VYPR

CVEs

345,967 total · page 6080 of 6,920

AllCriticalHighKEV
  • CVE-2010-2256Jun 9, 2010
    Payperviewvideosoftware
    Pay Per Minute Video Chat Script
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/memberviewdetails.php and the (2) model parameter to videos.php.

  • CVE-2010-2255Jun 9, 2010
    Joomla
    BF Survey Pro
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfsurvey_profree) component 1.2.6, and BF Survey Basic component before 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid…

  • CVE-2010-2254Jun 9, 2010
    Shape5
    Bridge Of Hope Template
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php.

  • CVE-2010-1880Jun 8, 2010
    Microsoft
    DirectShow
    risk 0.02cvss —epss 0.21

    Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression…

  • CVE-2010-1879Jun 8, 2010
    Microsoft
    Windows Media Format Runtime
    risk 0.02cvss —epss 0.20

    Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "Media Decompression…

  • CVE-2010-1262Jun 8, 2010
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.33

    Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, related to the CStyleSheet object and a free of the root container,…

  • CVE-2010-1261Jun 8, 2010
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory…

  • CVE-2010-1260HigJun 8, 2010
    Microsoft
    Internet Explorer
    risk 0.50cvss 7.5epss 0.19

    The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory…

  • CVE-2010-1259Jun 8, 2010
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."

  • CVE-2010-1255Jun 8, 2010
    Microsoft
    Windows 2000
    risk 0.00cvss —epss 0.05

    The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline…

  • CVE-2010-0811Jun 8, 2010
    Microsoft
    Windows
    risk 0.02cvss —epss 0.26

    Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold…

  • CVE-2010-0485HigJun 8, 2010
    Microsoft
    Windows 2000
    risk 0.51cvss 7.8epss 0.01

    The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 "do not properly validate all callback parameters when creating a new window," which allows…

  • CVE-2010-0484Jun 8, 2010
    Microsoft
    Windows 2000
    risk 0.00cvss —epss 0.01

    The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via…

  • CVE-2010-1264Jun 8, 2010
    Microsoft
    Sharepoint Server
    risk 0.02cvss —epss 0.24

    Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a denial of service (hang) via crafted requests to the Help page that cause repeated restarts of the application pool, aka "Sharepoint Help Page Denial of Service…

  • CVE-2010-1263Jun 8, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.29

    Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; Microsoft Office XP SP3; Office 2003 SP3; and Office System 2007 SP1 and SP2 do not properly validate COM…

  • CVE-2010-1257Jun 8, 2010
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.22

    Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject…

  • CVE-2010-1256Jun 8, 2010
    Microsoft
    IIS
    risk 0.02cvss —epss 0.28

    Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption, aka "IIS…

  • CVE-2010-1254Jun 8, 2010
    Microsoft
    Open XML File Format Converter
    risk 0.00cvss —epss 0.01

    The installation for Microsoft Open XML File Format Converter for Mac sets insecure ACLs for the /Applications folder, which allows local users to execute arbitrary code by replacing the executable with a Trojan Horse, aka "Mac Office Open XML Permissions Vulnerability."

  • CVE-2010-1253Jun 8, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.26

    Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code…

  • CVE-2010-1252Jun 8, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.21

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String Variable Vulnerability."

  • CVE-2010-1251Jun 8, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.21

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record Stack Corruption Vulnerability."

  • CVE-2010-1250Jun 8, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.24

    Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed (1) EDG (0x88) and (2) Publisher (0x89) records,…

  • CVE-2010-1249Jun 8, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.25

    Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName (0x23) record, aka "Excel Memory Corruption…

  • CVE-2010-1248Jun 8, 2010
    Microsoft
    Office
    risk 0.05cvss —epss 0.27

    Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability."

  • CVE-2010-1247Jun 8, 2010
    Microsoft
    Excel
    risk 0.05cvss —epss 0.22

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than…

  • CVE-2010-1246Jun 8, 2010
    Microsoft
    Excel
    risk 0.05cvss —epss 0.25

    Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability."

  • CVE-2010-1245Jun 8, 2010
    Microsoft
    Office
    risk 0.05cvss —epss 0.22

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record, aka "Excel Record Memory…

  • CVE-2010-0824Jun 8, 2010
    Microsoft
    Office
    risk 0.05cvss —epss 0.22

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed WOPT (0x80B) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than…

  • CVE-2010-0823Jun 8, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.20

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File…

  • CVE-2010-0822Jun 8, 2010
    Microsoft
    Office
    risk 0.09cvss —epss 0.70

    Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ (0x5D) record, aka "Excel Object Stack…

  • CVE-2010-0821Jun 8, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.24

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File…

  • CVE-2010-0819Jun 8, 2010
    Microsoft
    Windows 2000
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users to execute arbitrary code via unknown vectors related to…

  • CVE-2010-2199Jun 8, 2010
    Rpm
    Rpm
    risk 0.00cvss —epss 0.00

    lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions by…

  • CVE-2010-2198Jun 8, 2010
    Rpm
    Rpm
    risk 0.00cvss —epss 0.00

    lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended access…

  • CVE-2010-2197Jun 8, 2010
    Rpm
    Rpm
    risk 0.00cvss —epss 0.01

    rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag.

  • CVE-2010-2059Jun 8, 2010
    Rpm
    Rpm
    risk 0.00cvss —epss 0.00

    lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link to…

  • CVE-2010-1297HigKEVJun 8, 2010
    Adobe Inc.
    Acrobat
    risk 0.72cvss 7.8epss 0.82

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2005-4889Jun 8, 2010
    Rpm
    Rpm
    risk 0.00cvss —epss 0.00

    lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issue…

  • CVE-2004-2768Jun 8, 2010
    dpkg
    dpkg
    risk 0.00cvss —epss 0.00

    dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid file, (2) setgid file, or (3) device, a related issue to…

  • CVE-2010-2191Jun 8, 2010
    PHP
    PHP
    risk 0.00cvss —epss 0.02

    The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack functions; the (5) ZEND_FETCH_RW, (6) ZEND_CONCAT, and (7) ZEND_ASSIGN_CONCAT opcodes; and the (8) ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain…

  • CVE-2010-2190Jun 8, 2010
    PHP
    PHP
    risk 0.00cvss —epss 0.02

    The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the…

  • CVE-2010-2159Jun 8, 2010
    Dameng
    Dm Database Server
    risk 0.03cvss —epss 0.03

    Dameng DM Database Server allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors related to the SP_DEL_BAK_EXPIRED procedure in wdm_dll.dll, which triggers memory corruption.

  • CVE-2010-2060Jun 8, 2010
    Wildbit
    Beanstalkd
    risk 0.00cvss —epss 0.03

    The put command functionality in beanstalkd 1.4.5 and earlier allows remote attackers to execute arbitrary Beanstalk commands via the body in a job that is too big, which is not properly handled by the dispatch_cmd function in prot.c.

  • CVE-2010-1850Jun 8, 2010
    MySQL
    MySQL
    risk 0.02cvss —epss 0.22

    Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.

  • CVE-2010-1849Jun 8, 2010
    MySQL
    MySQL
    risk 0.00cvss —epss 0.04

    The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length.

  • CVE-2010-1848Jun 8, 2010
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a…

  • CVE-2010-1649Jun 8, 2010
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in…

  • CVE-2010-1648Jun 8, 2010
    MediaWiki
    Mediawiki
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for requests that (1) create accounts or (2) reset passwords, related to the…

  • CVE-2010-1647Jun 8, 2010
    MediaWiki
    Mediawiki
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets (CSS) strings that are processed as script by Internet Explorer.

  • CVE-2010-1636Jun 8, 2010
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information…