VYPR

CVEs

35,295 total · page 658 of 706

AllCriticalHighKEV
  • CVE-2017-12698CriAug 30, 2017
    Advantech
    Webaccess
    risk 0.64cvss 9.8epss 0.05

    An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Specially crafted requests allow a possible authentication bypass that could allow remote code execution.

  • CVE-2013-7426CriAug 29, 2017
    Kamailio
    Kamailio
    risk 0.64cvss 9.8epss 0.02

    Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1.

  • CVE-2017-12865CriAug 29, 2017
    Connman
    Connman
    risk 0.64cvss 9.8epss 0.06

    Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the "name" variable.

  • CVE-2015-8299CriAug 29, 2017
    Knx
    Ets
    risk 0.64cvss 9.8epss 0.06

    Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute arbitrary code via a crafted KNXnet/IP UDP packet.

  • CVE-2015-7517CriAug 29, 2017
    WordPress
    Double Opt In For Download
    risk 0.64cvss 9.8epss 0.04

    Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to (1) class-doifd-download.php or (2) class-doifd-landing-page.php in public/includes/.

  • CVE-2017-1376CriAug 29, 2017
    IBM
    J9 VM
    risk 0.64cvss 9.8epss 0.03

    A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873.

  • CVE-2017-13715CriAug 29, 2017
    Linux
    Kernel
    risk 0.64cvss 9.8epss 0.10

    The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are initialized, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a…

  • CVE-2017-10842CriAug 29, 2017
    Basercms
    Basercms
    risk 0.64cvss 9.8epss 0.02

    SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2017-10833CriAug 29, 2017
    Nippon Antenna
    Scr02hd Firmware
    risk 0.59cvss 9.1epss 0.02

    "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configurations via unspecified vectors.

  • CVE-2017-10832CriAug 29, 2017
    Dokodemo Eye
    SCR02HD
    risk 0.64cvss 9.8epss 0.03

    "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

  • CVE-2017-8380CriAug 28, 2017
    QEMU
    Qemu
    risk 0.64cvss 9.8epss 0.04

    Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors.

  • CVE-2015-1430CriAug 28, 2017
    Xymon
    Xymon
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow in xymon 4.3.17-1.

  • CVE-2015-1401CriAug 28, 2017
    TYPO3
    ig_ldap_sso_auth
    risk 0.64cvss 9.8epss 0.03

    Improper Authentication vulnerability in the "LDAP / SSO Authentication" (ig_ldap_sso_auth) extension 2.0.0 for TYPO3.

  • CVE-2014-9558CriAug 28, 2017
    Smartcms
    Smartcms
    risk 0.67cvss 9.8epss 0.04

    Multiple SQL injection vulnerabilities in SmartCMS v.2.

  • CVE-2014-9513CriAug 28, 2017
    Xbindkeys Config
    xbindkeys-config
    risk 0.64cvss 9.8epss 0.04

    Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code.

  • CVE-2014-8428CriAug 28, 2017
    Barracuda Networks
    Load Balancer
    risk 0.64cvss 9.8epss 0.02

    Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key.

  • CVE-2014-8426CriAug 28, 2017
    Barracuda Networks
    Load Balancer
    risk 0.64cvss 9.8epss 0.02

    Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015.

  • CVE-2013-0870CriAug 28, 2017
    FFmpeg
    Ffmpeg
    risk 0.64cvss 9.8epss 0.01

    The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check.

  • CVE-2017-13707CriAug 27, 2017
    Replibit
    Backup Manager
    risk 0.64cvss 9.8epss 0.03

    Privilege escalation in Replibit Backup Manager earlier than version 2017.08.04 allows attackers to gain root privileges via sudo command execution. The vi program can be accessed through sudo, in order to navigate the filesystem and modify a critical file such as /etc/passwd.

  • CVE-2017-12816CriAug 25, 2017
    Kaspersky Lab
    Internet Security
    risk 0.64cvss 9.8epss 0.02

    In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC.

  • CVE-2017-12707CriAug 25, 2017
    Spidercontrol
    SCADA Microbrowser
    risk 0.64cvss 9.8epss 0.03

    A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. Opening a maliciously crafted html file may cause a stack overflow.

  • CVE-2014-7859CriAug 25, 2017
    Dlink
    DNR-326
    risk 0.65cvss 9.8epss 0.21

    Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before 2.10 build 03, and DNS-327L before 1.04b01 allows remote attackers to execute arbitrary code by crafting malformed "Host" and…

  • CVE-2014-7858CriAug 25, 2017
    Dlink
    DNR-326
    risk 0.65cvss 9.8epss 0.15

    The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.

  • CVE-2014-7857CriAug 25, 2017
    Dlink
    DNS-320
    risk 0.65cvss 9.8epss 0.15

    D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and log in with administrator permissions by passing the…

  • CVE-2015-8352CriAug 24, 2017
    Zen Cart
    ZenCart
    risk 0.68cvss 9.8epss 0.16

    Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter to ajax.php.

  • CVE-2015-1801CriAug 24, 2017
    Samsung Mobile
    samsung_extdisp driver
    risk 0.64cvss 9.8epss 0.04

    The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to cause a denial of service (memory corruption) or gain privileges.

  • CVE-2017-13669CriAug 24, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.

  • CVE-2017-12679CriAug 24, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.

  • CVE-2017-11357CriKEVAug 23, 2017
    Progress (organisation)
    Telerik Ui For Asp.net Ajax
    risk 0.91cvss 9.8epss 0.76

    Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

  • CVE-2017-11317CriKEVAug 23, 2017
    Telerik
    Ui For Asp.net Ajax
    risk 0.85cvss 9.8epss 0.83

    Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

  • CVE-2017-12965CriAug 23, 2017
    Apache2triad
    Apache2triad
    risk 0.68cvss 9.8epss 0.16

    Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

  • CVE-2015-5224CriAug 23, 2017
    util-linux
    util-linux
    risk 0.57cvss 9.8epss 0.05

    The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

  • CVE-2017-13137CriAug 23, 2017
    WordPress
    Formcraft
    risk 0.64cvss 9.8epss 0.02

    The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.

  • CVE-2017-12858CriAug 23, 2017
    Libzip
    Libzip
    risk 0.64cvss 9.8epss 0.03

    Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.

  • CVE-2017-12791CriAug 23, 2017
    Saltstack
    Salt
    risk 0.64cvss 9.8epss 0.05

    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.

  • CVE-2017-13139CriAug 23, 2017
    ImageMagick
    Imagemagick
    risk 0.64cvss 9.8epss 0.04

    In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.

  • CVE-2016-4460CriAug 22, 2017
    Apache
    Pony Mail
    risk 0.64cvss 9.8epss 0.06

    Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication.

  • CVE-2015-6473CriAug 22, 2017
    Wago
    IO 750-849
    risk 0.64cvss 9.8epss 0.04

    WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.

  • CVE-2015-6472CriAug 22, 2017
    Wago
    IO 750-849
    risk 0.64cvss 9.8epss 0.03

    WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.

  • CVE-2017-12787CriAug 22, 2017
    NoviWare
    NoviWare
    risk 0.69cvss 9.8epss 0.25

    A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are…

  • CVE-2017-12786CriAug 22, 2017
    NoviWare
    NoviWare
    risk 0.69cvss 9.8epss 0.25

    Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are…

  • CVE-2017-12785CriAug 22, 2017
    NoviWare
    NoviWare
    risk 0.68cvss 9.8epss 0.16

    The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user (monitor role) to gain privileged (root)…

  • CVE-2015-2857CriAug 22, 2017
    Accellion
    File Transfer Appliance
    risk 0.73cvss 9.8epss 0.84

    Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter.

  • CVE-2017-7420CriAug 21, 2017
    Microfocus
    Enterprise Developer
    risk 0.64cvss 9.8epss 0.02

    An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers…

  • CVE-2017-12981CriAug 21, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.

  • CVE-2017-11366CriAug 21, 2017
    Codiad
    Codiad
    risk 0.57cvss 9.8epss 0.08

    components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.

  • CVE-2007-5341CriAug 18, 2017
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.03

    Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.

  • CVE-2007-5199CriAug 18, 2017
    Xorg
    Libxfont
    risk 0.64cvss 9.8epss 0.02

    A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.

  • CVE-2017-7364CriAug 18, 2017
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this…

  • CVE-2016-5872CriAug 18, 2017
    Qualcomm
    QTEE
    risk 0.64cvss 9.8epss 0.01

    In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated.