    Oracle Corporation
    Peoplesoft And Jdedwards Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the (1) PeopleSoft Enterprise FMS, (2) SCM, (3) EPM, (4) CRM, and (5) Campus Solutions components in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3524Oct 14, 2010
    Oracle Corporation
    Peoplesoft And Jdedwards Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise SCM - Strategic Sourcing component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3523Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2010-3522Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2010-2601Oct 14, 2010
    Rim
    Blackberry Enterprise Server
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted…

  • CVE-2010-3903Oct 14, 2010
    Openconnect
    OpenConnect
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service (application crash) via a 404 HTTP status code.

  • CVE-2010-3902Oct 14, 2010
    Openconnect
    OpenConnect
    risk 0.00cvss —epss 0.02

    OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list.

  • CVE-2010-3901Oct 14, 2010
    Openconnect
    OpenConnect
    risk 0.00cvss —epss 0.01

    OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that (1) does not correspond to the server hostname or (2) is presented in circumstances…

  • CVE-2010-3900Oct 14, 2010
    Christian Dywan
    Midori
    risk 0.00cvss —epss 0.01

    Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312.

  • CVE-2010-3312Oct 14, 2010
    GNOME Foundation
    Epiphany
    risk 0.00cvss —epss 0.01

    Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509…

  • CVE-2010-3192Oct 14, 2010
    GNU
    Glibc
    risk 0.00cvss —epss 0.02

    Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated…

  • CVE-2010-3076Oct 14, 2010
    smbind
    smbind
    risk 0.00cvss —epss 0.02

    The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the…

  • CVE-2010-3071Oct 14, 2010
    Bip
    bip
    risk 0.00cvss —epss 0.03

    bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command.

  • CVE-2009-5009Oct 14, 2010
    Infradead
    Openconnect
    risk 0.00cvss —epss 0.01

    Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.

  • CVE-2009-5008Oct 14, 2010
    Cisco Systems, Inc.
    Secure Desktop
    risk 0.00cvss —epss 0.00

    Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file.

  • CVE-2009-5007Oct 14, 2010
    Cisco Systems, Inc.
    Anyconnect SSL VPN
    risk 0.00cvss —epss 0.00

    The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files.

  • CVE-2010-3521Oct 14, 2010
    Oracle Corporation
    PeopleSoft Enterprise HCM ePay
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HCM ePay component in Oracle PeopleSoft and JDEdwards Suite 9.0 to Payroll Update 10-C and 9.1 to Payroll Update 10-C allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3520Oct 14, 2010
    Oracle Corporation
    Peoplesoft And Jdedwards Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HCM - GP France component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle #12, 8.9 GP Update 2010-E, 9.0 GP Update 2010-E, and 9.1 GP Update 2010-E allows remote authenticated users to affect confidentiality and…

  • CVE-2010-3519Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote authenticated users to affect integrity via unknown vectors.

  • CVE-2010-3518Oct 14, 2010
    Oracle Corporation
    PeopleSoft Enterprise HCM GP - Japan
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HCM GP - Japan component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle #13, 8.9 GP Update 2010-E, 9.0 GP Update 2010-E, and 9.1 GP Update 2010-E allows remote authenticated users to affect confidentiality and…

  • CVE-2010-3517Oct 14, 2010
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to Kernel/X86.

  • CVE-2010-3516Oct 14, 2010
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to InfiniBand.

  • CVE-2010-3515Oct 14, 2010
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Solaris component in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to Kernel/Disk Driver.

  • CVE-2010-3514Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.03cvss —epss 0.04

    Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container.

  • CVE-2010-3513Oct 14, 2010
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect integrity and availability via unknown vectors related to Device Drivers.

  • CVE-2010-3512Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0u8 allows remote authenticated users to affect confidentiality, related to DAV (WebDAV).

  • CVE-2010-3511Oct 14, 2010
    Oracle Corporation
    Opensolaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle OpenSolaris allows local users to affect integrity and availability via unknown vectors related to Tooltalk.