VYPR

CVEs

31,398 total · page 617 of 628

AllCriticalHighKEV
  • CVE-2015-2426HigKEVJul 20, 2015
    Microsoft
    Windows
    risk 0.80cvss 8.8epss 0.92

    Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute…

  • CVE-2015-2387HigKEVJul 14, 2015
    Microsoft
    Windows
    risk 0.65cvss 7.8epss 0.25

    ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges…

  • CVE-2015-2425HigKEVJul 14, 2015
    Microsoft
    Internet Explorer
    risk 0.72cvss 8.8epss 0.35

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.

  • CVE-2015-2424HigKEVJul 14, 2015
    Microsoft
    Word
    risk 0.74cvss 8.8epss 0.64

    Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka…

  • CVE-2015-2419HigKEVJul 14, 2015
    Microsoft
    Internet Explorer
    risk 0.76cvss 8.8epss 0.50

    JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "JScript9 Memory Corruption Vulnerability."

  • CVE-2015-1916HigJul 2, 2015
    IBM
    Java
    risk 0.49cvss 7.5epss 0.01

    Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension provider.

  • CVE-2015-1789HigJun 12, 2015
    OpenSSL Project
    OpenSSL
    risk 0.42cvss 7.5epss 0.05

    The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in…

  • CVE-2015-2360HigKEVJun 10, 2015
    Microsoft
    Windows
    risk 0.73cvss 8.8epss 0.52

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges…

  • CVE-2015-1770HigKEVJun 10, 2015
    Microsoft
    Office
    risk 0.76cvss 8.8epss 0.80

    Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."

  • CVE-2015-3200HigJun 9, 2015
    Lighttpd
    Lighttpd
    risk 0.50cvss 7.5epss 0.20

    mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a string containing a NULL and new line character.

  • CVE-2015-3629HigMay 18, 2015
    Docker
    Libcontainer
    risk 0.44cvss 7.8epss 0.00

    Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

  • CVE-2015-1671HigKEVMay 13, 2015
    Microsoft
    .net Framework
    risk 0.70cvss 7.8epss 0.88

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and…

  • CVE-2015-3035HigKEVApr 22, 2015
    TP-Link
    Archer C5
    risk 0.71cvss 7.5epss 0.92

    Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302,…

  • CVE-2015-1701HigKEVApr 21, 2015
    Microsoft
    Windows
    risk 0.79cvss 7.8epss 0.90

    Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."

  • CVE-2015-0970HigApr 18, 2015
    Searchblox
    Searchblox
    risk 0.57cvss 8.8epss 0.00

    Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users.

  • CVE-2015-1641HigKEVApr 14, 2015
    Microsoft
    Word
    risk 0.70cvss 7.8epss 0.94

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote…

  • CVE-2015-1130HigKEVApr 10, 2015
    Apple Inc.
    OS X
    risk 0.68cvss 7.8epss 0.23

    The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.

  • CVE-2015-1098HigApr 10, 2015
    Apple Inc.
    Iwork
    risk 0.48cvss 7.3epss 0.01

    iWork in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted iWork file.

  • CVE-2015-0666HigKEVApr 3, 2015
    Cisco Systems, Inc.
    Prime Data Center Network Manager
    risk 0.66cvss 7.5epss 0.60

    Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

  • CVE-2015-2177HigMar 7, 2015
    Siemens Foundation
    Simatic S7 300 CPU
    risk 0.55cvss 7.5epss 0.43

    Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.

  • CVE-2015-2051HigKEVFeb 23, 2015
    Dlink
    Dir 645 Firmware
    risk 0.80cvss 8.8epss 0.93

    The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

  • CVE-2015-0310HigKEVJan 23, 2015
    Adobe Inc.
    Flashplayer
    risk 0.64cvss 7.8epss 0.11

    Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an…

  • CVE-2015-0973HigJan 18, 2015
    Libpng
    Libpng
    risk 0.57cvss 8.8epss 0.02

    Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.

  • CVE-2015-0016HigKEVJan 13, 2015
    Microsoft
    Windows
    risk 0.73cvss 7.8epss 0.92

    Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain…

  • CVE-2014-100005HigKEVJan 13, 2015
    Dlink
    DIR-600
    risk 0.71cvss 8.0epss 0.45

    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account or (2) enable remote management…

  • CVE-2014-9495HigJan 10, 2015
    Libpng
    Libpng
    risk 0.57cvss 8.8epss 0.03

    Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image.

  • CVE-2014-9426HigDec 31, 2014
    PHP
    PHP
    risk 0.48cvss 7.3epss 0.01

    The apprentice_load function in libmagic/apprentice.c in the Fileinfo component in PHP through 5.6.4 attempts to perform a free operation on a stack-based character array, which allows remote attackers to cause a denial of service (memory corruption or application crash) or…

  • CVE-2014-9322HigDec 17, 2014
    Linux
    Kernel
    risk 0.47cvss 7.8epss 0.05

    arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the…

  • CVE-2014-9163HigKEVDec 10, 2014
    Adobe Inc.
    Flashplayer
    risk 0.63cvss 7.8epss 0.03

    Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.

  • CVE-2014-7255HigDec 5, 2014
    Internet Initiative Japan Inc.
    Seil/b1
    risk 0.49cvss 7.5epss 0.02

    Internet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 through 4.62, SEIL/X2 2.50 through 4.62, SEIL/B1 2.50 through 4.62, and SEIL/x86 Fuji 1.70 through 3.22 allow remote attackers to cause a denial of service (CPU and traffic consumption) via a large number of NTP…

  • CVE-2014-8439HigKEVNov 25, 2014
    Adobe Inc.
    Air
    risk 0.72cvss 8.8epss 0.34

    Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code…

  • CVE-2014-6324HigKEVNov 18, 2014
    Microsoft
    Windows Server 2003
    risk 0.79cvss 8.8epss 0.90

    The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain…

  • CVE-2014-6332HigKEVNov 11, 2014
    Microsoft
    Windows
    risk 0.80cvss 8.8epss 0.94

    OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted…

  • CVE-2014-4077HigKEVNov 11, 2014
    Microsoft
    Windows
    risk 0.67cvss 7.8epss 0.51

    Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote attackers to bypass a sandbox protection mechanism via a crafted PDF document, aka…

  • CVE-2014-8369HigNov 10, 2014
    Linux
    Kernel
    risk 0.44cvss 7.8epss 0.00

    The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified…

  • CVE-2014-7826HigNov 10, 2014
    Linux
    Kernel
    risk 0.44cvss 7.8epss 0.00

    kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application.

  • CVE-2014-7825HigNov 10, 2014
    Linux
    Kernel
    risk 0.44cvss 7.8epss 0.00

    kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a…

  • CVE-2014-3687HigNov 10, 2014
    Linux
    Kernel
    risk 0.42cvss 7.5epss 0.03

    The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect…

  • CVE-2014-3673HigNov 10, 2014
    Linux
    Kernel
    risk 0.42cvss 7.5epss 0.09

    The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.

  • CVE-2014-4627HigNov 7, 2014
    Rsa
    Web Threat Detection
    risk 0.57cvss 8.8epss 0.02

    SQL injection vulnerability in EMC RSA Web Threat Detection 4.x before 4.6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2014-6352HigKEVOct 22, 2014
    Microsoft
    Windows
    risk 0.73cvss 7.8epss 0.91

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object, as exploited in the wild in October…

  • CVE-2014-4148HigKEVOct 15, 2014
    Microsoft
    Windows
    risk 0.74cvss 8.8epss 0.56

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary…

  • CVE-2014-4123HigKEVOct 15, 2014
    Microsoft
    Internet Explorer
    risk 0.74cvss 8.8epss 0.40

    Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.

  • CVE-2014-4114HigKEVOct 15, 2014
    Microsoft
    Windows
    risk 0.73cvss 7.8epss 0.92

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document, as exploited in…

  • CVE-2014-4113HigKEVOct 15, 2014
    Microsoft
    Windows
    risk 0.72cvss 7.8epss 0.78

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a…

  • CVE-2014-6278HigKEVSep 30, 2014
    GNU
    Bash
    risk 0.80cvss 8.8epss 0.92

    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH…

  • CVE-2013-3632HigSep 29, 2014
    Openmediavault
    Openmediavault
    risk 0.67cvss 8.8epss 0.79

    The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.

  • CVE-2014-4422HigSep 18, 2014
    Apple Inc.
    iOS
    risk 0.53cvss 8.1epss 0.02

    The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process, which allows attackers to bypass certain kernel-hardening protection mechanisms by using a user-space process to observe data related…

  • CVE-2014-4418HigSep 18, 2014
    Apple Inc.
    iOS
    risk 0.51cvss 7.8epss 0.00

    IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fields, a different…

  • CVE-2014-4404HigKEVSep 18, 2014
    Apple Inc.
    iOS
    risk 0.71cvss 7.8epss 0.62

    Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.