VYPR

CVEs

345,986 total · page 6073 of 6,920

AllCriticalHighKEV
  • CVE-2010-2205Jun 30, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, access uninitialized memory, which allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2010-2204Jun 30, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.13

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

  • CVE-2010-2203Jun 30, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Adobe Reader and Acrobat 9.x before 9.3.3 on UNIX allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2010-2202Jun 30, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2207,…

  • CVE-2010-2201Jun 30, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.14

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content involving the (1) pushstring (0x2C) operator, (2) debugfile (0xF1) operator, and an "invalid pointer…

  • CVE-2010-2168Jun 30, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.14

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content, involving the newfunction (0x44) operator and an "invalid pointer vulnerability" that triggers memory…

  • CVE-2010-1521Jun 30, 2010
    Taskfreak
    Taskfreak\!
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php.

  • CVE-2010-1520Jun 30, 2010
    Taskfreak
    Taskfreak\!
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter.

  • CVE-2010-1295Jun 30, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2202, CVE-2010-2207,…

  • CVE-2010-1285Jun 30, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a…

  • CVE-2010-1205CriJun 30, 2010
    Libpng
    Libpng
    risk 0.70cvss 9.8epss 0.43

    Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.

  • CVE-2010-2516Jun 29, 2010
    2daybiz
    Multi Level Marketing Software
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in 2daybiz Multi Level Marketing (MLM) Software allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) index.php and (2) admin/index.php. NOTE: the provenance of this information is unknown; the details…

  • CVE-2010-2452Jun 29, 2010
    Kvirc
    Kvirc
    risk 0.00cvss —epss 0.04

    Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unknown vectors.

  • CVE-2010-2451Jun 29, 2010
    Kvirc
    Kvirc
    risk 0.00cvss —epss 0.03

    Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors.

  • CVE-2009-4923Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the DTLS implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (traceback) via TLS fragments, aka Bug ID CSCso53162.

  • CVE-2009-4922Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (traceback) by establishing many IPsec L2L tunnels from remote peer IP addresses, aka Bug ID…

  • CVE-2009-4921Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (traceback) via malformed TCP packets, aka Bug ID CSCsm84110.

  • CVE-2009-4920Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in CTM on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software 8.1(2) allows remote attackers to cause a denial of service (watchdog traceback) via a large amount of small-packet data, aka Bug ID CSCsu11412.

  • CVE-2009-4919Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.02

    Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to have an unspecified impact via long IKE attributes, aka Bug ID CSCsu43121.

  • CVE-2009-4918Jun 29, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (IKE process hang) via malformed NAT-T packets, aka Bug ID CSCsr74439.

  • CVE-2009-4917Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via a high volume of SIP traffic, aka Bug ID CSCsr65901.

  • CVE-2009-4916Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (console hang) via a login action during failover replication, aka Bug ID CSCsq80095.

  • CVE-2009-4915Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via unknown network traffic, as demonstrated by a "connection stress test," aka Bug ID…

  • CVE-2009-4914Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Memory leak on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via Subject Alternative Name fields in an X.509 certificate, aka Bug ID CSCsq17879.

  • CVE-2009-4913Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.02

    The IPv6 implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) exposes IP services on the "far side of the box," which might allow remote attackers to bypass intended access restrictions via IPv6 packets, aka Bug ID CSCso58622.

  • CVE-2009-4912Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.03

    Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID…

  • CVE-2009-4911Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device crash) via vectors involving SSL VPN and PPPoE transactions, aka Bug ID CSCsm77958.

  • CVE-2009-4910Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCsq78418.

  • CVE-2008-7257Jun 29, 2010
    Cisco Systems, Inc.
    WebVPN
    risk 0.04cvss —epss 0.12

    CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary HTTP headers as demonstrated by a redirect attack involving a %0d%0aLocation%3a…

  • CVE-2010-2515Jun 28, 2010
    Joomla
    JFaq
    risk 0.00cvss —epss 0.02

    Multiple SQL injection vulnerabilities in index.php in the JFaq (com_jfaq) component 1.2 for Joomla!, when magic_quotes_gpc is disabled, allow (1) remote attackers to execute arbitrary SQL commands via the id parameter, and (2) remote authenticated users with "Public Front-end"…

  • CVE-2010-2514Jun 28, 2010
    Joomla
    JFaq
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the JFaq (com_jfaq) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the question parameter in an add2 action to index.php.

  • CVE-2010-2513Jun 28, 2010
    Harmistechnology
    Com Jeajaxeventcalendar
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php.

  • CVE-2010-2512Jun 28, 2010
    2daybiz
    Matrimonial Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-2511Jun 28, 2010
    2daybiz
    Multi Level Marketing Software
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to execute arbitrary SQL commands via the nwsid parameter.

  • CVE-2010-2510Jun 28, 2010
    2daybiz
    Web Template Software
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter.

  • CVE-2010-2509Jun 28, 2010
    2daybiz
    Web Template Software
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to category.php and the (2) password parameter to memberlogin.php.

  • CVE-2010-2508Jun 28, 2010
    2daybiz
    Video Community Portal Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter.

  • CVE-2010-2507Jun 28, 2010
    Joomla
    Picasa2Gallery
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in the Picasa2Gallery (com_picasa2gallery) component 1.2.8 and earlier for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-2506Jun 28, 2010
    Linksys
    Wap54gv3
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter.

  • CVE-2010-2505Jun 28, 2010
    Saschart
    Sascam Webcam Server
    risk 0.03cvss —epss 0.03

    Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows remote attackers to cause a denial of service (crash) via a large number of requests with a long line, as demonstrated using a long GET request.

  • CVE-2010-2504Jun 28, 2010
    Splunk
    Splunk
    risk 0.00cvss —epss 0.01

    Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, aka SPL-31066.

  • CVE-2010-2503Jun 28, 2010
    Splunk
    Splunk
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) redirects, aka SPL-31067; (2) unspecified "user->user or user->admin" vectors, aka SPL-31084; or (3)…

  • CVE-2010-2502Jun 28, 2010
    Splunk
    Splunk
    risk 0.00cvss —epss 0.03

    Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attackers to read arbitrary files, aka SPL-31194; (2) remote authenticated users to modify arbitrary files, aka SPL-31063; or (3) have an unknown impact via…

  • CVE-2010-2470Jun 28, 2010
    Mozilla Corporation
    Bugzilla
    risk 0.00cvss —epss 0.00

    Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through 3.7.1, when use_suexec is enabled, uses world-readable permissions within (1) .bzr/ and (2) data/webdot/, which allows local users to obtain potentially sensitive data by reading files in these directories, a…

  • CVE-2010-2231Jun 28, 2010
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to hijack the authentication of arbitrary users for requests that delete quiz attempts via the attemptid…

  • CVE-2010-2230Jun 28, 2010
    Moodle
    Moodle
    risk 0.00cvss —epss 0.02

    The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input.

  • CVE-2010-2229Jun 28, 2010
    Moodle
    Moodle
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

  • CVE-2010-2228Jun 28, 2010
    Moodle
    Moodle
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username.

  • CVE-2010-1930Jun 28, 2010
    Novell
    Imanager
    risk 0.04cvss —epss 0.08

    Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (daemon crash) via a long tree parameter in a login request to nps/servlet/webacc.

  • CVE-2010-1929Jun 28, 2010
    Novell
    Imanager
    risk 0.04cvss —epss 0.16

    Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID…