VYPR

CVEs

345,859 total · page 6111 of 6,918

AllCriticalHighKEV
  • CVE-2009-4647Feb 19, 2010
    Accellion
    File Transfer Appliance
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Accellion Secure File Transfer Appliance before 7_0_296 allows remote attackers to inject arbitrary web script or HTML via the username parameter, which is not properly handled when the administrator views audit logs.

  • CVE-2009-4646Feb 19, 2010
    Accellion
    File Transfer Appliance
    risk 0.00cvss —epss 0.02

    Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a request to update the SNMP public community string.

  • CVE-2009-4645Feb 19, 2010
    Accellion
    File Transfer Appliance
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in web_client_user_guide.html in Accellion Secure File Transfer Appliance before 8_0_105 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.

  • CVE-2009-4644Feb 19, 2010
    Accellion
    File Transfer Appliance
    risk 0.00cvss —epss 0.02

    Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program.

  • CVE-2010-0417Feb 18, 2010
    Helix
    Helix Player
    risk 0.00cvss —epss 0.04

    Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap…

  • CVE-2010-0416Feb 18, 2010
    RealNetworks
    Realplayer
    risk 0.04cvss —epss 0.11

    Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a URL argument…

  • CVE-2010-0664Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_security_policy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cause a denial of service (memory consumption and application crash) via a URL that…

  • CVE-2010-0663Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    The ParamTraits::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by…

  • CVE-2010-0662Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    The ParamTraits::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows attackers to leverage renderer access to cause a denial of service…

  • CVE-2010-0661Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.

  • CVE-2010-0660Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.

  • CVE-2010-0659Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size.

  • CVE-2010-0658Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service (memory corruption and application crash) via vectors involving CANVAS elements.

  • CVE-2010-0657Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 4.0.249.78 on Windows does not perform the expected encoding, escaping, and quoting for the URL in the --app argument in a desktop shortcut, which allows user-assisted remote attackers to execute arbitrary programs or obtain sensitive information by tricking…

  • CVE-2010-0656Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a file:/// URL that corresponds to a directory, which allows attackers to obtain sensitive information or possibly have unspecified other…

  • CVE-2010-0655Feb 18, 2010
    Google
    Chrome
    risk 0.04cvss —epss 0.07

    Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different…

  • CVE-2010-0654Feb 18, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document…

  • CVE-2010-0653Feb 18, 2010
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.

  • CVE-2010-0652Feb 18, 2010
    Microsoft
    Internet Explorer
    risk 0.00cvss —epss 0.05

    Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.

  • CVE-2010-0651Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to…

  • CVE-2010-0650Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.

  • CVE-2010-0649Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscall_server.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service (heap memory corruption) or possibly have unspecified other impact…

  • CVE-2010-0648Feb 18, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Mozilla Firefox, possibly before 3.6, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href…

  • CVE-2010-0647Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.04

    WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a > sequence.

  • CVE-2010-0646Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.05

    Multiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.

  • CVE-2010-0645Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.

  • CVE-2010-0644Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was…

  • CVE-2010-0643Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as…

  • CVE-2010-0556Feb 18, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that…

  • CVE-2010-0642Feb 17, 2010
    Cisco Systems, Inc.
    Collaboration Server
    risk 0.04cvss —epss 0.08

    Cisco Collaboration Server (CCS) 5 allows remote attackers to read the source code of JHTML files via URL encoded characters in the filename extension, as demonstrated by (1) changing .jhtml to %2Ejhtml, (2) changing .jhtml to .jhtm%6C, (3) appending %00 after .jhtml, and (4)…

  • CVE-2010-0641Feb 17, 2010
    Cisco Systems, Inc.
    Collaboration Server
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) 5 allows remote attackers to inject arbitrary web script or HTML via the dest parameter.

  • CVE-2010-0415Feb 17, 2010
    Linux
    Kernel
    risk 0.03cvss —epss 0.02

    The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node…

  • CVE-2010-0307Feb 17, 2010
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a…

  • CVE-2010-0136Feb 16, 2010
    Openoffice
    Openoffice
    risk 0.01cvss —epss 0.08

    OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.

  • CVE-2009-3302Feb 16, 2010
    Openoffice
    Openoffice
    risk 0.01cvss —epss 0.12

    filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTSetBrc table property modifier in a Word document, related to a "boundary error flaw."

  • CVE-2009-3301Feb 16, 2010
    Openoffice
    Openoffice
    risk 0.01cvss —epss 0.12

    Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document.

  • CVE-2009-2950Feb 16, 2010
    Openoffice
    Openoffice
    risk 0.01cvss —epss 0.13

    Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file,…

  • CVE-2009-2949Feb 16, 2010
    Openoffice
    Openoffice
    risk 0.01cvss —epss 0.14

    Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow.

  • CVE-2010-0639Feb 15, 2010
    Squid Cache
    Squid
    risk 0.02cvss —epss 0.31

    The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.

  • CVE-2010-0638Feb 15, 2010
    Webcalendar
    Webcalendar
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via unknown vectors. NOTE: the provenance of this information is unknown; the details…

  • CVE-2010-0623Feb 15, 2010
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The futex_lock_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain reference count, which allows local users to cause a denial of service (OOPS) via vectors involving an unmount of an ext3 filesystem.

  • CVE-2010-0622Feb 15, 2010
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance (PI) futex, which allows local users to cause a denial of service (OOPS) and possibly have unspecified other impact…

  • CVE-2010-0291Feb 15, 2010
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling the (1) mmap or (2) mremap function, aka the "do_mremap() mess" or "mremap/mmap mess."

  • CVE-2010-0289Feb 15, 2010
    Dokuwiki
    Dokuwiki
    risk 0.00cvss —epss 0.02

    Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25c allow remote attackers to hijack the authentication of administrators for requests that modify access control rules, and other unspecified…

  • CVE-2010-0288Feb 15, 2010
    Dokuwiki
    Dokuwiki
    risk 0.04cvss —epss 0.11

    A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.

  • CVE-2010-0287Feb 15, 2010
    Dokuwiki
    Dokuwiki
    risk 0.04cvss —epss 0.11

    Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. (dot dot) in the ns parameter.

  • CVE-2010-0187Feb 15, 2010
    Adobe Inc.
    Air
    risk 0.04cvss —epss 0.16

    Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.

  • CVE-2010-0186Feb 15, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified…

  • CVE-2009-4643Feb 15, 2010
    Juniper Networks
    Odyssey Access Client
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute arbitrary code via a long string in a malformed DSSETUPSERVICE_CMD_UNINSTALL…

  • CVE-2009-3960MedKEVFeb 15, 2010
    Adobe Inc.
    Coldfusion
    risk 0.70cvss 6.5epss 0.90

    Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via…