VYPR

CVEs

387,704 total · page 6598 of 7,755

AllCriticalHighKEV
  • CVE-2013-4137Oct 11, 2013
    Status
    Statusnet
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format."

  • CVE-2013-3693Oct 11, 2013
    Blackberry
    Enterprise Service
    risk 0.00cvss —epss 0.01

    The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to upload and execute arbitrary packages via a request to…

  • CVE-2009-5136Oct 11, 2013
    Condor Project
    Condor
    risk 0.00cvss —epss 0.02

    The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.

  • CVE-2007-6755Oct 11, 2013
    NIST
    SP 800-90A
    risk 0.00cvss —epss 0.02

    The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat…

  • CVE-2013-5028Oct 11, 2013
    Kwoksys
    Information Server
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the (1) hardwareType, (2) hardwareStatus, or (3) hardwareLocation parameter in a search command.

  • CVE-2013-4306Oct 11, 2013
    MediaWiki
    Mediawiki
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser extension for MediaWiki, possibly Checkuser before 2.3, allows remote attackers to hijack the authentication of arbitrary users for requests that "perform sensitive write actions" via…

  • CVE-2013-4305Oct 11, 2013
    MediaWiki
    Mediawiki
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

  • CVE-2013-3687Oct 11, 2013
    Airlive
    POE2600HD
    risk 0.03cvss —epss 0.03

    AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified…

  • CVE-2013-3686Oct 11, 2013
    Airlive
    WL2600CAM
    risk 0.05cvss —epss 0.28

    cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action.

  • CVE-2013-2581Oct 11, 2013
    TP-Link
    IP Cameras
    risk 0.03cvss —epss 0.02

    cgi-bin/firmwareupgrade in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to modify the firmware revision via a "preset" action.

  • CVE-2013-2580Oct 11, 2013
    TP-Link
    Lm Firmware
    risk 0.03cvss —epss 0.04

    Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, allows remote attackers to upload arbitrary files, then accessing it via a direct…

  • CVE-2013-2579Oct 11, 2013
    TP-Link
    Lm Firmware
    risk 0.03cvss —epss 0.04

    TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 have an empty password for the hardcoded "qmik" account, which allows remote attackers to obtain administrative access via a TELNET session.

  • CVE-2013-2578Oct 11, 2013
    TP-Link
    Lm Firmware
    risk 0.09cvss —epss 0.74

    cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2)…

  • CVE-2013-5533Oct 11, 2013
    Cisco Systems, Inc.
    Unified IP Phones 9900 Series Firmware
    risk 0.00cvss —epss 0.00

    The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.

  • CVE-2013-5532Oct 11, 2013
    Cisco Systems, Inc.
    9900 IP Phone
    risk 0.00cvss —epss 0.02

    Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service (webapp interface outage) via long values in unspecified fields, aka Bug ID CSCuh10343.

  • CVE-2013-5528Oct 11, 2013
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.05cvss —epss 0.23

    Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.

  • CVE-2013-5527Oct 10, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030.

  • CVE-2013-5526Oct 10, 2013
    Cisco Systems, Inc.
    9900 fourth-generation IP phones
    risk 0.00cvss —epss 0.02

    Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service (device reboot) via crafted SDP packets, aka Bug ID CSCuf06698.

  • CVE-2013-5525Oct 10, 2013
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.

  • CVE-2013-5524Oct 10, 2013
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.

  • CVE-2013-5523Oct 10, 2013
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.00cvss —epss 0.01

    The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a…

  • CVE-2013-5499Oct 10, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service (device reload) by acquiring a lease and then sending a DHCPRELEASE message, aka Bug ID CSCuh46822.

  • CVE-2013-5008Oct 10, 2013
    Symantec
    Management Platform
    risk 0.00cvss —epss 0.00

    The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used in certain Altiris products, use the same registry-entry encryption key across different customers' installations, which makes it easier for local users to…

  • CVE-2013-4396Oct 10, 2013
    Xorg
    Server
    risk 0.00cvss —epss 0.04

    Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that…

  • CVE-2013-4387Oct 10, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.03

    net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption…

  • CVE-2013-4345Oct 10, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.03

    Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management…

  • CVE-2013-3409Oct 10, 2013
    Cisco Systems, Inc.
    Prime Central For Hosted Collaboration Solution
    risk 0.00cvss —epss 0.00

    The portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak file permissions to read these files, aka Bug IDs CSCuh33735 and CSCuh34230.

  • CVE-2013-0580Oct 10, 2013
    IBM
    Infosphere Optim Data Growth For Oracle E Business Suite
    risk 0.00cvss —epss 0.00

    Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of arbitrary users.

  • CVE-2013-0579Oct 10, 2013
    IBM
    Infosphere Optim Data Growth For Oracle E Business Suite
    risk 0.00cvss —epss 0.01

    The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either (1) before or (2) after authentication.

  • CVE-2013-0577Oct 10, 2013
    IBM
    Optim E-Business Console
    risk 0.00cvss —epss 0.01

    The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and create, modify, or delete documents or scripts via unspecified vectors.

  • CVE-2013-4767Oct 10, 2013
    Eucalyptus
    Eucalyptus
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors.

  • CVE-2013-4351Oct 10, 2013
    Gnupg
    Gnupg
    risk 0.00cvss —epss 0.03

    GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey.

  • CVE-2013-4342Oct 10, 2013
    Xinetd
    Xinetd
    risk 0.00cvss —epss 0.06

    xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.

  • CVE-2013-4271Oct 10, 2013
    Restlet
    Restlet
    risk 0.00cvss —epss 0.03

    The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221.

  • CVE-2013-4221Oct 10, 2013
    Restlet
    Restlet
    risk 0.00cvss —epss 0.03

    The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.

  • CVE-2013-2241Oct 10, 2013
    Menalto
    Gallery
    risk 0.00cvss —epss 0.02

    modules/gallery/helpers/data_rest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information (image files) via the "full" string in the size parameter.

  • CVE-2013-2240Oct 10, 2013
    Menalto
    Gallery
    risk 0.00cvss —epss 0.02

    lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138.

  • CVE-2013-2138Oct 10, 2013
    Menalto
    Gallery
    risk 0.00cvss —epss 0.03

    The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack.

  • CVE-2013-1881Oct 10, 2013
    GNOME Foundation
    Librsvg
    risk 0.00cvss —epss 0.03

    GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

  • CVE-2013-4356Oct 9, 2013
    Xen
    Xen
    risk 0.00cvss —epss 0.01

    Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).

  • CVE-2013-4332Oct 9, 2013
    GNU
    Glibc
    risk 0.00cvss —epss 0.03

    Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvalloc, (2) valloc, (3) posix_memalign, (4) memalign, or (5)…

  • CVE-2013-4237Oct 9, 2013
    GNU
    Glibc
    risk 0.00cvss —epss 0.04

    sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted (1) NTFS or (2) CIFS image.

  • CVE-2013-2207Oct 9, 2013
    GNU
    Glibc
    risk 0.00cvss —epss 0.00

    pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.

  • CVE-2013-0736Oct 9, 2013
    WordPress
    Mingle Forum
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) modify user privileges or (2) conduct cross-site scripting…

  • CVE-2012-4424Oct 9, 2013
    GNU
    Glibc
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the…

  • CVE-2012-4412Oct 9, 2013
    GNU
    Glibc
    risk 0.04cvss —epss 0.17

    Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow.

  • CVE-2013-4379Oct 9, 2013
    Drupal
    Make Meeting Scheduler
    risk 0.00cvss —epss 0.01

    The Make Meeting Scheduler module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to bypass intended access restrictions for a poll via a direct request to the node's URL instead of the hashed URL.

  • CVE-2013-5967Oct 9, 2013
    Alienvault
    Open Source Security Information Management
    risk 0.05cvss —epss 0.19

    Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the date_from parameter to (1) radar-iso27001-potential.php, (2)…

  • CVE-2013-5576Oct 9, 2013
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.48

    administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended access restrictions and upload files with dangerous extensions via a filename…

  • CVE-2013-5327Oct 9, 2013
    Adobe Inc.
    Robohelp
    risk 0.00cvss —epss 0.04

    MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.