VYPR

CVEs

345,967 total · page 6086 of 6,920

AllCriticalHighKEV
  • CVE-2010-1563May 14, 2010
    Cisco Systems, Inc.
    Pgw 2200 Softswitch
    risk 0.00cvss —epss 0.02

    The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of service (device crash) via a malformed header, aka Bug ID CSCsk04588.

  • CVE-2010-1562May 14, 2010
    Cisco Systems, Inc.
    Pgw 2200 Softswitch
    risk 0.00cvss —epss 0.02

    The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of service (device crash) via a malformed Contact header, aka Bug ID CSCsj98521.

  • CVE-2010-1561May 14, 2010
    Cisco Systems, Inc.
    Pgw 2200 Softswitch
    risk 0.00cvss —epss 0.02

    The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S11 and 9.7(3)P before 9.7(3)P11 allows remote attackers to cause a denial of service (device crash) via a long message, aka Bug ID CSCsk44115.

  • CVE-2010-1557May 14, 2010
    Microfocus
    Insight Control Server Migration
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in HP Insight Control Server Migration before 6.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1556May 14, 2010
    Microfocus
    Systems Insight Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP Systems Insight Manager (SIM) 5.3, 5.3 Update 1, and 6.0 allows remote attackers to obtain sensitive information and modify data via unknown vectors.

  • CVE-2010-0604May 14, 2010
    Cisco Systems, Inc.
    Pgw 2200 Softswitch
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers to cause a denial of service (device crash) via unknown SIP traffic, as demonstrated by "SIP testing," aka Bug ID CSCsk38165.

  • CVE-2010-0603May 14, 2010
    Cisco Systems, Inc.
    Pgw 2200 Softswitch
    risk 0.00cvss —epss 0.02

    The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers to cause a denial of service (device crash) via a malformed session attribute, aka Bug ID CSCsk40030.

  • CVE-2010-0602May 14, 2010
    Cisco Systems, Inc.
    Pgw 2200 Softswitch
    risk 0.00cvss —epss 0.02

    The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug ID CSCsk32606.

  • CVE-2010-0601May 14, 2010
    Cisco Systems, Inc.
    Pgw 2200 Softswitch
    risk 0.00cvss —epss 0.02

    The MGCP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug ID CSCsl39126.

  • CVE-2010-1624May 14, 2010
    Pidgin (software)
    Pidgin
    risk 0.00cvss —epss 0.06

    The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.

  • CVE-2010-1621May 14, 2010
    MySQL
    MySQL
    risk 0.00cvss —epss 0.01

    The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to uninstall arbitrary plugins via the UNINSTALL PLUGIN command.

  • CVE-2010-1558May 14, 2010
    Microfocus
    Multifunction Peripheral (MFP) Digital Sending Software
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP Multifunction Peripheral (MFP) Digital Sending Software before 4.18.3 allows local users to bypass intended restrictions on the MFP "Send to e-mail" feature, and obtain sensitive information, via unknown vectors.

  • CVE-2010-1510May 14, 2010
    IrfanView
    Irfanview
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PSD image with RLE compression.

  • CVE-2010-1509May 14, 2010
    IrfanView
    Irfanview
    risk 0.00cvss —epss 0.04

    IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based…

  • CVE-2010-0475May 14, 2010
    Paloaltonetworks
    Firewall
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the role parameter.

  • CVE-2009-3678May 14, 2010
    Microsoft
    Windows Server 2008
    risk 0.01cvss —epss 0.13

    Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, when the Windows Aero theme is installed, allows context-dependent attackers to cause a denial of service (reboot) or possibly execute…

  • CVE-2010-1939May 13, 2010
    Apple Inc.
    Safari
    risk 0.04cvss —epss 0.15

    Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to create a popup window for a crafted HTML document, and then calling the parent window's close method, which triggers improper handling of a…

  • CVE-2010-1291May 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1290.

  • CVE-2010-1290May 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1291.

  • CVE-2010-1289May 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1290, and CVE-2010-1291.

  • CVE-2010-1288May 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.06

    Buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow attackers to execute arbitrary code via unspecified vectors.

  • CVE-2010-1287May 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.

  • CVE-2010-1286May 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.

  • CVE-2010-1284May 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.

  • CVE-2010-1555May 13, 2010
    Microfocus
    OpenView Network Node Manager
    risk 0.08cvss —epss 0.64

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid Hostname parameter.

  • CVE-2010-1554May 13, 2010
    Microfocus
    OpenView Network Node Manager
    risk 0.08cvss —epss 0.68

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid iCount parameter.

  • CVE-2010-1553May 13, 2010
    Microfocus
    OpenView Network Node Manager
    risk 0.09cvss —epss 0.72

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid MaxAge parameter.

  • CVE-2010-1552May 13, 2010
    Microfocus
    OpenView Network Node Manager
    risk 0.09cvss —epss 0.69

    Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via the act and app parameters.

  • CVE-2010-1551May 13, 2010
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.13

    Stack-based buffer overflow in the _OVParseLLA function in ov.dll in netmon.exe in Network Monitor in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via the sel parameter.

  • CVE-2010-1550May 13, 2010
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.12

    Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in the sel parameter.

  • CVE-2010-1294May 13, 2010
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain sensitive information via unknown vectors.

  • CVE-2010-1293May 13, 2010
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Administrator page in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1292May 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.01cvss —epss 0.06

    The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2010-1283HigMay 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.58cvss 8.8epss 0.06

    Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record.

  • CVE-2010-1282MedMay 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.42cvss 6.5epss 0.03

    Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted ATOM size in a .dir (aka Director) file.

  • CVE-2010-1281HigMay 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.58cvss 8.8epss 0.07

    iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka…

  • CVE-2010-1280HigMay 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.62cvss 8.8epss 0.17

    Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file.

  • CVE-2010-0987HigMay 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.58cvss 8.8epss 0.11

    Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file.

  • CVE-2010-0986HigMay 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.58cvss 8.8epss 0.05

    Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted Shockwave file.

  • CVE-2010-0130HigMay 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.58cvss 8.8epss 0.07

    Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir (aka Director) file.

  • CVE-2010-0129HigMay 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.58cvss 8.8epss 0.06

    Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir (aka Director) file that triggers an array index error.

  • CVE-2010-0128May 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.05

    Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir file that triggers an invalid…

  • CVE-2010-0127HigMay 13, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.58cvss 8.8epss 0.05

    Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file.

  • CVE-2009-3467May 13, 2010
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in an unspecified method in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2010-1936May 12, 2010
    Openmairie
    Opencominterne
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to…

  • CVE-2010-1935May 12, 2010
    Openmairie
    Openpresse
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to…

  • CVE-2010-1934May 12, 2010
    Openmairie
    Openplanning
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) categorie.class.php, (2) profil.class.php, (3)…

  • CVE-2010-1928May 12, 2010
    Openmairie
    Openplanning
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to…

  • CVE-2010-1927May 12, 2010
    Openmairie
    Opencourrier
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in openMairie openCourrier 2.02 and 2.03 beta, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) bible.class.php, (2) dossier.class.php, (3)…

  • CVE-2010-1926May 12, 2010
    Openmairie
    Opencourrier
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related…