VYPR

CVEs

345,859 total · page 6110 of 6,918

AllCriticalHighKEV
  • CVE-2010-0148Feb 23, 2010
    Cisco Systems, Inc.
    Security Agent
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote attackers to cause a denial of service (kernel panic) via "a series of TCP packets."

  • CVE-2010-0147Feb 23, 2010
    Cisco Systems, Inc.
    Security Agent
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0146Feb 23, 2010
    Cisco Systems, Inc.
    Security Agent
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.

  • CVE-2010-0107Feb 23, 2010
    Symantec
    Norton Internet Security
    risk 0.01cvss —epss 0.07

    Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a…

  • CVE-2009-3036Feb 23, 2010
    Symantec
    Im Manager
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the console in Symantec IM Manager 8.3 and 8.4 before 8.4.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0696Feb 23, 2010
    Joomlaworks
    Jw Allvideos
    risk 0.05cvss —epss 0.28

    Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ (modified dot dot) in the file parameter.

  • CVE-2010-0695Feb 23, 2010
    Basic CMS
    Basic CMS
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web script or HTML via the nav_id parameter.

  • CVE-2010-0694Feb 23, 2010
    Joomla
    PerchaGallery
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the PerchaGallery (com_perchagallery) component before 1.5b for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an editunidad action to index.php.

  • CVE-2010-0693Feb 23, 2010
    Commodityrentals
    Trade Manager Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

  • CVE-2010-0692Feb 23, 2010
    IP-Tech
    JQuarks
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the IP-Tech JQuarks (com_jquarks) Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information.

  • CVE-2010-0691Feb 23, 2010
    JTL
    JTL Shop
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter.

  • CVE-2010-0690Feb 23, 2010
    Commodityrentals
    Video Games Rentals
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands via the pfid parameter in a catalog action.

  • CVE-2010-0681Feb 22, 2010
    Zeuscms
    Zeuscms
    risk 0.03cvss —epss 0.02

    ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for admin/backup.sql.

  • CVE-2010-0680Feb 22, 2010
    Zeuscms
    Zeuscms
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.

  • CVE-2010-0679Feb 22, 2010
    Hyleos
    Chemview
    risk 0.06cvss —epss 0.35

    Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large number of white space characters in the filename argument to the (1) SaveasMolFile…

  • CVE-2010-0678Feb 22, 2010
    Katalog Stron
    Hurricane
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includes_directory parameter.

  • CVE-2010-0677Feb 22, 2010
    Katalog Stron
    Hurricane
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter.

  • CVE-2009-4651Feb 22, 2010
    Joomla
    Webee Comments
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) color, (2) img, or (3) url BBCode tags in unspecified vectors.

  • CVE-2009-4650Feb 22, 2010
    Webee
    Webee Comments
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a default action to index2.php. NOTE: some of these details are obtained from…

  • CVE-2010-0676Feb 22, 2010
    Joomla
    RWCards
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in index.php in the RWCards (com_rwcards) component 3.0.18 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter.

  • CVE-2010-0675Feb 22, 2010
    Bgsvetionik
    Bgs CMS
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. NOTE: some of these details are obtained from third party information.

  • CVE-2010-0674Feb 22, 2010
    Statcountex
    Statcountex
    risk 0.03cvss —epss 0.02

    StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for path/stats.mdb.

  • CVE-2010-0673Feb 22, 2010
    Copperleaf
    Photolog
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parameter.

  • CVE-2010-0672Feb 22, 2010
    Wsn
    Guest
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks parameter.

  • CVE-2010-0671Feb 22, 2010
    KR MEDIA
    Pogodny CMS
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a niusy action.

  • CVE-2009-4649Feb 22, 2010
    Geccbblite
    Geccbblite
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to (1) rispondi.php and (2) scrivi.php, which is not properly handled in forum.php.

  • CVE-2010-0670Feb 22, 2010
    IP-Tech
    JQuarks
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the IP-Tech JQuarks (com_jquarks) Component before 0.2.4 for Joomla! allows attackers to obtain the installation path for Joomla! via unknown vectors.

  • CVE-2010-0299Feb 22, 2010
    OpenSUSE
    openSUSE
    risk 0.00cvss —epss 0.00

    openSUSE 11.2 installs the devtmpfs root directory with insecure permissions (1777), which allows local users to gain privileges via unspecified vectors.

  • CVE-2010-0286Feb 22, 2010
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that…

  • CVE-2010-0410Feb 22, 2010
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages.

  • CVE-2010-0283Feb 22, 2010
    Mit
    Kerberos
    risk 0.00cvss —epss 0.02

    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid (1) AS-REQ or (2) TGS-REQ request.

  • CVE-2010-0188HigKEVFeb 22, 2010
    Adobe Inc.
    Acrobat
    risk 0.79cvss 7.8epss 0.88

    Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.

  • CVE-2010-0162Feb 22, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element,…

  • CVE-2010-0160Feb 22, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.06

    The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and…

  • CVE-2010-0159Feb 22, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors…

  • CVE-2009-3988Feb 22, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks…

  • CVE-2009-1571Feb 22, 2010
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.06

    Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects…

  • CVE-2010-0666Feb 19, 2010
    Novell
    Edirectory
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue than CVE-2008-0926.

  • CVE-2010-0665Feb 19, 2010
    JAG
    Just Another Guestbook
    risk 0.03cvss —epss 0.02

    JAG (Just Another Guestbook) 1.14 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for jag/database.sql.

  • CVE-2010-0569Feb 19, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.2), 8.1 before 8.1(2.37), and 8.2 before 8.2(1.16); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial…

  • CVE-2010-0568Feb 19, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.7), 8.1 before 8.1(2.40), and 8.2 before 8.2(2.1); and Cisco PIX 500 Series Security Appliance; allows remote attackers to bypass NTLMv1…

  • CVE-2010-0567Feb 19, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.1), 8.1 before 8.1(2.37), and 8.2 before 8.2(1.15); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial…

  • CVE-2010-0566Feb 19, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(4.44), 8.1 before 8.1(2.35), and 8.2 before 8.2(1.10) allows remote attackers to cause a denial of service (device reload) via a malformed…

  • CVE-2010-0565Feb 19, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.45), 8.0 before 8.0(4.44), 8.1 before 8.1(2.35), and 8.2 before 8.2(1.10), allows remote attackers to cause a denial of service (page fault and device reload) via a malformed DTLS…

  • CVE-2010-0151Feb 19, 2010
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.02

    The Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service (crash) via a malformed Skinny Client Control…

  • CVE-2010-0150Feb 19, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.2), 8.1 before 8.1(2.37), and 8.2 before 8.2(1.16); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial…

  • CVE-2010-0149Feb 19, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before 8.2(1.5); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (prevention…

  • CVE-2010-0108Feb 19, 2010
    Symantec
    Client Security
    risk 0.05cvss —epss 0.19

    Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code…

  • CVE-2010-0106Feb 19, 2010
    Symantec
    Client Security
    risk 0.00cvss —epss 0.01

    The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled, allows remote attackers to cause a denial of service (prevention of on-demand scanning) via "specific…

  • CVE-2009-4648Feb 19, 2010
    Accellion
    File Transfer Appliance
    risk 0.03cvss —epss 0.01

    Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and arguments that run with extra sudo privileges, which allows local administrators to gain privileges via (1) arbitrary arguments in the --file_move action in…