VYPR

CVEs

401,567 total · page 6365 of 8,032

AllCriticalHighKEV
  • CVE-2016-6209MedMar 31, 2017
    Nagios
    Nagios
    risk 0.40cvss 6.1epss 0.02

    Cross-site scripting (XSS) vulnerability in Nagios.

  • CVE-2015-4624HigMar 31, 2017
    risk 0.55cvss 7.5epss 0.37

    Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.

  • CVE-2014-9114HigMar 31, 2017
    util-linux
    blkid
    risk 0.44cvss 7.8epss 0.01

    Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.

  • CVE-2014-5009CriMar 31, 2017
    Snoopy
    Snoopy
    risk 0.57cvss 9.8epss 0.05

    Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008.

  • CVE-2014-5008CriMar 31, 2017
    Snoopy
    Snoopy
    risk 0.57cvss 9.8epss 0.04

    Snoopy allows remote attackers to execute arbitrary commands.

  • CVE-2014-3931CriKEVMar 31, 2017
    MRLG
    MRLG
    risk 0.78cvss 9.8epss 0.29

    fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.

  • CVE-2008-7313CriMar 31, 2017
    Snoopy
    Snoopy
    risk 0.57cvss 9.8epss 0.05

    The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.

  • CVE-2017-7363MedMar 31, 2017
    Lucidcrew
    Pixie
    risk 0.40cvss 6.1epss 0.01

    Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.

  • CVE-2017-7362MedMar 31, 2017
    Lucidcrew
    Pixie
    risk 0.40cvss 6.1epss 0.01

    Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.

  • CVE-2017-7361MedMar 31, 2017
    Lucidcrew
    Pixie
    risk 0.40cvss 6.1epss 0.01

    Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.

  • CVE-2017-7360MedMar 31, 2017
    Lucidcrew
    Pixie
    risk 0.40cvss 6.1epss 0.01

    Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.

  • CVE-2017-7359MedMar 31, 2017
    Lucidcrew
    Pixie
    risk 0.40cvss 6.1epss 0.01

    Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.

  • CVE-2017-7309MedMar 31, 2017
    Mantisbt
    Mantisbt
    risk 0.29cvss 4.8epss 0.57

    A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted 'config_option' parameter. This is fixed in 1.3.9, 2.1.3, and 2.2.3.

  • CVE-2017-7241MedMar 31, 2017
    Mantisbt
    Mantisbt
    risk 0.24cvss 4.8epss 0.01

    A cross-site scripting (XSS) vulnerability in the MantisBT Move Attachments page (move_attachments_page.php, part of admin tools) allows remote attackers to inject arbitrary code through a crafted 'type' parameter, if Content Security Protection (CSP) settings allows it. This is…

  • CVE-2017-6973MedMar 31, 2017
    Mantisbt
    Mantisbt
    risk 0.24cvss 4.8epss 0.01

    A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2.

  • CVE-2017-2647HigMar 31, 2017
    Linux
    Kernel
    risk 0.51cvss 7.8epss 0.00

    The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in…

  • CVE-2016-9319MedMar 31, 2017
    Trend Micro
    Mobile Security
    risk 0.38cvss 5.9epss 0.01

    There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398.

  • CVE-2017-7346MedMar 30, 2017
    Linux
    Kernel
    risk 0.36cvss 5.5epss 0.00

    The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.7 does not validate certain levels data, which allows local users to cause a denial of service (system hang) via a crafted ioctl call for a /dev/dri/renderD*…

  • CVE-2017-7253HigMar 30, 2017
    Dahuasecurity
    IP Camera Firmware
    risk 0.57cvss 8.8epss 0.03

    Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During…

  • CVE-2017-6412HigMar 30, 2017
    Sophos
    Web Appliance
    risk 0.56cvss 8.1epss 0.08

    In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.

  • CVE-2017-6184MedMar 30, 2017
    Sophos
    Web Appliance
    risk 0.31cvss 4.7epss 0.03

    In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via the token parameter, aka NSWA-1303.

  • CVE-2017-6183HigMar 30, 2017
    Sophos
    Web Appliance
    risk 0.47cvss 7.2epss 0.03

    In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NSWA-1314.

  • CVE-2017-6182CriMar 30, 2017
    Sophos
    Web Appliance
    risk 0.68cvss 9.8epss 0.17

    In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.

  • CVE-2017-5185HigMar 30, 2017
    Microfocus
    Sentinel
    risk 0.49cvss 7.5epss 0.02

    A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service.

  • CVE-2017-5184MedMar 30, 2017
    Microfocus
    Sentinel
    risk 0.35cvss 5.3epss 0.01

    A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeration).

  • CVE-2014-9826CriMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.64cvss 9.8epss 0.04

    ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.

  • CVE-2014-9825HigMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.51cvss 7.8epss 0.01

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9824.

  • CVE-2014-9824HigMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.51cvss 7.8epss 0.02

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9825.

  • CVE-2014-9823HigMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.51cvss 7.8epss 0.02

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9819.

  • CVE-2014-9822HigMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.51cvss 7.8epss 0.02

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file.

  • CVE-2014-9821HigMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.51cvss 7.8epss 0.02

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.

  • CVE-2014-9820HigMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.51cvss 7.8epss 0.02

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file.

  • CVE-2014-9819HigMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.51cvss 7.8epss 0.02

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9823.

  • CVE-2014-9818MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.

  • CVE-2014-9817HigMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.51cvss 7.8epss 0.02

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file.

  • CVE-2014-9816MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.

  • CVE-2014-9815MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file.

  • CVE-2014-9814MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file.

  • CVE-2014-9813MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.

  • CVE-2014-9812MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file.

  • CVE-2014-9811MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed xwd file.

  • CVE-2014-9810MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed dpx file.

  • CVE-2014-9809MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image.

  • CVE-2014-9808MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image.

  • CVE-2014-9807MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.

  • CVE-2014-9806MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.

  • CVE-2014-9805MedMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.36cvss 5.5epss 0.01

    ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file.

  • CVE-2014-9804HigMar 30, 2017
    ImageMagick
    Imagemagick
    risk 0.49cvss 7.5epss 0.03

    vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object."

  • CVE-2016-7542MedMar 30, 2017
    Fortinet
    Fortios
    risk 0.32cvss 4.9epss 0.02

    A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes (not including super-admins) stored on the appliance via the webui REST API, and may therefore be able to…

  • CVE-2016-7541MedMar 30, 2017
    Fortinet
    Fortios
    risk 0.38cvss 5.9epss 0.01

    Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are…