VYPR

CVEs

344,987 total · page 6244 of 6,900

AllCriticalHighKEV
  • CVE-2008-1446Oct 15, 2008
    Microsoft
    Internet Printing Protocol
    risk 0.04cvss —epss 0.46

    Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via…

  • CVE-2008-4558Oct 15, 2008
    VLC Media Player
    VLC Media Player
    risk 0.04cvss —epss 0.09

    Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison.

  • CVE-2008-4557Oct 14, 2008
    CuteNews
    CuteNews
    risk 0.07cvss —epss 0.45

    plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression.

  • CVE-2008-4556Oct 14, 2008
    Sun Corporation
    Solaris
    risk 0.09cvss —epss 0.70

    Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request.

  • CVE-2008-4480Oct 14, 2008
    Novell
    Edirectory
    risk 0.01cvss —epss 0.11

    Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap…

  • CVE-2008-4479Oct 14, 2008
    Novell
    Edirectory
    risk 0.01cvss —epss 0.10

    Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header.

  • CVE-2008-4478Oct 14, 2008
    Novell
    Edirectory
    risk 0.01cvss —epss 0.10

    Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted (1) Content-Length header in a SOAP request or (2) Netware Core Protocol opcode 0x0F message, which…

  • CVE-2008-4013Oct 14, 2008
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2008-4012Oct 14, 2008
    Bea
    WebLogic Workshop
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite WLW 8.1SP5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to "some NetUI pageflows."

  • CVE-2008-4011Oct 14, 2008
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote authenticated users to affect integrity via unknown vectors.

  • CVE-2008-4010Oct 14, 2008
    Bea
    WebLogic Workshop
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to "some NetUI tags."

  • CVE-2008-4009Oct 14, 2008
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.1, when configuring multiple authorizers, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2008-4008Oct 14, 2008
    Bea
    WebLogic Server Plugins for Apache
    risk 0.08cvss —epss 0.56

    Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the…

  • CVE-2008-4005Oct 14, 2008
    Oracle Corporation
    Application Express
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Application Express component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2008-4004Oct 14, 2008
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1 allows local users to affect confidentiality and integrity via unknown vectors.

  • CVE-2008-4003Oct 14, 2008
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2008-4002Oct 14, 2008
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2008-4001Oct 14, 2008
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne EP 8.9 and EP 9.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2008-4000Oct 14, 2008
    Oracle Corporation
    Peopletools
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the…

  • CVE-2008-3998Oct 14, 2008
    Oracle Corporation
    Istore
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2008-3996Oct 14, 2008
    Oracle Corporation
    Database 10g
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_CDC_IPUBLISH.

  • CVE-2008-3995Oct 14, 2008
    Oracle Corporation
    Database 10g
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_CDC_PUBLISH.

  • CVE-2008-3994Oct 14, 2008
    Oracle Corporation
    Workspace Manager
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to WMSYS.LTADM.

  • CVE-2008-3993Oct 14, 2008
    Oracle Corporation
    Applications Framework
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote authenticated users to affect integrity via unknown vectors.

  • CVE-2008-3992Oct 14, 2008
    Oracle Corporation
    Database 10g
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to DMSYS.DBMS_DM_EXP_INTERNAL.

  • CVE-2008-3991Oct 14, 2008
    Oracle Corporation
    Database 9i
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to OLAPSYS.CWM2_OLAP_AW_AWUTIL, a different vulnerability than CVE-2008-3990.

  • CVE-2008-3990Oct 14, 2008
    Oracle Corporation
    OLAP component
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to OLAPSYS.CWM2_OLAP_AW_AWUTIL, a different vulnerability than CVE-2008-3991.

  • CVE-2008-3989Oct 14, 2008
    Oracle Corporation
    Data Mining
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Data Mining component in Oracle Database 10.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability, related to DMSYS.ODM_MODEL_UTIL.

  • CVE-2008-3988Oct 14, 2008
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the iSupplier Portal component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2008-3987Oct 14, 2008
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Oracle Discoverer Desktop component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors.

  • CVE-2008-3986Oct 14, 2008
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local users to affect confidentiality via unknown vectors.

  • CVE-2008-3985Oct 14, 2008
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2008-3984Oct 14, 2008
    Oracle Corporation
    Workspace Manager
    risk 0.06cvss —epss 0.42

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than…

  • CVE-2008-3983Oct 14, 2008
    Oracle Corporation
    Workspace Manager
    risk 0.06cvss —epss 0.42

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than…

  • CVE-2008-3982Oct 14, 2008
    Oracle Corporation
    Workspace Manager
    risk 0.04cvss —epss 0.11

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than…

  • CVE-2008-3980Oct 14, 2008
    Oracle Corporation
    Database 10g
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Upgrade component in Oracle Database 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2008-3977Oct 14, 2008
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2008-3975.

  • CVE-2008-3976Oct 14, 2008
    Oracle Corporation
    Spatial
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-3413 and CVE-2009-3414.

  • CVE-2008-3975Oct 14, 2008
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2008-3977.

  • CVE-2008-2625Oct 14, 2008
    Oracle Corporation
    Database 9i
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU.…

  • CVE-2008-2624Oct 14, 2008
    Oracle Corporation
    OLAP component
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2008-2619Oct 14, 2008
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote authenticated users to affect availability via unknown vectors.

  • CVE-2008-2588Oct 14, 2008
    Oracle Corporation
    Jdeveloper
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 allows local users to affect confidentiality via unknown vectors.

  • CVE-2008-4555Oct 14, 2008
    Graphviz
    Graphviz
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large…

  • CVE-2008-4400Oct 14, 2008
    Ca
    Brightstor ARCserve Backup
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authentication credentials, related to "insufficient validation."

  • CVE-2008-4399Oct 14, 2008
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request, related to "insufficient validation."

  • CVE-2008-4398Oct 14, 2008
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request.

  • CVE-2008-4397Oct 14, 2008
    Ca
    Brightstor ARCserve Backup
    risk 0.09cvss —epss 0.81

    Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.

  • CVE-2008-4385Oct 14, 2008
    Husdawg, LLC
    Systems Requirements Lab 3
    risk 0.06cvss —epss 0.38

    Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab,…

  • CVE-2008-3640Oct 14, 2008
    Apple Inc.
    Cups
    risk 0.00cvss —epss 0.05

    Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.