VYPR

CVEs

404,017 total · page 6231 of 8,081

AllCriticalHighKEV
  • CVE-2017-0316HigOct 16, 2017
    Nvidia
    Geforce Experience
    risk 0.51cvss 7.8epss 0.00

    In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value passed from a user to the driver is used without validation, which may lead to denial of service or possible escalation of privileges.

  • CVE-2015-7504HigOct 16, 2017
    QEMU
    Qemu
    risk 0.50cvss 8.8epss 0.01

    Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.

  • CVE-2017-15289MedOct 16, 2017
    QEMU
    Qemu
    risk 0.39cvss 6.0epss 0.00

    The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.

  • CVE-2017-15265HigOct 16, 2017
    Linux
    Kernel
    risk 0.46cvss 7.0epss 0.00

    Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and…

  • CVE-2017-15221HigOct 16, 2017
    Mini Stream
    Asx To Mp3 Converter
    risk 0.54cvss 7.8epss 0.05

    ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324.

  • CVE-2015-7687CriOct 16, 2017
    OpenSMTPD
    OpenSMTPD
    risk 0.64cvss 9.8epss 0.04

    Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta.

  • CVE-2015-4650CriOct 16, 2017
    Arubanetworks
    ClearPass Policy Manager
    risk 0.64cvss 9.8epss 0.06

    Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors.

  • CVE-2015-3229MedOct 16, 2017
    Fedorahosted
    spin-kickstarts
    risk 0.39cvss 5.9epss 0.02

    fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates.

  • CVE-2015-2780CriOct 16, 2017
    Berta
    Berta CMS
    risk 0.68cvss 9.8epss 0.15

    Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

  • CVE-2014-0208MedOct 16, 2017
    Theforeman
    Foreman
    risk 0.35cvss 5.4epss 0.01

    Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted key name.

  • CVE-2017-15384MedOct 16, 2017
    Phpjabbers
    Rate Me
    risk 0.40cvss 6.1epss 0.01

    rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action.

  • CVE-2017-15383HigOct 16, 2017
    Nero
    Nero
    risk 0.51cvss 7.8epss 0.00

    Nero 7.10.1.0 has an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILES(x86)%\Nero directory.

  • CVE-2017-15361MedOct 16, 2017
    Infineon
    Rsa Library
    risk 0.39cvss 5.9epss 0.10

    The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to…

  • CVE-2017-15297HigOct 16, 2017
    SAP
    Hostcontrol
    risk 0.49cvss 7.5epss 0.03

    SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993.

  • CVE-2017-15296HigOct 16, 2017
    SAP
    CRM
    risk 0.57cvss 8.8epss 0.01

    The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.

  • CVE-2017-15295CriOct 16, 2017
    SAP
    Xpress Server
    risk 0.64cvss 9.8epss 0.02

    Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064.

  • CVE-2017-15294MedOct 16, 2017
    SAP
    CRM
    risk 0.40cvss 6.1epss 0.01

    The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964.

  • CVE-2017-15293CriOct 16, 2017
    SAP
    Xpress Server
    risk 0.64cvss 9.8epss 0.04

    Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064.

  • CVE-2017-14952CriOct 16, 2017
    Unicode
    International Components for Unicode
    risk 0.64cvss 9.8epss 0.05

    Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.

  • CVE-2016-4461HigOct 16, 2017
    Apache
    Struts
    risk 0.51cvss 8.8epss 0.08

    Apache Struts 2.x before 2.3.29 allows remote attackers to execute arbitrary code via a "%{}" sequence in a tag attribute, aka forced double OGNL evaluation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0785.

  • CVE-2014-9148CriOct 16, 2017
    Fiyo
    FiyoCMS
    risk 0.68cvss 9.8epss 0.11

    Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update" or (2) Backup super administrator function via the view parameter in a direct request to fiyo/dapur.

  • CVE-2014-9147HigOct 16, 2017
    Fiyo
    FiyoCMS
    risk 0.53cvss 7.5epss 0.11

    Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in .backup/.

  • CVE-2014-8621CriOct 16, 2017
    WordPress
    Store Locator
    risk 0.64cvss 9.8epss 0.03

    SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php.

  • CVE-2014-8087MedOct 16, 2017
    WordPress
    post highlights
    risk 0.40cvss 6.1epss 0.02

    Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/ph_save.php.

  • CVE-2014-7851HigOct 16, 2017
    Ovirt
    Ovirt
    risk 0.49cvss 7.5epss 0.01

    oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user.

  • CVE-2014-3702CriOct 16, 2017
    ENovance
    eDeploy
    risk 0.59cvss 9.1epss 0.02

    Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.

  • CVE-2016-8734MedOct 16, 2017
    Apache
    Subversion
    risk 0.43cvss 6.5epss 0.06

    Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU…

  • CVE-2014-0029MedOct 16, 2017
    Red Hat
    katello-headpin
    risk 0.40cvss 6.1epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

  • CVE-2017-15376CriOct 16, 2017
    Mobatek
    Mobaxterm
    risk 0.64cvss 9.8epss 0.04

    The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute arbitrary commands via TCP port 23.

  • CVE-2017-15375MedOct 16, 2017
    Wpjobboard
    Wpjobboard
    risk 0.40cvss 6.1epss 0.01

    Multiple client-side cross site scripting vulnerabilities have been discovered in the WpJobBoard v4.5.1 web-application for WordPress. The vulnerabilities are located in the `query` and `id` parameters of the `wpjb-email`, `wpjb-job`, `wpjb-application`, and `wpjb-membership`…

  • CVE-2017-15374MedOct 16, 2017
    Shopware
    Shopware
    risk 0.43cvss 6.1epss 0.05

    Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent…

  • CVE-2017-15373CriOct 16, 2017
    E Sic
    E-Sic
    risk 0.64cvss 9.8epss 0.02

    E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area).

  • CVE-2017-15372MedOct 16, 2017
    Sound Exchange Project
    Sound Exchange
    risk 0.36cvss 5.5epss 0.02

    There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

  • CVE-2017-15371MedOct 16, 2017
    Sound Exchange Project
    Sound Exchange
    risk 0.36cvss 5.5epss 0.02

    There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

  • CVE-2017-15370MedOct 16, 2017
    Sound Exchange Project
    Sound Exchange
    risk 0.36cvss 5.5epss 0.02

    There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

  • CVE-2017-15369HigOct 16, 2017
    Artifex
    Mupdf
    risk 0.51cvss 7.8epss 0.01

    The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service (Fitz fz_drop_imp use-after-free and application crash) or…

  • CVE-2017-15368HigOct 16, 2017
    Radare
    Radare2
    risk 0.51cvss 7.8epss 0.01

    The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect…

  • CVE-2017-15362MedOct 16, 2017
    Osticket
    Osticket
    risk 0.40cvss 6.1epss 0.01

    osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish…

  • CVE-2017-15303HigOct 16, 2017
    Cpuid
    CPU Z
    risk 0.51cvss 7.8epss 0.02

    In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machine (while CPU-Z is running) can issue an ioctl 0x9C402430 call to the kernel-mode driver (e.g., cpuz141_x64.sys for…

  • CVE-2017-15302HigOct 16, 2017
    Cpuid
    CPU Z
    risk 0.51cvss 7.8epss 0.00

    In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver (e.g., cpuz143_x64.sys for version 1.43) that can result in information disclosure or elevation of privileges, because of an arbitrary read of any physical address via ioctl 0x9C402604. Any…

  • CVE-2017-15364MedOct 15, 2017
    Ccsv Project
    Ccsv
    risk 0.36cvss 5.5epss 0.01

    The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact via a crafted file. NOTE: This has been disputed and it is argued that this is not present in…

  • CVE-2017-15363HigOct 15, 2017
    Luracast
    Restler
    risk 0.50cvss 7.5epss 0.15

    Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter.

  • CVE-2017-15360MedOct 15, 2017
    PRTG Network Monitor
    Network Monitor
    risk 0.35cvss 5.4epss 0.01

    PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script.

  • CVE-2017-15300MedOct 15, 2017
    Ewbf
    Cuda Zcash Miner
    risk 0.35cvss 5.3epss 0.01

    The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET / HTTP/1.1"), which allows for a Denial of Service attack preventing a user from viewing their mining statistics by an…

  • CVE-2017-15305MedOct 15, 2017
    Nexusphp Project
    Nexusphp
    risk 0.40cvss 6.1epss 0.01

    XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.

  • CVE-2017-15304CriOct 15, 2017
    Airtame
    Web Panel
    risk 0.64cvss 9.8epss 0.01

    /bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. This can be used to achieve persistent access to the admin panel even after an admin password change.

  • CVE-2017-15299MedOct 14, 2017
    Linux
    Kernel
    risk 0.36cvss 5.5epss 0.01

    The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a…

  • CVE-2017-12629CriOct 14, 2017
    Apache
    Solr
    risk 0.67cvss 9.8epss 0.92

    Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note…

  • CVE-2017-15298MedOct 14, 2017
    Git
    Git
    risk 0.36cvss 5.5epss 0.02

    Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory consumption) via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not…

  • CVE-2017-6224HigOct 13, 2017
    Ruckus
    Unleashed AP
    risk 0.57cvss 8.8epss 0.01

    Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could…