VYPR

CVEs

396,255 total · page 6480 of 7,926

AllCriticalHighKEV
  • CVE-2015-4800Oct 21, 2015
    Oracle Corporation
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

  • CVE-2015-4799Oct 21, 2015
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.1, and 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Security.

  • CVE-2015-4798Oct 21, 2015
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Listener, a different vulnerability than…

  • CVE-2015-4797Oct 21, 2015
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect integrity via unknown vectors related to Security.

  • CVE-2015-4796Oct 21, 2015
    Microsoft
    Windows
    risk 0.01cvss —epss 0.18

    Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2, when running on Windows, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than…

  • CVE-2015-4795Oct 21, 2015
    Oracle Corporation
    Industry Applications
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Utilities Work and Asset Management component in Oracle Industry Applications 1.9.1.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Add-On Applications.

  • CVE-2015-4794Oct 21, 2015
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2015-4793Oct 21, 2015
    Oracle Corporation
    Communications Applications
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Communications Convergence component in Oracle Communications Applications 2.0 and 3.0.1 allows remote attackers to affect confidentiality via unknown vectors related to Mail Proxy.

  • CVE-2015-4792Oct 21, 2015
    Fedoraproject
    Fedora
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.

  • CVE-2015-4791Oct 21, 2015
    Oracle Corporation
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Privileges.

  • CVE-2015-4766Oct 21, 2015
    Oracle Corporation
    MySQL
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows local users to affect availability via unknown vectors related to Server : Security : Firewall.

  • CVE-2015-4762Oct 21, 2015
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Online patching.

  • CVE-2015-4734Oct 21, 2015
    Oracle Corporation
    Java SE Embedded
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JGSS.

  • CVE-2015-4730Oct 21, 2015
    Oracle Corporation
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle MySQL 5.6.20 and earlier allows remote authenticated users to affect availability via unknown vectors related to Types.

  • CVE-2015-2642Oct 21, 2015
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Gzip.

  • CVE-2015-2633Oct 21, 2015
    Oracle Corporation
    Enterprise Manager Grid Control
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.0.1 and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Ops Center.

  • CVE-2015-2608Oct 21, 2015
    Oracle Corporation
    Communications Applications
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in (1) the Oracle Communications Diameter Signaling Router (DSR) component in Oracle Communications Applications 4.1.6 and earlier, 5.1.0 and earlier, 6.0.2 and earlier, and 7.1.0 and earlier; (2) the Oracle Communications Performance Intelligence…

  • CVE-2015-1829Oct 21, 2015
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener.

  • CVE-2015-7698Oct 21, 2015
    Icewind1991
    SMB
    risk 0.00cvss —epss 0.02

    icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the (1) listShares function in Server.php or the (2) connect or (3) read function in Share.php.

  • CVE-2015-7299Oct 21, 2015
    Nintex
    K2 Blackpearl
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attackers to execute arbitrary SQL commands via the xml parameter.

  • CVE-2015-5954Oct 21, 2015
    OwnCloud
    Owncloud
    risk 0.00cvss —epss 0.01

    The virtual filesystem in ownCloud Server before 6.0.9, 7.0.x before 7.0.7, and 8.0.x before 8.0.5 does not consider that NULL is a valid getPath return value, which allows remote authenticated users to bypass intended access restrictions and gain access to users files via a…

  • CVE-2015-4718Oct 21, 2015
    OwnCloud
    Owncloud
    risk 0.00cvss —epss 0.03

    The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remote authenticated users to execute arbitrary SMB commands via a ; (semicolon) character in a file.

  • CVE-2015-4717Oct 21, 2015
    OwnCloud
    Owncloud
    risk 0.00cvss —epss 0.03

    The filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 does not properly handle $_GET parameters cast by PHP to an array, which allows remote attackers to cause a denial of service (infinite loop and log file consumption)…

  • CVE-2015-4716Oct 21, 2015
    OwnCloud
    Owncloud
    risk 0.00cvss —epss 0.25

    Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code via unspecified vectors.

  • CVE-2015-7823Oct 21, 2015
    Kentico
    CMS
    risk 0.00cvss —epss 0.05

    Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter.

  • CVE-2015-7822Oct 21, 2015
    Kentico
    CMS
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter name to CMSModules/AdminControls/Pages/UIPage.aspx or the (2) CMSBodyClass cookie variable to the default URI.

  • CVE-2015-5953Oct 21, 2015
    OwnCloud
    Owncloud
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the activity application in ownCloud Server before 7.0.5 and 8.0.x before 8.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a " (double quote) character in a filename in a shared folder.

  • CVE-2015-7876Oct 21, 2015
    Drupal
    Sqlsrv
    risk 0.00cvss —epss 0.02

    The escapeLike function in sqlsrv/database.inc in the Drupal 7 driver for SQL Server and SQL Azure 7.x-1.x before 7.x-1.4 does not properly escape certain characters, which allows remote attackers to execute arbitrary SQL commands via vectors involving a module using the db_like…

  • CVE-2015-7863Oct 19, 2015
    Accelerite
    Radia Client Automation
    risk 0.00cvss —epss 0.02

    The default configuration of Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 enables a remote Notify capability without the Extended Notify Security features, which might allow remote attackers to bypass intended…

  • CVE-2015-7862Oct 19, 2015
    Accelerite
    Radia Client Automation
    risk 0.00cvss —epss 0.02

    Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 improperly implements the Role Based Access Control feature, which might allow remote attackers to modify an account's role assignments via unspecified vectors.

  • CVE-2015-7861Oct 19, 2015
    Accelerite
    Radia Client Automation
    risk 0.00cvss —epss 0.05

    Persistent Accelerite Radia Client Automation (formerly HP Client Automation), possibly before 9.1, allows remote attackers to execute arbitrary code by sending unspecified commands in an environment that lacks relationship-based firewalling.

  • CVE-2015-7860Oct 19, 2015
    Accelerite
    Radia Client Automation
    risk 0.00cvss —epss 0.06

    Stack-based buffer overflow in the agent in Persistent Accelerite Radia Client Automation (formerly HP Client Automation), possibly before 9.1, allows remote attackers to execute arbitrary code by sending a large amount of data in an environment that lacks relationship-based…

  • CVE-2015-7752Oct 19, 2015
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    The SSH server in Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D10, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D35, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X53 before 14.1X53-D25,…

  • CVE-2015-7751Oct 19, 2015
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.00

    Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D35, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D105, 14.1X51 before…

  • CVE-2015-7750Oct 19, 2015
    Juniper Networks
    Screenos
    risk 0.00cvss —epss 0.02

    The L2TP packet processing functionality in Juniper Netscreen and ScreenOS Firewall products with ScreenOS before 6.3.0r13-dnd1, 6.3.0r14 through 6.3.0r18 before 6.3.0r18-dnc1, and 6.3.0r19 allows remote attackers to cause a denial of service via a crafted L2TP packet.

  • CVE-2015-7749Oct 19, 2015
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    The PFE daemon in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service via an unspecified connection request to the "host-OS."

  • CVE-2015-7748Oct 19, 2015
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.03

    Juniper chassis with Trio (Trinity) chipset line cards and Junos OS 13.3 before 13.3R8, 14.1 before 14.1R6, 14.2 before 14.2R5, and 15.1 before 15.1R2 allow remote attackers to cause a denial of service (MPC line card crash) via a crafted uBFD packet.

  • CVE-2015-7833Oct 19, 2015
    Novell
    Suse Linux Enterprise Real Time Extension
    risk 0.00cvss —epss 0.01

    The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux (RHEL) 7.1 allows physically proximate attackers to cause a denial of service (panic) via a nonzero bInterfaceNumber value in a USB device descriptor.

  • CVE-2015-7799Oct 19, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call.

  • CVE-2015-7613Oct 19, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.

  • CVE-2015-6937Oct 19, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.

  • CVE-2015-6252Oct 19, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a denial of service (memory consumption) via a VHOST_SET_LOG_FD ioctl call that triggers permanent file-descriptor allocation.

  • CVE-2015-5707Oct 19, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.

  • CVE-2015-5283Oct 19, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have…

  • CVE-2015-5156Oct 19, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence…

  • CVE-2015-0275Oct 19, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.

  • CVE-2015-7034Oct 18, 2015
    Apple Inc.
    Pages
    risk 0.00cvss —epss 0.03

    The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Pages document.

  • CVE-2015-7033Oct 18, 2015
    Apple Inc.
    Keynote
    risk 0.00cvss —epss 0.03

    The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted document.

  • CVE-2015-7032Oct 18, 2015
    Apple Inc.
    Keynote
    risk 0.00cvss —epss 0.02

    The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document.

  • CVE-2015-6482Oct 18, 2015
    3S Smart Software Solutions
    Codesys Runtime System
    risk 0.00cvss —epss 0.02

    Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted request.