VYPR

CVEs

405,828 total · page 6168 of 8,117

AllCriticalHighKEV
  • CVE-2018-1053HigFeb 9, 2018
    PostgreSQL
    PostgreSQL
    risk 0.46cvss 7.0epss 0.00

    In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of `pg_dumpall -g` under umask which was in effect when the user invoked pg_upgrade,…

  • CVE-2018-1052MedFeb 9, 2018
    PostgreSQL
    PostgreSQL
    risk 0.42cvss 6.5epss 0.02

    Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table.

  • CVE-2018-6872MedFeb 9, 2018
    GNU
    Binutils
    risk 0.36cvss 5.5epss 0.02

    The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (out-of-bounds read and segmentation violation) via a note with a large alignment.

  • CVE-2018-6871CriFeb 9, 2018
    Libreoffice
    Libreoffice
    risk 0.62cvss 9.8epss 0.23

    LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.

  • CVE-2018-6869MedFeb 9, 2018
    Zziplib
    Zziplib
    risk 0.42cvss 6.5epss 0.03

    In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

  • CVE-2016-10712HigFeb 9, 2018
    PHP
    PHP
    risk 0.49cvss 7.5epss 0.02

    In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a "$uri = stream_get_meta_data(fopen($file, "r"))['uri']" call mishandles…

  • CVE-2018-6789CriKEVFeb 8, 2018
    Exim
    Exim
    risk 0.84cvss 9.8epss 0.82

    An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.

  • CVE-2018-6644HigFeb 8, 2018
    Sblim Project
    Small Footprint Cim Broker
    risk 0.49cvss 7.5epss 0.02

    SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI.

  • CVE-2018-6180CriFeb 8, 2018
    Themashabrand
    Online Voting Platform
    risk 0.67cvss 9.8epss 0.04

    A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts.

  • CVE-2017-15914HigFeb 8, 2018
    Borgbackup
    Borg
    risk 0.50cvss 8.8epss 0.02

    Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.

  • CVE-2015-2329MedFeb 8, 2018
    WooCommerce
    WooCommerce
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted order.

  • CVE-2014-8985HigFeb 8, 2018
    Microsoft
    Internet Explorer
    risk 0.50cvss 7.5epss 0.10

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811,…

  • CVE-2014-4145HigFeb 8, 2018
    Microsoft
    Internet Explorer
    risk 0.49cvss 7.5epss 0.09

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811,…

  • CVE-2014-4112HigFeb 8, 2018
    Microsoft
    Internet Explorer
    risk 0.49cvss 7.5epss 0.08

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0304.

  • CVE-2014-4066HigFeb 8, 2018
    Microsoft
    Internet Explorer
    risk 0.49cvss 7.5epss 0.08

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2787, CVE-2014-2790,…

  • CVE-2013-3553HigFeb 8, 2018
    Nitro
    Nitro
    risk 0.51cvss 7.8epss 0.02

    Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file.

  • CVE-2013-3552HigFeb 8, 2018
    Nitro
    Nitro
    risk 0.51cvss 7.8epss 0.03

    Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file.

  • CVE-2013-2830HigFeb 8, 2018
    Sumatrapdfreader
    Sumatrapdf
    risk 0.51cvss 7.8epss 0.04

    Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file.

  • CVE-2012-5360HigFeb 8, 2018
    FFmpeg
    Ffmpeg
    risk 0.57cvss 8.8epss 0.03

    Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file.

  • CVE-2012-5359HigFeb 8, 2018
    FFmpeg
    Ffmpeg
    risk 0.57cvss 8.8epss 0.03

    Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file.

  • CVE-2012-3331MedFeb 8, 2018
    IBM
    Sametime
    risk 0.35cvss 5.3epss 0.02

    IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048.

  • CVE-2012-2166CriFeb 8, 2018
    IBM
    Xiv Storage System 2810 A14 Firmware
    risk 0.64cvss 9.8epss 0.03

    IBM XIV Storage System 2810-A14 and 2812-A14 devices before level 10.2.4.e-2 and 2810-114 and 2812-114 devices before level 11.1.1 have hardcoded passwords for unspecified accounts, which allows remote attackers to gain user access via unknown vectors. IBM X-Force ID: 75041.

  • CVE-2012-0941MedFeb 8, 2018
    Fortinet
    Fortios
    risk 0.40cvss 6.1epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Endpoint Monitor, (2) Dialup List, or (3) Log&Report Display…

  • CVE-2011-4889CriFeb 8, 2018
    IBM
    Websphere Application Server
    risk 0.64cvss 9.8epss 0.03

    The javax.naming.directory.AttributeInUseException class in the Virtual Member Manager in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 does not properly update passwords on a configuration using Tivoli Directory Server,…

  • CVE-2017-6227MedFeb 8, 2018
    Brocade
    Fabric OS
    risk 0.42cvss 6.5epss 0.01

    A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow an attacker to cause a denial of service (CPU consumption and device hang) condition by sending crafted Router…

  • CVE-2017-6225MedFeb 8, 2018
    Brocade
    Fabric OS
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow remote attackers to execute arbitrary code or access sensitive browser-based…

  • CVE-2018-5550MedFeb 8, 2018
    Epson
    AirPrint
    risk 0.43cvss 6.1epss 0.37

    Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on the network to hijack a session cookie or perform other reflected XSS attacks on a currently logged-on user.

  • CVE-2018-1163CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.65cvss 9.8epss 0.16

    This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup 11.2.0.13. The specific flaw exists within JSON RPC Request handling. By setting the checksession parameter to a specific value, it is possible to bypass…

  • CVE-2018-1162HigFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.53cvss 8.1epss 0.05

    This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest NetVault Backup 11.2.0.13. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The…

  • CVE-2018-1161CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.69cvss 9.8epss 0.67

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication is not required to exploit this vulnerability. The specific flaw exists within nvwsworker.exe. When parsing the boundary header of…

  • CVE-2017-17659CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobHistory Get method requests.…

  • CVE-2017-17658CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobDefinitions Get method…

  • CVE-2017-17657CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup TimeRange method…

  • CVE-2017-17656CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup JobList method requests.…

  • CVE-2017-17655CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup PluginList method…

  • CVE-2017-17654CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup ClientList method…

  • CVE-2017-17653CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupOptionSet Get method…

  • CVE-2017-17652CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Count method requests.…

  • CVE-2017-17425CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSourceDeviceSet Get method…

  • CVE-2017-17424CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUScheduleSet Get method requests.…

  • CVE-2017-17423CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupSegment Get method…

  • CVE-2017-17422CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Get method requests. The…

  • CVE-2017-17421CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSelectionSet Get method…

  • CVE-2017-17420CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.68cvss 9.8epss 0.48

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobCountHistory Get method…

  • CVE-2017-17419CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUTransferHistory Get method…

  • CVE-2017-17418CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPolicy Get method requests. The…

  • CVE-2017-17417CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.67cvss 9.8epss 0.10

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Acknowledge method…

  • CVE-2017-17416CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus GetPlugins method…

  • CVE-2017-17415CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Count method…

  • CVE-2017-17414CriFeb 8, 2018
    Quest
    Netvault Backup
    risk 0.64cvss 9.8epss 0.04

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Get method requests.…