VYPR

CVEs

345,868 total · page 6094 of 6,918

AllCriticalHighKEV
  • CVE-2010-0877Apr 13, 2010
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2010-0876Apr 13, 2010
    Oracle Corporation
    Industry Product Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Life Sciences - Oracle Clinical Remote Data Capture Option component in Oracle Industry Product Suite 4.5.3 and 4.6 allows remote attackers to affect integrity, related to RDC Onsite.

  • CVE-2010-0875Apr 13, 2010
    Oracle Corporation
    Industry Product Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Life Sciences - Oracle Thesaurus Management System component in Oracle Industry Product Suite 4.5.2, 4.6, and 4.6.1 allows remote attackers to affect integrity, related to TMS Browser.

  • CVE-2010-0874Apr 13, 2010
    Oracle Corporation
    Industry Product Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Communications - Oracle Communications Unified Inventory Management component in Oracle Industry Product Suite 7.1 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2010-0872Apr 13, 2010
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3 allows remote attackers to affect availability via unknown vectors.

  • CVE-2010-0871Apr 13, 2010
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2010-0870Apr 13, 2010
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.13

    Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_CDC_PUBLISH.

  • CVE-2010-0869Apr 13, 2010
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Transportation Management component in Oracle E-Business Suite 5.5.05.07, 5.5.06.00, and 6.0.03 allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2010-0868Apr 13, 2010
    Oracle Corporation
    Istore
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-0867Apr 13, 2010
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the JavaVM component in Oracle Database 10.2.0.4, 11.1.0.7, and 11.2.0.1.0 allows remote authenticated users to affect integrity via unknown vectors.

  • CVE-2010-0866Apr 13, 2010
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.11

    Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2010-0865Apr 13, 2010
    Oracle Corporation
    Agile Engineering Data Management
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle E-Business Suite 6.1.1.0 allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2010-0864Apr 13, 2010
    Oracle Corporation
    Industry Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Retail - Oracle Retail Place In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help.

  • CVE-2010-0863Apr 13, 2010
    Oracle Corporation
    Industry Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help.

  • CVE-2010-0862Apr 13, 2010
    Oracle Corporation
    Industry Product Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Retail - Oracle Retail Markdown Optimization component in Oracle Industry Product Suite 13.1 allows remote attackers to affect integrity via unknown vectors related to Online Help.

  • CVE-2010-0861Apr 13, 2010
    Oracle Corporation
    Oracle HRMS (Self Service)
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2010-0860Apr 13, 2010
    Oracle Corporation
    Core Rdbms
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to the Create User privilege.

  • CVE-2010-0859Apr 13, 2010
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 ATG RUP6 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-0858Apr 13, 2010
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect integrity via unknown vectors.

  • CVE-2010-0857Apr 13, 2010
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Workflow Cartridge component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors.

  • CVE-2010-0856Apr 13, 2010
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.2 allows remote attackers to affect availability via unknown vectors.

  • CVE-2010-0855Apr 13, 2010
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0086.

  • CVE-2010-0854Apr 13, 2010
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Audit component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to "SELECT, INSERT or DELETE on tables subject to auditing."

  • CVE-2010-0853Apr 13, 2010
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8, 9.2.0.8, and DV; and Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2010-0852Apr 13, 2010
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-0851Apr 13, 2010
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2010-0086Apr 13, 2010
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0855.

  • CVE-2010-1372Apr 13, 2010
    Joomla
    HD FLV Player
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the HD FLV Player (com_hdflvplayer) component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

  • CVE-2010-1371Apr 13, 2010
    Preprojects
    Pre Classified Listings Asp
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to inject arbitrary web script or HTML via the address parameter.

  • CVE-2010-1370Apr 13, 2010
    Preprojects
    Pre Classified Listings Asp
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter.

  • CVE-2010-1369Apr 13, 2010
    Preprojects
    Pre Classified Listings Asp
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the email parameter.

  • CVE-2010-1368Apr 13, 2010
    Gamescript
    Gamescript
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in GameScript (GS) 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action.

  • CVE-2010-1367Apr 13, 2010
    Uiga
    Fan Club
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in admin/admin_login.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the (1) admin_name and (2) admin_password parameters. NOTE: the provenance of this…

  • CVE-2010-1366Apr 13, 2010
    Uiga
    Fan Club
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin_name and (2) admin_password parameters.

  • CVE-2010-1365Apr 13, 2010
    Uiga
    Fan Club
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action.

  • CVE-2010-1364Apr 13, 2010
    Uiga
    Personal Portal
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. NOTE: some of these details are obtained from third party information.

  • CVE-2010-1363Apr 13, 2010
    Joomla
    JProjects
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the JProjects (com_j-projects) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the project parameter in a projects action to index.php.

  • CVE-2010-1362Apr 13, 2010
    Drupal
    Own Term
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Own Term module 6.x-1.0 for Drupal allows remote authenticated users, with "create additional terms" privileges, to inject arbitrary web script or HTML via the term description field in a term listing page.

  • CVE-2010-1361Apr 13, 2010
    Phpeppershop
    Phpeppershop
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in shop/USER_ARTIKEL_HANDLING_AUFRUF.php in PHPepperShop 2.5 allows remote attackers to inject arbitrary web script or HTML via the darstellen parameter.

  • CVE-2010-1360Apr 13, 2010
    Boesch It
    Faqengine
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP code via a URL in the path_faqe parameter to (1) attachs.php, (2) backup.php, (3) badwords.php, (4) categories.php, (5) changepw.php, (6) colorchooser.php, (7)…

  • CVE-2010-1359Apr 13, 2010
    Bluegate
    Direct URL
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in bluegate_seo.inc.php in the Direct URL module for xt:Commerce, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the coID parameter. NOTE: the provenance of this information is unknown; the details…

  • CVE-2010-1358Apr 13, 2010
    Drupal
    Bibliography
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Bibliography (Biblio) module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privileges, to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1357Apr 13, 2010
    Sbddirectorysoftware
    Sbd Directory Software
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in editors/logindialogue.php in SBD Directory Software 4.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

  • CVE-2009-4766Apr 13, 2010
    YP Portal
    MS-Pro Surumu
    risk 0.00cvss —epss 0.01

    YP Portal MS-Pro Surumu (aka MS-Pro Portal Scripti) 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb.

  • CVE-2009-4765Apr 13, 2010
    CNR
    Hikaye Portal
    risk 0.00cvss —epss 0.01

    CNR Hikaye Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/hikaye.mdb.

  • CVE-2010-1356Apr 13, 2010
    Tandberg
    Video Communication Server (VCS)
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote attackers to execute arbitrary code via unknown vectors, aka Reference ID 69773.

  • CVE-2010-1355Apr 13, 2010
    Tandberg
    Video Communication Server (VCS)
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Reference ID 66316.

  • CVE-2009-4511Apr 13, 2010
    Tandberg
    Video Communication Server (VCS)
    risk 0.03cvss —epss 0.05

    Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server (VCS) before X5.1 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to (1) helppage.php or (2)…

  • CVE-2009-4510Apr 13, 2010
    Tandberg
    Video Communication Server (VCS)
    risk 0.00cvss —epss 0.02

    The SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed DSA key, which makes it easier for remote attackers to conduct man-in-the-middle attacks and spoof arbitrary servers via crafted SSH packets.

  • CVE-2009-4509Apr 13, 2010
    Tandberg
    Video Communication Server (VCS)
    risk 0.00cvss —epss 0.05

    The administrative web console on the TANDBERG Video Communication Server (VCS) before X4.3 uses predictable session cookies in (1) tandberg/web/lib/secure.php and (2) tandberg/web/user/lib/secure.php, which makes it easier for remote attackers to bypass authentication, and…