VYPR

CVEs

345,857 total · page 6119 of 6,918

AllCriticalHighKEV
  • CVE-2010-0068Jan 13, 2010
    Oracle Corporation
    Bea Product Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2010-0067Jan 13, 2010
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2010-0066Jan 13, 2010
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2009-3416Jan 13, 2010
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2009-3415Jan 13, 2010
    Oracle Corporation
    Olap
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2009-3414Jan 13, 2010
    Oracle Corporation
    Spatial
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2008-3976 and CVE-2009-3413.

  • CVE-2009-3413Jan 13, 2010
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2008-3976 and CVE-2009-3414.

  • CVE-2009-3412Jan 13, 2010
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Unzip component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5; and Oracle Application Server 10.1.2.3; allows local users to affect confidentiality via unknown vectors.

  • CVE-2009-3411Jan 13, 2010
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Data Pump component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2009-3410Jan 13, 2010
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the RDBMS component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2009-1996Jan 13, 2010
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Logical Standby component in Oracle Database allows remote authenticated users to affect integrity via unknown vectors.

  • CVE-2010-0278Jan 12, 2010
    Microsoft
    Windows Live Messenger
    risk 0.04cvss —epss 0.08

    A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument…

  • CVE-2009-4604Jan 12, 2010
    Joomla
    com_mamboleto
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in mamboleto.php in the Fernando Soares Mamboleto (com_mamboleto) component 2.0 RC3 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

  • CVE-2009-4603Jan 12, 2010
    SAP
    Kernel
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in sapstartsrv.exe in the SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and 7.20, as used in SAP NetWeaver 7.x and SAP Web Application Server 6.x and 7.x, allows remote attackers to cause a denial of service (Management Console shutdown) via a crafted…

  • CVE-2009-4602Jan 12, 2010
    Drupal
    Randomizer
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Randomizer module 5.x through 5.x-1.0 and 6.x through 6.x-1.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4601Jan 12, 2010
    Zeeways
    Zeejobsite
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to inject arbitrary web script or HTML via the title parameter.

  • CVE-2009-4600Jan 12, 2010
    Netartmedia
    Real Estate Portal
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the Email parameter (aka the username field). NOTE: some of these details are obtained from third party information.

  • CVE-2009-4599Jan 12, 2010
    Joomla
    Js Jobs
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in the JS Jobs (com_jsjobs) component 1.0.5.6 for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the md parameter in an employer view_company action to index.php or (2) the oi parameter in an employer view_job…

  • CVE-2009-4598Jan 12, 2010
    Joomla
    JPhoto
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the JPhoto (com_jphoto) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action to index.php.

  • CVE-2009-4597Jan 12, 2010
    Phpwares
    PHP Inventory
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote authenticated users to execute arbitrary SQL commands via the user_id parameter in a users details action, and allow remote attackers to execute arbitrary SQL commands via the (2) user…

  • CVE-2009-4596Jan 12, 2010
    Phpwares
    PHP Inventory
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary web script or HTML via the sup_id parameter in a suppliers details action.

  • CVE-2009-4595Jan 12, 2010
    Phpwares
    PHP Inventory
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in PHP Inventory 1.2 allows remote authenticated users to execute arbitrary SQL commands via the sup_id parameter in a suppliers details action. NOTE: the provenance of this information is unknown; the details are obtained solely from…

  • CVE-2009-4538Jan 12, 2010
    Linux
    Kernel
    risk 0.01cvss —epss 0.08

    drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537.

  • CVE-2009-4537Jan 12, 2010
    Linux
    Kernel
    risk 0.00cvss —epss 0.06

    drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to (1) cause a denial of service (temporary network outage) via a packet with a crafted…

  • CVE-2009-4536Jan 12, 2010
    Linux
    Kernel
    risk 0.00cvss —epss 0.05

    drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large…

  • CVE-2010-0277Jan 9, 2010
    Adium
    Adium
    risk 0.00cvss —epss 0.02

    slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request…

  • CVE-2010-0276Jan 9, 2010
    IBM
    Domino Web Access
    risk 0.00cvss —epss 0.02

    IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR…

  • CVE-2010-0275Jan 9, 2010
    IBM
    Lotus Inotes
    risk 0.00cvss —epss 0.02

    Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which has unspecified impact and attack vectors, aka SPR LSHR7TBM58.

  • CVE-2010-0274Jan 9, 2010
    IBM
    Lotus Inotes
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5.

  • CVE-2010-0013HigJan 9, 2010
    Adium
    Adium
    risk 0.53cvss 7.5epss 0.13

    Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to…

  • CVE-2009-4594Jan 9, 2010
    IBM
    Lotus Inotes
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.131 for Domino 8.0.x has unknown impact and attack vectors, aka SPR SDOY7RHBNH.

  • CVE-2009-4486Jan 8, 2010
    Novell
    Imanager
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema.

  • CVE-2010-0273Jan 8, 2010
    Sun Corporation
    Java System Web Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to execute arbitrary code by sending a process memory address and crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this…

  • CVE-2010-0272Jan 8, 2010
    Sun Corporation
    Java System Web Server
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no…

  • CVE-2010-0271Jan 8, 2010
    Sun Corporation
    Opensolaris
    risk 0.00cvss —epss 0.00

    hald in Sun OpenSolaris snv_51 through snv_130 does not have the proc_audit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices…

  • CVE-2010-0012HigJan 8, 2010
    Transmissionbt
    Transmission
    risk 0.58cvss 8.8epss 0.04

    Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file.

  • CVE-2009-4010Jan 8, 2010
    PowerDNS
    Recursor
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.

  • CVE-2009-4009Jan 8, 2010
    PowerDNS
    Recursor
    risk 0.01cvss —epss 0.18

    Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets.

  • CVE-2009-3952Jan 8, 2010
    Adobe Inc.
    Illustrator
    risk 0.01cvss —epss 0.08

    Buffer overflow in Adobe Illustrator CS3 13.0.3 and earlier and Illustrator CS4 14.0.0 allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2009-3742Jan 7, 2010
    Liferay
    Portal
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Liferay Portal before 5.3.0 allows remote attackers to inject arbitrary web script or HTML via the p_p_id parameter.

  • CVE-2010-0229Jan 7, 2010
    Verbatim
    Corporate Secure
    risk 0.00cvss —epss 0.00

    Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time.

  • CVE-2010-0228Jan 7, 2010
    Verbatim
    Corporate Secure
    risk 0.00cvss —epss 0.00

    Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key.

  • CVE-2010-0227Jan 7, 2010
    Verbatim
    Corporate Secure
    risk 0.00cvss —epss 0.00

    Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.

  • CVE-2010-0226Jan 7, 2010
    Sandisk
    Cruzer Enterprise USB
    risk 0.00cvss —epss 0.00

    SanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time.

  • CVE-2010-0225Jan 7, 2010
    Sandisk
    Cruzer Enterprise USB
    risk 0.00cvss —epss 0.00

    SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key.

  • CVE-2010-0224Jan 7, 2010
    Sandisk
    Cruzer Enterprise USB
    risk 0.00cvss —epss 0.00

    SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.

  • CVE-2010-0223Jan 7, 2010
    Kingston
    Datatraveler Blackbox
    risk 0.00cvss —epss 0.00

    Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by…

  • CVE-2010-0222Jan 7, 2010
    Kingston
    Datatraveler Blackbox
    risk 0.00cvss —epss 0.00

    Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate…

  • CVE-2010-0221Jan 7, 2010
    Kingston
    Datatraveler Blackbox
    risk 0.00cvss —epss 0.00

    Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate…

  • CVE-2010-0220Jan 7, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert…