VYPR

CVEs

387,791 total · page 6596 of 7,756

AllCriticalHighKEV
  • CVE-2013-4370Oct 17, 2013
    Xen
    Xen
    risk 0.00cvss —epss 0.00

    The ocaml binding for the xc_vcpu_getaffinity function in Xen 4.2.x and 4.3.x frees certain memory that may still be intended for use, which allows local users to cause a denial of service (heap corruption and crash) and possibly execute arbitrary code via unspecified vectors…

  • CVE-2013-4369Oct 17, 2013
    Xen
    Xen
    risk 0.00cvss —epss 0.00

    The xlu_vif_parse_rate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users to cause a denial of service (NULL pointer dereference) by using the "@" character as the VIF rate configuration.

  • CVE-2013-4368Oct 17, 2013
    Xen
    Xen
    risk 0.00cvss —epss 0.00

    The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an uninitialized variable as a segment base, which allows local 64-bit PV guests to obtain sensitive information (hypervisor stack content) via unspecified…

  • CVE-2013-4365Oct 17, 2013
    Apache
    Mod Fcgid
    risk 0.00cvss —epss 0.13

    Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.

  • CVE-2013-4363Oct 17, 2013
    RubyGems
    Rubygems
    risk 0.00cvss —epss 0.02

    Algorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.2, 1.8.24 through 1.8.26, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a…

  • CVE-2013-4287Oct 17, 2013
    RubyGems
    Rubygems
    risk 0.00cvss —epss 0.03

    Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of…

  • CVE-2013-2254Oct 17, 2013
    Apache
    Sling Servlets Post
    risk 0.00cvss —epss 0.04

    The deepGetOrCreateNode function in impl/operations/AbstractCreateOperation.java in org.apache.sling.servlets.post.bundle 2.2.0 and 2.3.0 in Apache Sling does not properly handle a NULL value that returned when the session does not have permissions to the root node, which allows…

  • CVE-2013-2190Oct 17, 2013
    Clutter Project
    Clutter
    risk 0.00cvss —epss 0.01

    The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to…

  • CVE-2013-5376Oct 17, 2013
    IBM
    Storwize Unified V7000
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" attack against an administrative user.

  • CVE-2013-4389Oct 17, 2013
    Rubyonrails
    Rails
    risk 0.00cvss —epss 0.03

    Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction…

  • CVE-2013-3025Oct 17, 2013
    IBM
    Rational Focal Point
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x before 6.6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-0500Oct 17, 2013
    IBM
    Storwize Unified V7000
    risk 0.00cvss —epss 0.01

    IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obtain sensitive information, modify programs or files, or…

  • CVE-2013-3279Oct 16, 2013
    EMC Corporation
    Atmos
    risk 0.00cvss —epss 0.01

    EMC Atmos before 2.1.4 has a blank password for the PostgreSQL account, which allows remote attackers to obtain sensitive administrative information via a database-server connection.

  • CVE-2013-2928Oct 16, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

  • CVE-2013-2927Oct 16, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in the HTMLFormElement::prepareForSubmission function in core/html/HTMLFormElement.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors…

  • CVE-2013-2926Oct 16, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in the IndentOutdentCommand::tryIndentingAsListItem function in core/editing/IndentOutdentCommand.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows user-assisted remote attackers to cause a denial of service or possibly have…

  • CVE-2013-2925Oct 16, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in core/xml/XMLHttpRequest.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger multiple conflicting uses of the same…

  • CVE-2013-5867Oct 16, 2013
    Oracle Corporation
    Siebel CRM
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Siebel Core - Server Infrastructure component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via vectors related to SISNAPI & Network Infrastructure.

  • CVE-2013-5866Oct 16, 2013
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel.

  • CVE-2013-5865Oct 16, 2013
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect availability via unknown vectors related to Utility/User administration.

  • CVE-2013-5864Oct 16, 2013
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to USB hub driver.

  • CVE-2013-5863Oct 16, 2013
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect integrity via vectors related to IPS repository daemon.

  • CVE-2013-5862Oct 16, 2013
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters (CPC) drivers, a different vulnerability than CVE-2014-4215.

  • CVE-2013-5861Oct 16, 2013
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect availability via vectors related to Kernel/KSSL.

  • CVE-2013-5859Oct 16, 2013
    Oracle Corporation
    Primavera Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Instantis EnterpriseTrack component in Oracle Primavera Products Suite 8.0.6 and 8.5 allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2013-5857Oct 16, 2013
    Oracle Corporation
    Industry Applications
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.5 SP3, 4.5 SP3a-k, 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, and 5.0 SP1a-b allows remote authenticated users to affect…

  • CVE-2013-5856Oct 16, 2013
    Oracle Corporation
    Industry Applications
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.5 SP3, 4.5 SP3a-k, 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.5 SP0, 5.5 SP0b, 5.5.1, and 6.0.0 allows remote…

  • CVE-2013-5854Oct 16, 2013
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2013-5852Oct 16, 2013
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than…

  • CVE-2013-5851Oct 16, 2013
    Oracle Corporation
    Java SE Embedded
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.

  • CVE-2013-5850Oct 16, 2013
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a…

  • CVE-2013-5849Oct 16, 2013
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to AWT.

  • CVE-2013-5848Oct 16, 2013
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.

  • CVE-2013-5847Oct 16, 2013
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HRMS eCompensation component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to eCompensation.

  • CVE-2013-5846Oct 16, 2013
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

  • CVE-2013-5845Oct 16, 2013
    Oracle Corporation
    Ilearning
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Administration.

  • CVE-2013-5844Oct 16, 2013
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

  • CVE-2013-5843Oct 16, 2013
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…

  • CVE-2013-5842Oct 16, 2013
    Oracle Corporation
    Java SE Embedded
    risk 0.01cvss —epss 0.18

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a…

  • CVE-2013-5841Oct 16, 2013
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Portal, a different vulnerability than CVE-2013-5794.

  • CVE-2013-5840Oct 16, 2013
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

  • CVE-2013-5839Oct 16, 2013
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect integrity via unknown vectors related to Oracle Java Web Console.

  • CVE-2013-5838Oct 16, 2013
    Oracle Corporation
    Java SE Embedded
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

  • CVE-2013-5837Oct 16, 2013
    Oracle Corporation
    Industry Applications
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.0.3, and 5.0.4 allows remote authenticated users to affect…

  • CVE-2013-5836Oct 16, 2013
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Business Interlink.

  • CVE-2013-5835Oct 16, 2013
    Oracle Corporation
    Siebel CRM
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Open_UI.

  • CVE-2013-5832Oct 16, 2013
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than…

  • CVE-2013-5831Oct 16, 2013
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5819.

  • CVE-2013-5830Oct 16, 2013
    Oracle Corporation
    Jrockit
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

  • CVE-2013-5829Oct 16, 2013
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different…