VYPR

CVEs

387,479 total · page 6603 of 7,750

AllCriticalHighKEV
  • CVE-2013-5496Sep 16, 2013
    Cisco Systems, Inc.
    Nx OS
    risk 0.00cvss —epss 0.02

    Open Network Environment Platform (ONEP) in Cisco NX-OS allows remote authenticated users to cause a denial of service (network-element reload) via a crafted packet, aka Bug ID CSCui51551.

  • CVE-2013-5494Sep 16, 2013
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCui45209…

  • CVE-2013-5495Sep 16, 2013
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681.

  • CVE-2013-4704Sep 16, 2013
    Chamanet
    Chamacargo
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in ChamaNet ChamaCargo 7.0000 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-1824Sep 16, 2013
    PHP
    PHP
    risk 0.00cvss —epss 0.04

    The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the…

  • CVE-2013-1033Sep 16, 2013
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    Screen Lock in Apple Mac OS X before 10.8.5 does not properly track sessions, which allows remote authenticated users to bypass locking by leveraging screen-sharing access.

  • CVE-2013-1032Sep 16, 2013
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted idsc atom in a QuickTime movie file.

  • CVE-2013-1031Sep 16, 2013
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    Power Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate attackers to bypass intended access restrictions by visiting an unattended workstation on which a locking failure had…

  • CVE-2013-1030Sep 16, 2013
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    mdmclient in Mobile Device Management in Apple Mac OS X before 10.8.5 places a password on the command line, which allows local users to obtain sensitive information by listing the process.

  • CVE-2013-1029Sep 16, 2013
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    The kernel in Apple Mac OS X before 10.8.5 allows remote attackers to cause a denial of service (panic) via crafted IGMP packets that leverage incorrect, extraneous code in the IGMP parser.

  • CVE-2013-1028Sep 16, 2013
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate.

  • CVE-2013-1027Sep 16, 2013
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    Installer in Apple Mac OS X before 10.8.5 provides an option to continue a package's installation after encountering a revoked certificate, which might allow user-assisted remote attackers to execute arbitrary code via a crafted package.

  • CVE-2013-1026Sep 16, 2013
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Buffer overflow in ImageIO in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG2000 data in a PDF document.

  • CVE-2013-1025Sep 16, 2013
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Buffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JBIG2 data in a PDF document.

  • CVE-2013-5721Sep 16, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    The dissect_mq_rr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not properly determine when to enter a certain loop, which allows remote attackers to cause a denial of service (application crash) via a…

  • CVE-2013-5722Sep 16, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the LDAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

  • CVE-2013-5719Sep 16, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

  • CVE-2013-5720Sep 16, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.03

    Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

  • CVE-2013-5718Sep 16, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    The dissect_nbap_T_dCH_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dch_id value, which allows remote attackers to cause a denial of service (application crash) via a crafted…

  • CVE-2013-5717Sep 16, 2013
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in…

  • CVE-2013-4813Sep 16, 2013
    Microfocus
    ProCurve Manager
    risk 0.01cvss —epss 0.09

    The Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allows remote attackers to execute arbitrary commands via a HEAD request, aka ZDI-CAN-1745.

  • CVE-2013-4811Sep 16, 2013
    Microfocus
    ProCurve Manager
    risk 0.09cvss —epss 0.71

    UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently…

  • CVE-2013-4812Sep 16, 2013
    Microfocus
    ProCurve Manager
    risk 0.07cvss —epss 0.52

    UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently…

  • CVE-2013-4810CriKEVSep 16, 2013
    Microfocus
    Application LifeCycle Management
    risk 0.85cvss 9.8epss 0.79

    HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet, aka ZDI-CAN-1760. NOTE:…

  • CVE-2013-4809Sep 16, 2013
    Microfocus
    ProCurve Manager
    risk 0.00cvss —epss 0.03

    Multiple SQL injection vulnerabilities in GetEventsServlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter.

  • CVE-2013-2899Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    drivers/hid/hid-picolcd_core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PICOLCD is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device.

  • CVE-2013-2897Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL…

  • CVE-2013-2898Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    drivers/hid/hid-sensor-hub.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_SENSOR_HUB is enabled, allows physically proximate attackers to obtain sensitive information from kernel memory via a crafted device.

  • CVE-2013-2896Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device.

  • CVE-2013-2894Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

  • CVE-2013-2895Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive…

  • CVE-2013-2893Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device,…

  • CVE-2013-2892Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

  • CVE-2013-2891Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

  • CVE-2013-2890Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    drivers/hid/hid-sony.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_SONY is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

  • CVE-2013-2889Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

  • CVE-2013-2888Sep 16, 2013
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that…

  • CVE-2013-5649Sep 13, 2013
    Juniper Networks
    Ive OS
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow (1) remote attackers to inject arbitrary web script or HTML via vectors…

  • CVE-2013-5493Sep 13, 2013
    Cisco Systems, Inc.
    Virtualization Experience Client 6000 Series Firmware
    risk 0.00cvss —epss 0.00

    The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407.

  • CVE-2013-5492Sep 13, 2013
    Cisco Systems, Inc.
    Socialminer
    risk 0.00cvss —epss 0.01

    administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffic, aka Bug ID CSCuh76780.

  • CVE-2013-5489Sep 13, 2013
    Cisco Systems, Inc.
    Socialminer
    risk 0.00cvss —epss 0.01

    The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID…

  • CVE-2013-5482Sep 13, 2013
    Cisco Systems, Inc.
    Prime Lan Management Solution
    risk 0.00cvss —epss 0.01

    Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug…

  • CVE-2013-4705Sep 13, 2013
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script or HTML by leveraging UTF-8 encoding.

  • CVE-2013-5740Sep 12, 2013
    Intel
    C206 Chipset
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) before 1.2, as used by the Intel QM77, QS77, Q77 Express, C216, Q67 Express, C202, C204, and C206 chipsets and Mobile Intel QM67 and QS67 chipsets, when the measured…

  • CVE-2013-5216Sep 12, 2013
    Capasystems
    Performance Guard
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in logreader/uploadreader.jsp in CapaSystems Performance Guard before 6.2.102 allows remote attackers to read arbitrary files via unspecified vectors.

  • CVE-2013-4329Sep 12, 2013
    Xen
    Xen
    risk 0.00cvss —epss 0.01

    The xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access to a busmastering-capable PCI passthrough device before the IOMMU setup is complete, which allows local HVM guest domains to gain privileges or cause a denial of service via a DMA…

  • CVE-2013-2940Sep 12, 2013
    Citrix Systems
    Cloudportal Services Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162.

  • CVE-2013-2939Sep 12, 2013
    Citrix Systems
    Cloudportal Services Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162.

  • CVE-2013-2938Sep 12, 2013
    Citrix Systems
    Cloudportal Services Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162.

  • CVE-2013-2937Sep 12, 2013
    Citrix Systems
    Cloudportal Services Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, related to debugging messages, a different vulnerability than other CVEs listed in CTX137162.