VYPR

CVEs

345,196 total · page 6156 of 6,904

AllCriticalHighKEV
  • CVE-2009-0231HigJul 15, 2009
    Microsoft
    Windows 2000
    risk 0.60cvss 8.8epss 0.37

    The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers…

  • CVE-2009-1989Jul 14, 2009
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2009-1988Jul 14, 2009
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2009-1987Jul 14, 2009
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools - Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.21 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2009-1986Jul 14, 2009
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2009-1984Jul 14, 2009
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Patch Administrator.

  • CVE-2009-1983Jul 14, 2009
    Oracle Corporation
    Istore
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2009-1982Jul 14, 2009
    Oracle Corporation
    Applications Framework
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.6 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2009-1981Jul 14, 2009
    Oracle Corporation
    Siebel Suite
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Highly Interactive Client component in Siebel Product Suite 7.5.3, 7.7.2, 7.8.2, 8.0.0.5, and 8.1.0 allows local users to affect confidentiality and integrity via unknown vectors.

  • CVE-2009-1980Jul 14, 2009
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2009-1978Jul 14, 2009
    Oracle Corporation
    Secure Backup
    risk 0.08cvss —epss 0.65

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle…

  • CVE-2009-1977Jul 14, 2009
    Oracle Corporation
    Secure Backup
    risk 0.09cvss —epss 0.73

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle…

  • CVE-2009-1976Jul 14, 2009
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the HTTP Server component in Oracle Application Server 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2009-1975Jul 14, 2009
    Oracle Corporation
    Bea Product Suite
    risk 0.03cvss —epss 0.03

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, and availability, related to the WLS Console Package.

  • CVE-2009-1974Jul 14, 2009
    Oracle Corporation
    Bea Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Servlet Container Package.

  • CVE-2009-1973Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Virtual Private Database component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to VPD policies.

  • CVE-2009-1970Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.12

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-0991.

  • CVE-2009-1969Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2009-1968Jul 14, 2009
    Oracle Corporation
    Secure Enterprise Search
    risk 0.06cvss —epss 0.40

    Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors. NOTE: the previous information was obtained from the July 2009 CPU. Oracle has not commented on claims from an…

  • CVE-2009-1967Jul 14, 2009
    Oracle Corporation
    Enterprise Manager
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1966.

  • CVE-2009-1966Jul 14, 2009
    Oracle Corporation
    Enterprise Manager
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1967.

  • CVE-2009-1963Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.09

    Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows remote authenticated users to affect integrity and availability via unknown vectors.

  • CVE-2009-1021Jul 14, 2009
    Oracle Corporation
    Advanced Replication
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2009-1020Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2009-1019Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2009-1015Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05, and 10.2.04 allows remote authenticated users to affect integrity via unknown vectors.

  • CVE-2009-0987Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Upgrade component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2009-0217Jul 14, 2009
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.06

    The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA…

  • CVE-2009-2461Jul 14, 2009
    MathTeX
    mathTeX
    risk 0.00cvss —epss 0.00

    mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.

  • CVE-2009-2460Jul 14, 2009
    Forkosh
    Mathtex
    risk 0.00cvss —epss 0.03

    Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack vectors.

  • CVE-2009-2459Jul 14, 2009
    Forkosh
    Mimetex
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the (1) \environ, (2) \input, and (3) \counter TeX directives.

  • CVE-2009-2458Jul 14, 2009
    Sun Corporation
    Sun Fire
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash level -04 or later, allows remote attackers to cause a denial of service (panic) via unknown vectors.

  • CVE-2009-2457Jul 14, 2009
    Novell
    Edirectory
    risk 0.00cvss —epss 0.02

    The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (crash) via a malformed bind LDAP packet.

  • CVE-2009-2456Jul 14, 2009
    Novell
    Edirectory
    risk 0.00cvss —epss 0.03

    The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (ndsd core dump) via an LDAP request containing multiple . (dot) wildcard characters in the Relative Distinguished Name (RDN).

  • CVE-2009-2347Jul 14, 2009
    LibTIFF
    Libtiff
    risk 0.00cvss —epss 0.04

    Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in…

  • CVE-2009-1425Jul 14, 2009
    Microfocus
    ProCurve Threat Management Services zl Module
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service by triggering a stop or crash in httpd, aka PR_18770, a different vulnerability than CVE-2009-1423 and…

  • CVE-2009-1424Jul 14, 2009
    Microfocus
    ProCurve Threat Management Services zl Module
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39412, a different vulnerability than CVE-2009-1423 and CVE-2009-1425.

  • CVE-2009-1423Jul 14, 2009
    Microfocus
    ProCurve Threat Management Services zl Module
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39898, a different vulnerability than CVE-2009-1424 and CVE-2009-1425.

  • CVE-2009-1422Jul 14, 2009
    Microfocus
    ProCurve Threat Management Services zl Module
    risk 0.03cvss —epss 0.05

    Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to gain privileges via unknown vectors, aka PR_41209.

  • CVE-2009-1383Jul 14, 2009
    MathTeX
    mathTeX
    risk 0.00cvss —epss 0.02

    The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.

  • CVE-2009-1382Jul 14, 2009
    mimeTeX
    mimetex.cgi
    risk 0.01cvss —epss 0.09

    Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long (1) picture, (2) circle, or (3) input tags.

  • CVE-2009-0692Jul 14, 2009
    Isc
    DHCP
    risk 0.05cvss —epss 0.26

    Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.

  • CVE-2009-0192Jul 14, 2009
    Novell
    Edirectory
    risk 0.04cvss —epss 0.12

    Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow.

  • CVE-2009-2455Jul 14, 2009
    Mail
    Mail
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) type and (2) func parameters. NOTE: the provenance of this information is unknown; the details are obtained solely…

  • CVE-2009-2454Jul 14, 2009
    Citrix Systems
    Web Interface
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Citrix Web Interface 4.6, 5.0, and 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-2453Jul 14, 2009
    Citrix Systems
    Xenapp
    risk 0.00cvss —epss 0.01

    Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors.

  • CVE-2009-2452Jul 14, 2009
    Citrix Systems
    Licensing
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in Citrix Licensing 11.5 have unknown impact and attack vectors, related to "underlying components of the License Management Console."

  • CVE-2009-2451Jul 14, 2009
    Mim.infinix
    Infinix
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters in a calendar action, or (3) a search term in the search form.

  • CVE-2008-6867Jul 14, 2009
    Scripts For Sites
    Ez Career
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in content.php in Scripts For Sites (SFS) EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter.

  • CVE-2008-6866Jul 14, 2009
    PHP-Nuke
    Current Issue Module
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in modules.php in the Current_Issue module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a summary action.