VYPR

CVEs

388,450 total · page 6573 of 7,769

AllCriticalHighKEV
  • CVE-2014-0727Feb 13, 2014
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05318.

  • CVE-2014-0726Feb 13, 2014
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05326.

  • CVE-2014-0725Feb 13, 2014
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.01

    Cisco Unified Communications Manager (UCM) does not require authentication for reading WAR files, which allows remote attackers to obtain sensitive information via unspecified access to a "file storage location," aka Bug ID CSCum05337.

  • CVE-2014-0724Feb 13, 2014
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.01

    The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340.

  • CVE-2014-0723Feb 13, 2014
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum05343.

  • CVE-2014-0722Feb 13, 2014
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.02

    The log4jinit web application in Cisco Unified Communications Manager (UCM) does not properly validate authentication, which allows remote attackers to cause a denial of service (performance degradation) via unspecified use of this application, aka Bug ID CSCum05347.

  • CVE-2013-2585Feb 12, 2014
    Atmail
    Atmail
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Atmail Webmail Server 6.6.x before 6.6.3 and 7.0.x before 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php/mail/viewmessage/getattachment/folder/INBOX/uniqueId//filenameOrigi…

  • CVE-2013-6229Feb 12, 2014
    Atmail
    Atmail
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Atmail Webmail Server 7.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) filter parameter to index.php/mail/mail/listfoldermessages/searching/true/selectFolder/INBOX/resultContext/searchResultsTab…

  • CVE-2014-0501Feb 12, 2014
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.06

    Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0500.

  • CVE-2014-0500Feb 12, 2014
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.06

    Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0501.

  • CVE-2014-0295Feb 12, 2014
    Microsoft
    .net Framework
    risk 0.01cvss —epss 0.14

    VsaVb7rt.dll in Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in February 2014, aka "VSAVB7RT ASLR Vulnerability."

  • CVE-2014-0294Feb 12, 2014
    Microsoft
    Microsoft Forefront Protection 2010
    risk 0.02cvss —epss 0.21

    Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content, which might allow remote attackers to execute arbitrary code via a crafted message, aka "RCE Vulnerability."

  • CVE-2014-0293Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.17

    Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure Vulnerability."

  • CVE-2014-0290Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0267 and CVE-2014-0289.

  • CVE-2014-0289Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.28

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0267 and CVE-2014-0290.

  • CVE-2014-0288Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0270,…

  • CVE-2014-0287Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.26

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0281.

  • CVE-2014-0286Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0275 and…

  • CVE-2014-0285Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0275 and…

  • CVE-2014-0284Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

  • CVE-2014-0283Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

  • CVE-2014-0281Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0287.

  • CVE-2014-0280Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.17

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

  • CVE-2014-0279Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.23

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0277 and CVE-2014-0278.

  • CVE-2014-0278Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.17

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0277 and CVE-2014-0279.

  • CVE-2014-0277Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0278 and CVE-2014-0279.

  • CVE-2014-0276Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.23

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

  • CVE-2014-0275Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.23

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0285 and…

  • CVE-2014-0274Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.24

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0270,…

  • CVE-2014-0273Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.23

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0270,…

  • CVE-2014-0272Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.17

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

  • CVE-2014-0271Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.38

    The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption Vulnerability."

  • CVE-2014-0270Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0273,…

  • CVE-2014-0269Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.17

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

  • CVE-2014-0268Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.22

    Microsoft Internet Explorer 8 through 11 does not properly restrict file installation and registry-key creation, which allows remote attackers to bypass the Mandatory Integrity Control protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege…

  • CVE-2014-0267Feb 12, 2014
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.17

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0289 and CVE-2014-0290.

  • CVE-2014-0266Feb 12, 2014
    Microsoft
    Windows
    risk 0.02cvss —epss 0.19

    The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow…

  • CVE-2014-0263Feb 12, 2014
    Microsoft
    Windows Server 2008
    risk 0.02cvss —epss 0.19

    The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a large 2D geometric figure that is encountered with…

  • CVE-2014-0257Feb 12, 2014
    Microsoft
    .net Framework
    risk 0.09cvss —epss 0.70

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via (1) a crafted web site or (2) a crafted .NET Framework application…

  • CVE-2014-0254Feb 12, 2014
    Microsoft
    Windows 8
    risk 0.03cvss —epss 0.33

    The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service (system hang) via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 (IPv6) Denial…

  • CVE-2014-0253Feb 12, 2014
    Microsoft
    .net Framework
    risk 0.03cvss —epss 0.39

    Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine TCP connection states, which allows remote attackers to cause a denial of service (ASP.NET daemon hang) via crafted HTTP requests that trigger persistent resource consumption for…

  • CVE-2014-1459Feb 11, 2014
    Doorgets
    Doorgets
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the _position_down_id parameter. NOTE: this can be leveraged using CSRF to allow remote attackers to execute…

  • CVE-2014-1401Feb 11, 2014
    Auracms
    Auracms
    risk 0.00cvss —epss 0.03

    Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) search parameter to mod/content/content.php or (2) CLIENT_IP, (3) X_FORWARDED_FOR, (4) X_FORWARDED, (5) FORWARDED_FOR, or (6)…

  • CVE-2014-1237Feb 11, 2014
    Synetics
    Idoit Pro
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter.

  • CVE-2014-0980Feb 11, 2014
    Poster Software
    Publish It
    risk 0.06cvss —epss 0.40

    Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file.

  • CVE-2013-3933Feb 11, 2014
    Joomla
    JoomShopping
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the JoomShopping (com_joomshopping) component before 4.3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the user_name parameter to index.php.

  • CVE-2013-3294Feb 11, 2014
    Exponent
    Exponentcms
    risk 0.00cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execute arbitrary SQL commands via the (1) src or (2) username parameter to index.php.

  • CVE-2013-2639Feb 11, 2014
    Ctera
    Cloud Storage OS
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the description in a project folder.

  • CVE-2013-1980Feb 11, 2014
    Claudio Matsuoka
    libxmp
    risk 0.00cvss —epss 0.04

    Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attackers to execute arbitrary code via a crafted MASI file.

  • CVE-2013-1413Feb 11, 2014
    Synetics
    i-doit open
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1.0 and earlier, and i-doit pro 1.0.2 when the 'sanitize user input' flag is not enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.