VYPR

CVEs

396,166 total · page 6506 of 7,924

AllCriticalHighKEV
  • CVE-2015-5561Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.45

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5560Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.08cvss —epss 0.66

    Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified…

  • CVE-2015-5559Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.08

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5558Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.43

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type…

  • CVE-2015-5557Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.45

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5556Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.45

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5555Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.43

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type…

  • CVE-2015-5554Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.43

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type…

  • CVE-2015-5553Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.06

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2015-5552Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.06

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2015-5551Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.45

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5550Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.45

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5549Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.38

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2015-5548Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.38

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2015-5547Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.38

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2015-5546Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.38

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2015-5545Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.38

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2015-5544Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.38

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2015-5541Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.11

    Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5540Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.46

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5539Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.46

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5134Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.50

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5133Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.51

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified…

  • CVE-2015-5132Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.51

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified…

  • CVE-2015-5131Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.51

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified…

  • CVE-2015-5130Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.50

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5129Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.10

    Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5127Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.50

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5125Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or…

  • CVE-2015-5685Aug 13, 2015
    Bittorrent
    Bootstrap Dht
    risk 0.00cvss —epss 0.06

    The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."

  • CVE-2015-5536Aug 13, 2015
    Belkin
    N300 Dual Band Wi Fi Range Extender Firmware
    risk 0.00cvss —epss 0.05

    Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute arbitrary commands via the (1) sub_dir parameter in a formUSBStorage request; pinCode parameter in a (2) formWpsStart or (3) formiNICWpsStart request; (4)…

  • CVE-2015-5535Aug 13, 2015
    WordPress
    qTranslate
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the qTranslate plugin 2.5.39 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the qtranslate page to wp-admin/options-general.php.

  • CVE-2015-5474Aug 13, 2015
    Utorrent
    Utorrent
    risk 0.00cvss —epss 0.04

    BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.

  • CVE-2015-4666Aug 13, 2015
    Xceedium
    Xsuite
    risk 0.04cvss —epss 0.16

    Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrary files via a ....// (quadruple dot double slash) in the logFile parameter.

  • CVE-2015-4665Aug 13, 2015
    Xceedium
    Xsuite
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the fileName parameter.

  • CVE-2015-3253CriAug 13, 2015
    Apache
    Groovy
    risk 0.67cvss 9.8epss 0.41

    The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.

  • CVE-2015-2321Aug 13, 2015
    WordPress
    Job Manager
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in the Job Manager plugin 0.7.22 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the email field.

  • CVE-2015-5718Aug 12, 2015
    Websense
    Content Gateway
    risk 0.00cvss —epss 0.02

    Stack-based buffer overflow in the handle_debug_network function in the manager in Websense Content Gateway before 8.0.0 HF02 allows remote administrators to cause a denial of service (crash) via a crafted diagnostic command line request to submit_net_debug.cgi.

  • CVE-2015-5166Aug 12, 2015
    Xen
    Xen
    risk 0.00cvss —epss 0.00

    Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which allows local HVM guest users to gain privileges by unplugging a block device twice.

  • CVE-2015-5165Aug 12, 2015
    Xen
    Xen
    risk 0.01cvss —epss 0.13

    The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

  • CVE-2015-5154Aug 12, 2015
    QEMU
    Qemu
    risk 0.00cvss —epss 0.01

    Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.

  • CVE-2015-3908Aug 12, 2015
    Red Hat
    Ansible
    risk 0.00cvss —epss 0.01

    Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

  • CVE-2015-3286Aug 12, 2015
    Openafs
    Openafs
    risk 0.00cvss —epss 0.00

    Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to cause a denial of service (panic or deadlock) or possibly have other unspecified impact via a large group list when joining a PAG.

  • CVE-2015-3285Aug 12, 2015
    Openafs
    Openafs
    risk 0.00cvss —epss 0.00

    The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command.

  • CVE-2015-3284Aug 12, 2015
    Openafs
    Openafs
    risk 0.00cvss —epss 0.00

    pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands.

  • CVE-2015-3283Aug 12, 2015
    Openafs
    Openafs
    risk 0.00cvss —epss 0.02

    OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors.

  • CVE-2015-3282Aug 12, 2015
    Openafs
    Openafs
    risk 0.00cvss —epss 0.02

    vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network.

  • CVE-2015-3213Aug 12, 2015
    Clutter Project
    Clutter
    risk 0.00cvss —epss 0.01

    The gesture handling code in Clutter before 1.16.2 allows physically proximate attackers to bypass the lock screen via certain (1) mouse or (2) touch gestures.

  • CVE-2015-3187Aug 12, 2015
    Apache
    Subversion
    risk 0.01cvss —epss 0.07

    The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a…

  • CVE-2015-3184Aug 12, 2015
    Apache
    Subversion
    risk 0.01cvss —epss 0.11

    mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.