VYPR

CVEs

346,031 total · page 6052 of 6,921

AllCriticalHighKEV
  • CVE-2010-3779Oct 6, 2010
    Dovecot (software)
    Dovecot
    risk 0.00cvss —epss 0.01

    Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.beta2 grants the admin permission to the owner of each mailbox in a non-public namespace, which might allow remote authenticated users to bypass intended access restrictions by changing the ACL of a mailbox, as demonstrated by a…

  • CVE-2010-3707Oct 6, 2010
    Dovecot (software)
    Dovecot
    risk 0.00cvss —epss 0.03

    plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain…

  • CVE-2010-3706Oct 6, 2010
    Dovecot (software)
    Dovecot
    risk 0.00cvss —epss 0.02

    plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain…

  • CVE-2010-3658Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621,…

  • CVE-2010-3657Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3656.

  • CVE-2010-3656Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3657.

  • CVE-2010-3632Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621,…

  • CVE-2010-3631Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.12

    Array index error in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2010-3630Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

  • CVE-2010-3629Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted image, a different vulnerability than CVE-2010-3620.

  • CVE-2010-3628Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621,…

  • CVE-2010-3627Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via unknown vectors.

  • CVE-2010-3626Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-2889.

  • CVE-2010-3625Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.08

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnerability."

  • CVE-2010-3624Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execute arbitrary code via a crafted image.

  • CVE-2010-3623Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2010-3622Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621,…

  • CVE-2010-3621Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3622,…

  • CVE-2010-3620Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted image, a different vulnerability than CVE-2010-3629.

  • CVE-2010-3619Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3621, CVE-2010-3622,…

  • CVE-2010-3433Oct 6, 2010
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.03

    The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22, 8.2 before 8.2.18, 8.3 before 8.3.12, 8.4 before 8.4.5, and 9.0 before 9.0.1 do not properly protect script execution by a different SQL user identity within the same…

  • CVE-2010-2890Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-3619, CVE-2010-3621, CVE-2010-3622,…

  • CVE-2010-2889Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.02cvss —epss 0.27

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-3626.

  • CVE-2010-2888Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Multiple unspecified vulnerabilities in an ActiveX control in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Windows allow attackers to execute arbitrary code via unknown vectors.

  • CVE-2010-2887Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in Adobe Reader and Acrobat 9.x before 9.4 on Linux allow attackers to gain privileges via unknown vectors.

  • CVE-2010-2367Oct 6, 2010
    Norenz
    AD Edit2
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-3763Oct 5, 2010
    Mantisbt
    Mantisbt
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in core/summary_api.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303.

  • CVE-2010-3762Oct 5, 2010
    Isc
    Bind
    risk 0.01cvss —epss 0.08

    ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service (daemon crash) via a DNS query.

  • CVE-2010-3761Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-700. NOTE: this might overlap CVE-2010-3058 or CVE-2010-3059.

  • CVE-2010-3760Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.03

    FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service (NULL pointer…

  • CVE-2010-3759Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.04

    FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via…

  • CVE-2010-3758Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.01cvss —epss 0.07

    Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the (1) AGI_SendToLog (aka…

  • CVE-2010-3757Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.04

    Format string vulnerability in the _Eventlog function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via format string specifiers located after…

  • CVE-2010-3756Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.01

    The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of…

  • CVE-2010-3755Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.02

    The _DAS_ReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via data in a…

  • CVE-2010-3754Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.05

    The FXCLI_OraBR_Exec_Command function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 uses values of packet fields to determine the content and length of data copied to memory, which allows…

  • CVE-2010-3753Oct 5, 2010
    Xelerance
    Openswan
    risk 0.00cvss —epss 0.02

    programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the cisco_banner (aka server_banner) field, a different vulnerability than CVE-2010-3308.

  • CVE-2010-3752Oct 5, 2010
    Xelerance
    Openswan
    risk 0.00cvss —epss 0.02

    programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302.

  • CVE-2010-3308Oct 5, 2010
    Xelerance
    Openswan
    risk 0.00cvss —epss 0.04

    Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long cisco_banner (aka server_banner) field.

  • CVE-2010-3303Oct 5, 2010
    Mantisbt
    Mantisbt
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) a plugin name, related to manage_plugin_uninstall.php; (2) an enumeration value or (3) a String value of a custom…

  • CVE-2010-3302Oct 5, 2010
    Xelerance
    Openswan
    risk 0.00cvss —epss 0.04

    Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.

  • CVE-2010-0218Oct 5, 2010
    Isc
    Bind
    risk 0.00cvss —epss 0.04

    ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired (RD) queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query.

  • CVE-2010-3742Oct 5, 2010
    Simple CMS
    Simple CMS
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) meta or (2) phpincdir parameter, a different issue than CVE-2010-3307.

  • CVE-2010-3741Oct 5, 2010
    Rim
    Blackberry Desktop Software
    risk 0.00cvss —epss 0.00

    The offline backup mechanism in Research In Motion (RIM) BlackBerry Desktop Software uses single-iteration PBKDF2, which makes it easier for local users to decrypt a .ipd file via a brute-force attack.

  • CVE-2010-3740Oct 5, 2010
    IBM
    Db2
    risk 0.00cvss —epss 0.01

    The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption and system hang) via the…

  • CVE-2010-3739Oct 5, 2010
    IBM
    DB2 UDB
    risk 0.00cvss —epss 0.01

    The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection (aka CONNECT and AUTHENTICATION) events in certain circumstances in which database-level audit settings were intended, which might make it easier…

  • CVE-2010-3738Oct 5, 2010
    IBM
    Db2
    risk 0.00cvss —epss 0.01

    The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it easier for remote authenticated…

  • CVE-2010-3737Oct 5, 2010
    IBM
    Db2
    risk 0.00cvss —epss 0.01

    Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (heap memory consumption) by executing a (1) user-defined function (UDF) or (2) stored procedure while using a different code page…

  • CVE-2010-3736Oct 5, 2010
    IBM
    Db2
    risk 0.00cvss —epss 0.01

    Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a denial of service (heap memory consumption) by using a different code page than the database server.

  • CVE-2010-3735Oct 5, 2010
    IBM
    Db2
    risk 0.00cvss —epss 0.01

    The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving certain UNION ALL views, leading to an indefinitely large amount of compilation time.