VYPR

CVEs

346,028 total · page 6063 of 6,921

AllCriticalHighKEV
  • CVE-2010-2519Aug 19, 2010
    FreeType
    Freetype
    risk 0.01cvss —epss 0.06

    Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font…

  • CVE-2010-2500Aug 19, 2010
    FreeType
    Freetype
    risk 0.00cvss —epss 0.05

    Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

  • CVE-2010-2499Aug 19, 2010
    FreeType
    Freetype
    risk 0.00cvss —epss 0.06

    Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment.

  • CVE-2010-2498Aug 19, 2010
    FreeType
    Freetype
    risk 0.00cvss —epss 0.06

    The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a…

  • CVE-2010-2497Aug 19, 2010
    FreeType
    Freetype
    risk 0.00cvss —epss 0.06

    Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

  • CVE-2010-2242Aug 19, 2010
    Libvirt
    Libvirt
    risk 0.00cvss —epss 0.00

    Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS…

  • CVE-2010-2239Aug 19, 2010
    Libvirt
    Libvirt
    risk 0.00cvss —epss 0.00

    Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

  • CVE-2010-2238Aug 19, 2010
    Libvirt
    Libvirt
    risk 0.00cvss —epss 0.00

    Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown…

  • CVE-2010-2237Aug 19, 2010
    Libvirt
    Libvirt
    risk 0.00cvss —epss 0.00

    Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.

  • CVE-2010-2076CriAug 19, 2010
    Apache
    Cxf
    risk 0.64cvss 9.8epss 0.10

    Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read…

  • CVE-2010-2934Aug 17, 2010
    Znc
    Znc
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in ZNC 0.092 allow remote attackers to cause a denial of service (exception and daemon crash) via unknown vectors related to "unsafe substr() calls."

  • CVE-2010-2812Aug 17, 2010
    Znc
    Znc
    risk 0.00cvss —epss 0.03

    Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service (exception and daemon crash) via a PING command that lacks an argument.

  • CVE-2010-1516Aug 17, 2010
    Swftools
    Swftools
    risk 0.00cvss —epss 0.03

    Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via (1) a crafted PNG file, related to the getPNG function in lib/png.c; or (2) a crafted JPEG file, related to the jpeg_load function in lib/jpeg.c.

  • CVE-2010-3032Aug 17, 2010
    SAP
    Crystal Reports
    risk 0.01cvss —epss 0.06

    Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GIOP packet with a crafted size, which triggers a…

  • CVE-2010-3031Aug 17, 2010
    Wyse
    Thinos Hf
    risk 0.00cvss —epss 0.04

    Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly other versions before ThinOS 6.5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the LPD service.

  • CVE-2010-3030Aug 17, 2010
    Tomaz Muraus
    Open Blog
    risk 0.03cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests that change the administrative password. NOTE: the provenance of this information is…

  • CVE-2010-2939Aug 17, 2010
    OpenSSL Project
    OpenSSL
    risk 0.04cvss —epss 0.10

    Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute…

  • CVE-2010-2241Aug 17, 2010
    Red Hat
    Directory Server
    risk 0.00cvss —epss 0.00

    The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server…

  • CVE-2010-1870Aug 17, 2010
    Apache
    Struts
    risk 0.10cvss —epss 0.91

    The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects and bypass the "#"…

  • CVE-2010-1525Aug 17, 2010
    Autonomy Corporation
    Keyview
    risk 0.00cvss —epss 0.04

    Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted size for an…

  • CVE-2010-1524Aug 17, 2010
    Autonomy Corporation
    Keyview
    risk 0.00cvss —epss 0.03

    The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via unspecified vectors related to allocation of an array of pointers and "string indexing,"…

  • CVE-2010-0135Aug 17, 2010
    Autonomy Corporation
    Keyview
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to "data blocks."

  • CVE-2010-0134Aug 17, 2010
    Autonomy Corporation
    Keyview
    risk 0.00cvss —epss 0.04

    Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer…

  • CVE-2010-0133Aug 17, 2010
    Autonomy Corporation
    Keyview
    risk 0.00cvss —epss 0.04

    Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allow remote attackers to execute arbitrary code via unspecified vectors related to "certain records."

  • CVE-2010-0131Aug 17, 2010
    Symantec
    Mail Security
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr.dll), as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to floating point…

  • CVE-2010-0126Aug 17, 2010
    Autonomy Corporation
    Keyview
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in an unspecified library in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted compound file, as demonstrated using a Quattro Pro file, which is not…

  • CVE-2009-3737Aug 17, 2010
    Oracle Corporation
    Siebel Option Pack for IE
    risk 0.00cvss —epss 0.04

    The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document.

  • CVE-2010-2826Aug 17, 2010
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Cisco Wireless Control System (WCS) 6.0.x before 6.0.196.0 allows remote authenticated users to execute arbitrary SQL commands via vectors related to the ORDER BY clause of the Client List screens, aka Bug ID CSCtf37019.

  • CVE-2010-2825Aug 17, 2010
    Cisco Systems, Inc.
    Application Control Engine (ACE) 4710 Appliance
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1) for Catalyst 6500 series switches and 7600 series routers, and the Cisco…

  • CVE-2010-2824Aug 17, 2010
    Cisco Systems, Inc.
    Ace Module
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service…

  • CVE-2010-2823Aug 17, 2010
    Cisco Systems, Inc.
    Ace 4710
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.6) allows remote attackers to cause a denial of service (device reload) via crafted HTTP packets, related to HTTP, RTSP, and SIP…

  • CVE-2010-2822Aug 17, 2010
    Cisco Systems, Inc.
    Application Control Engine (ACE) 4710 Appliance
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine (ACE) Module with software before A2(3.2) for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine (ACE) 4710 appliance with software…

  • CVE-2010-3029Aug 16, 2010
    Phpkick
    Phpkick
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands via the gameday parameter in an overview action.

  • CVE-2010-3028Aug 16, 2010
    Joomla
    Aardvertiser
    risk 0.00cvss —epss 0.00

    The Aardvertiser component before 2.2.1 for Joomla! uses insecure permissions (777) in unspecified folders, which allows local users to modify, create, or delete certain files.

  • CVE-2010-3027Aug 16, 2010
    Tycoon
    Baseball Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary SQL commands via the game_id parameter in a game_player action.

  • CVE-2010-3026Aug 16, 2010
    Tomaz Muraus
    Open Blog
    risk 0.03cvss —epss 0.02

    Cross-site request forgery (CSRF) vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests to admin/users/edit that grant…

  • CVE-2010-3025Aug 16, 2010
    Tomaz Muraus
    Open Blog
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) excerpt parameter to application/modules/admin/controllers/posts.php, as reachable by…

  • CVE-2010-3024Aug 16, 2010
    Hulihanapplications
    Diamondlist
    risk 0.03cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the site's…

  • CVE-2010-3023Aug 16, 2010
    Hulihanapplications
    Diamondlist
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) category[description] parameter to user/main/update_category, which is not properly handled by…

  • CVE-2010-3022Aug 16, 2010
    Drupal
    Devel Module
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Performance logging module in the Devel module 5.x before 5.x-1.3 and 6.x before 6.x-1.21 for Drupal allows remote authenticated users, with add url aliases and report access permissions, to inject arbitrary web script or HTML via…

  • CVE-2009-4269Aug 16, 2010
    Apache
    Derby
    risk 0.00cvss —epss 0.01

    The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the size of the set of inputs to SHA-1, which produces a small search space that makes it easier for local and possibly…

  • CVE-2010-3021Aug 16, 2010
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service (CPU consumption and application hang) via an animated PNG image.

  • CVE-2010-3020Aug 16, 2010
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content.

  • CVE-2010-3019Aug 16, 2010
    Opera
    Opera
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service (application crash or hang) via vectors related to HTML5 canvas painting operations that occur during the application of transformations.

  • CVE-2010-2827Aug 16, 2010
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Cisco IOS 15.1(2)T allows remote attackers to cause a denial of service (resource consumption and TCP outage) via spoofed TCP packets, related to embryonic TCP connections that remain in the SYN_RCVD or SYN_SENT state, aka Bug ID CSCti18193.

  • CVE-2010-2576Aug 16, 2010
    Opera
    Opera
    risk 0.00cvss —epss 0.03

    Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote attackers to conduct clickjacking attacks, and consequently execute arbitrary code, via vectors involving (1) closing a tab or (2) hiding a…

  • CVE-2010-1886Aug 16, 2010
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server,…

  • CVE-2010-1799Aug 16, 2010
    Apple Inc.
    Quicktime
    risk 0.06cvss —epss 0.34

    Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

  • CVE-2010-1797Aug 16, 2010
    FreeType
    Freetype
    risk 0.05cvss —epss 0.31

    Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote…

  • CVE-2010-3013Aug 16, 2010
    Pligg
    CMS
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577.