VYPR

CVEs

405,898 total · page 6162 of 8,118

AllCriticalHighKEV
  • CVE-2017-12489HigFeb 15, 2018
    HPE
    Intelligent Management Center (iMC) PLAT
    risk 0.58cvss 8.8epss 0.06

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

  • CVE-2017-12488HigFeb 15, 2018
    HPE
    Intelligent Management Center (iMC) PLAT
    risk 0.58cvss 8.8epss 0.06

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

  • CVE-2017-12487HigFeb 15, 2018
    HPE
    Intelligent Management Center (iMC) PLAT
    risk 0.58cvss 8.8epss 0.06

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

  • CVE-2016-8535LowFeb 15, 2018
    HPE
    Matrix Operating Environment
    risk 0.23cvss 3.5epss 0.01

    A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found.

  • CVE-2016-8534HigFeb 15, 2018
    HPE
    Matrix Operating Environment
    risk 0.57cvss 8.8epss 0.01

    A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found.

  • CVE-2016-8533HigFeb 15, 2018
    HPE
    Matrix Operating Environment
    risk 0.57cvss 8.8epss 0.02

    A remote priviledge escalation vulnerability in HPE Matrix Operating Environment version 7.6 was found.

  • CVE-2016-8532MedFeb 15, 2018
    HPE
    Matrix Operating Environment
    risk 0.35cvss 5.4epss 0.01

    A cross site scripting vulnerability in HPE Matrix Operating Environment version 7.6 was found.

  • CVE-2016-8531MedFeb 15, 2018
    HPE
    Matrix Operating Environment
    risk 0.35cvss 5.3epss 0.02

    A remote information disclosure vulnerability in HPE Matrix Operating Environment version 7.6 was found.

  • CVE-2016-8530HigFeb 15, 2018
    HPE
    iMC PLAT
    risk 0.53cvss 7.5epss 0.48

    A remote denial of service vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version.

  • CVE-2016-8529HigFeb 15, 2018
    HPE
    StoreVirtual 4000 Storage
    risk 0.50cvss 7.6epss 0.04

    A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version.

  • CVE-2016-8528HigFeb 15, 2018
    Eucalyptus
    Eucalyptus
    risk 0.57cvss 8.8epss 0.03

    A Remote Escalation of Privilege vulnerability in HPE Helion Eucalyptus version 3.3.0 through 4.3.1 was found.

  • CVE-2016-8525HigFeb 15, 2018
    HPE
    iMC PLAT
    risk 0.49cvss 7.5epss 0.09

    A Remote Disclosure of Information vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version.

  • CVE-2016-8523HigFeb 15, 2018
    HPE
    Smart Storage Administrator
    risk 0.62cvss 8.8epss 0.17

    A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found.

  • CVE-2016-8522MedFeb 15, 2018
    HPE
    Diagnostics
    risk 0.35cvss 5.4epss 0.01

    A cross-site scripting vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.

  • CVE-2016-8521MedFeb 15, 2018
    HPE
    Diagnostics
    risk 0.43cvss 6.5epss 0.04

    A Remote click jacking vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.

  • CVE-2016-8520HigFeb 15, 2018
    Eucalyptus
    Eucalyptus
    risk 0.57cvss 8.8epss 0.01

    HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data.

  • CVE-2016-8519CriFeb 15, 2018
    HPE
    Operations Orchestration Community edition and Enterprise edition
    risk 0.66cvss 9.8epss 0.28

    A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to v10.70 was found.

  • CVE-2016-8518HigFeb 15, 2018
    HPE
    Systems Insight Manager
    risk 0.49cvss 7.5epss 0.05

    A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.

  • CVE-2016-8517MedFeb 15, 2018
    HPE
    Systems Insight Manager
    risk 0.40cvss 6.1epss 0.02

    A cross site scripting vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.

  • CVE-2016-8516HigFeb 15, 2018
    HPE
    Systems Insight Manager
    risk 0.49cvss 7.5epss 0.05

    A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.

  • CVE-2016-8515HigFeb 15, 2018
    Microfocus
    Version Control Repository Manager
    risk 0.57cvss 8.8epss 0.02

    A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.

  • CVE-2016-8514MedFeb 15, 2018
    Microfocus
    Version Control Repository Manager
    risk 0.42cvss 6.5epss 0.02

    A remote information disclosure in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.

  • CVE-2016-8513HigFeb 15, 2018
    Microfocus
    Version Control Repository Manager
    risk 0.52cvss 8.0epss 0.01

    A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.

  • CVE-2016-8512CriFeb 15, 2018
    HPE
    LoadRunner
    risk 0.64cvss 9.8epss 0.06

    A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found.

  • CVE-2016-8511CriFeb 15, 2018
    Microfocus
    Network Automation
    risk 0.65cvss 9.8epss 0.15

    A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found.

  • CVE-2018-7175MedFeb 15, 2018
    Xpdf
    Xpdf
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components.

  • CVE-2018-7174MedFeb 15, 2018
    Xpdf
    Xpdf
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams.

  • CVE-2018-7173MedFeb 15, 2018
    Xpdf
    Xpdf
    risk 0.36cvss 5.5epss 0.01

    A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding.

  • CVE-2014-0014MedFeb 15, 2018
    Emberjs
    Ember.js
    risk 0.28cvss 5.4epss 0.01

    Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application using the "{{group}}" Helper and a crafted payload.

  • CVE-2014-0013MedFeb 15, 2018
    Emberjs
    Ember.js
    risk 0.35cvss 5.4epss 0.01

    Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application that contains templates whose context is set to a…

  • CVE-2011-4973CriFeb 15, 2018
    Mod Nss Project
    Mod Nss
    risk 0.64cvss 9.8epss 0.01

    Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.

  • CVE-2018-7169MedFeb 15, 2018
    shadow-utils
    shadow-utils
    risk 0.35cvss 5.3epss 0.02

    An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted. This allows an attacker to remove themselves from a supplementary group, which may allow access to…

  • CVE-2018-7054CriFeb 15, 2018
    Irssi
    Irssi
    risk 0.57cvss 9.8epss 0.02

    An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issue exists because of an incomplete fix for CVE-2017-7191.

  • CVE-2018-7053CriFeb 15, 2018
    Irssi
    Irssi
    risk 0.57cvss 9.8epss 0.02

    An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when SASL messages are received in an unexpected order.

  • CVE-2018-7052HigFeb 15, 2018
    Irssi
    Irssi
    risk 0.42cvss 7.5epss 0.02

    An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available space, a crash due to a NULL pointer dereference would occur.

  • CVE-2018-7051HigFeb 15, 2018
    Irssi
    Irssi
    risk 0.42cvss 7.5epss 0.02

    An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings.

  • CVE-2018-7050HigFeb 15, 2018
    Irssi
    Irssi
    risk 0.42cvss 7.5epss 0.02

    An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference occurs for an "empty" nick.

  • CVE-2018-1041HigFeb 15, 2018
    JBoss
    Jboss Remoting
    risk 0.53cvss 7.5epss 0.16

    A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop.

  • CVE-2017-15089HigFeb 15, 2018
    Infinite
    Infinispan
    risk 0.50cvss 8.8epss 0.03

    It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct…

  • CVE-2017-17302LowFeb 15, 2018
    Huawei
    Te30
    risk 0.21cvss 3.3epss 0.00

    Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability. An authenticated, local attacker may craft and load…

  • CVE-2017-17301CriFeb 15, 2018
    Huawei
    AR120-S
    risk 0.64cvss 9.8epss 0.01

    Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C01,…

  • CVE-2017-17300HigFeb 15, 2018
    Huawei
    S5700
    risk 0.49cvss 7.5epss 0.02

    Huawei S12700 V200R008C00, V200R009C00, S5700 V200R007C00, V200R008C00, V200R009C00, S6700 V200R008C00, V200R009C00, S7700 V200R008C00, V200R009C00, S9700 V200R008C00, V200R009C00 have a numeric errors vulnerability. An unauthenticated, remote attacker may send specific TCP…

  • CVE-2017-17299HigFeb 15, 2018
    Huawei
    AR120-S
    risk 0.49cvss 7.5epss 0.01

    Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00S,…

  • CVE-2017-17298MedFeb 15, 2018
    Huawei
    AR120-S
    risk 0.35cvss 5.3epss 0.01

    Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01,…

  • CVE-2017-17297MedFeb 15, 2018
    Huawei
    AR120-S
    risk 0.35cvss 5.3epss 0.01

    Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01,…

  • CVE-2017-17296MedFeb 15, 2018
    Huawei
    AR120-S
    risk 0.35cvss 5.3epss 0.01

    Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01,…

  • CVE-2017-17295MedFeb 15, 2018
    Huawei
    AR120-S
    risk 0.35cvss 5.3epss 0.01

    Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01,…

  • CVE-2017-17294LowFeb 15, 2018
    Huawei
    MAX PRESENCE
    risk 0.21cvss 3.3epss 0.00

    Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01,…

  • CVE-2017-17293LowFeb 15, 2018
    Huawei
    MAX PRESENCE
    risk 0.21cvss 3.3epss 0.00

    Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01,…

  • CVE-2017-17292LowFeb 15, 2018
    Huawei
    MAX PRESENCE
    risk 0.21cvss 3.3epss 0.00

    Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01,…