VYPR

CVEs

345,986 total · page 6067 of 6,920

AllCriticalHighKEV
  • CVE-2010-2904Jul 28, 2010
    SAP
    Netweaver
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the System Landscape Directory (SLD) component 6.4 through 7.02 in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter to testsdic and the (2) helpstring parameter to…

  • CVE-2010-2903Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecified impact and remote attack vectors.

  • CVE-2010-2902Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    The SVG implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

  • CVE-2010-2901Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    The rendering implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

  • CVE-2010-2900Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors.

  • CVE-2010-2899Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the layout implementation in Google Chrome before 5.0.375.125 allows remote attackers to obtain sensitive information from process memory via unknown vectors.

  • CVE-2010-2898Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library, which has unknown impact and attack vectors.

  • CVE-2010-2897Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack vectors.

  • CVE-2010-2896Jul 28, 2010
    IBM
    Filenet Content Manager
    risk 0.00cvss —epss 0.01

    IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors.

  • CVE-2010-1452Jul 28, 2010
    Apache
    HTTP Server
    risk 0.02cvss —epss 0.22

    The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path.

  • CVE-2009-4974Jul 28, 2010
    Sweetphp
    Totalcalendar
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the box parameter.

  • CVE-2009-4973Jul 28, 2010
    Sweetphp
    Totalcalendar
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands via the selectedCal parameter in a SwitchCal action.

  • CVE-2009-4972Jul 28, 2010
    Simpleid
    SimpleID
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php (aka the log in page) in SimpleID before 0.6.5 allows remote attackers to inject arbitrary web script or HTML via the s parameter.

  • CVE-2009-4971Jul 28, 2010
    TYPO3
    AJAX Chat
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the AJAX Chat (vjchat) extension before 0.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4970Jul 28, 2010
    TYPO3
    t3m_affiliate
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the t3m_affiliate extension 0.5.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4969Jul 28, 2010
    TYPO3
    SBbanner
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Solidbase Bannermanagement (SBbanner) extension 1.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4968Jul 28, 2010
    TYPO3
    Event Registration
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Event Registration (event_registr) extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4967Jul 28, 2010
    TYPO3
    Car
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Car (car) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4966Jul 28, 2010
    TYPO3
    AST ZipCodeSearch
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the AST ZipCodeSearch (ast_addresszipsearch) extension 0.5.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4965Jul 28, 2010
    TYPO3
    AIRware Lexicon
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the AIRware Lexicon (air_lexicon) extension 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4964Jul 28, 2010
    KSP
    2006 FINAL
    risk 0.03cvss —epss 0.06

    Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .M3U playlist file.

  • CVE-2009-4963Jul 28, 2010
    TYPO3
    Commerce Extension
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4962Jul 28, 2010
    Adammo
    Fat Player
    risk 0.06cvss —epss 0.31

    Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information.

  • CVE-2009-4961Jul 28, 2010
    Lanai Core
    Lanai Core
    risk 0.03cvss —epss 0.02

    Lanai Core 0.6 allows remote attackers to obtain configuration information via a direct request to info.php, which calls the phpinfo function.

  • CVE-2009-4960Jul 28, 2010
    Lanai Core
    Lanai Core
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in modules/backup/download.php in Lanai Core 0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.

  • CVE-2009-4959Jul 28, 2010
    TYPO3
    T3M E-Mail Marketing Tool
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the T3M E-Mail Marketing Tool (t3m) extension 0.2.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4958Jul 28, 2010
    Emophp
    Emo Breeder Manager
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in video.php in EMO Breeder Manager (aka EMO Breader Manager) allows remote attackers to execute arbitrary SQL commands via the idd parameter.

  • CVE-2010-2704Jul 28, 2010
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.15

    Buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long HTTP request to nnmrptconfig.exe.

  • CVE-2010-2703Jul 28, 2010
    Microfocus
    OpenView Network Node Manager
    risk 0.09cvss —epss 0.71

    Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when running on Windows, allows remote attackers to execute arbitrary code via a long HTTP request to webappmon.exe.

  • CVE-2010-2534Jul 28, 2010
    OpenTTD
    Openttd
    risk 0.00cvss —epss 0.03

    The NetworkSyncCommandQueue function in network/network_command.cpp in OpenTTD before 1.0.3 does not properly clear a pointer in a linked list, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted request, related to the…

  • CVE-2010-2529Jul 28, 2010
    Iputils
    Iputils
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service (hang) via a crafted echo response.

  • CVE-2010-2337Jul 28, 2010
    Rsa
    Federated Identity Manager
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.

  • CVE-2010-1577Jul 28, 2010
    Cisco Systems, Inc.
    Internet Streamer
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x, and 2.5.x before 2.5.7 allows remote attackers to read arbitrary files via a crafted URL.

  • CVE-2010-0833Jul 28, 2010
    Likewise
    Likewise Open
    risk 0.00cvss —epss 0.04

    The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote…

  • CVE-2010-0213Jul 28, 2010
    Isc
    Bind
    risk 0.01cvss —epss 0.07

    BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the…

  • CVE-2010-0212Jul 28, 2010
    OpenLDAP
    Openldap
    risk 0.00cvss —epss 0.06

    OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smr_normalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in…

  • CVE-2010-0211CriJul 28, 2010
    OpenLDAP
    Openldap
    risk 0.69cvss 9.8epss 0.29

    The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN…

  • CVE-2010-2859Jul 25, 2010
    Boesch It
    Simpnews
    risk 0.00cvss —epss 0.01

    news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message.

  • CVE-2010-2858Jul 25, 2010
    Boesch It
    Simpnews
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) layout and (2) sortorder parameters.

  • CVE-2010-2857Jul 25, 2010
    Joomla
    Music Manager
    risk 0.03cvss —epss 0.05

    Directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the cid parameter to album.html.

  • CVE-2010-2856Jul 25, 2010
    Oscss
    Oscss
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in admin/currencies.php in osCSS 1.2.2, and probably earlier versions, allows remote attackers to inject arbitrary web script or HTML via the page parameter.

  • CVE-2010-2855Jul 25, 2010
    Jared Meeker
    Event Horizon
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in modfile.php in Event Horizon (EVH) 1.1.10, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) YourEmail and (2) VerificationNumber parameters. NOTE: the provenance of this information…

  • CVE-2010-2854Jul 25, 2010
    Jared Meeker
    Event Horizon
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in modfile.php in Event Horizon (EVH) 1.1.10, when magic_quotes_gpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the (1) YourEmail and (2) VerificationNumber parameters, which are not properly…

  • CVE-2010-2853Jul 25, 2010
    Iscripts
    Visualcaster
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arbitrary SQL commands via the product_id parameter.

  • CVE-2010-2852Jul 25, 2010
    Runcms
    Runcms
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie_debug.php in RunCms 2.1, when the Headlines module is enabled, allows remote attackers to inject arbitrary web script or HTML via the url parameter.

  • CVE-2010-2851Jul 25, 2010
    Ordasoft
    Com Booklibrary
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.

  • CVE-2010-2850Jul 25, 2010
    NuBuilder
    nuBuilder
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in productionnu2/fileuploader.php in nuBuilder 10.04.20, and possibly other versions before 10.07.12, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dir parameter.

  • CVE-2010-2849Jul 25, 2010
    NuBuilder
    nuBuilder
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in productionnu2/nuedit.php in nuBuilder 10.04.20, and possibly other versions before 10.07.12, allows remote attackers to inject arbitrary web script or HTML via the f parameter.

  • CVE-2010-2848Jul 25, 2010
    Joomla
    ArtForms
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.

  • CVE-2010-2847Jul 25, 2010
    Joomla
    ArtForms
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allow remote attackers to execute arbitrary SQL commands via the viewform parameter in a (1) ferforms or (2) tferforms action to index.php, and the (3) id…