VYPR

CVEs

387,321 total · page 6613 of 7,747

AllCriticalHighKEV
  • CVE-2011-1483Jul 29, 2013
    Microfocus
    OpenView Network Node Manager
    risk 0.00cvss —epss 0.03

    wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and…

  • CVE-2013-3580Jul 29, 2013
    Trustgo
    Antivirus \& Mobile Security
    risk 0.00cvss —epss 0.01

    The TrustGo Antivirus & Mobile Security application before 1.3.6 for Android allows attackers to cause a denial of service (application crash) via a crafted application that sends an intent to com.trustgo.mobile.security.USSDScannerActivity with zero arguments.

  • CVE-2013-3033Jul 29, 2013
    IBM
    Tivoli Remote Control
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the server component in IBM Tivoli Remote Control 5.1.2 before 5.1.2-TIV-TRC512-IF0015 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2013-4854Jul 29, 2013
    Isc
    Bind
    risk 0.03cvss —epss 0.34

    The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon…

  • CVE-2013-4942Jul 29, 2013
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote…

  • CVE-2013-4941Jul 29, 2013
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to…

  • CVE-2013-4940Jul 29, 2013
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary…

  • CVE-2013-4939Jul 29, 2013
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to…

  • CVE-2013-4938Jul 29, 2013
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    The LTI (aka IMS-LTI) mod_form implementation in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly support the sendname, sendemailaddr, and acceptgrades settings, which allows remote attackers to obtain…

  • CVE-2013-2246Jul 29, 2013
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    mod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/feedback:view capability before displaying recent feedback, which allows remote authenticated users to obtain sensitive…

  • CVE-2013-2245Jul 29, 2013
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly implement the use of RSS tokens for impersonation, which allows remote authenticated users to obtain sensitive block information by…

  • CVE-2013-2244Jul 29, 2013
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field.

  • CVE-2013-2243Jul 29, 2013
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by reading the HTML source code of a document.

  • CVE-2013-2242Jul 29, 2013
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/chat:chat capability before authorizing daemon-mode chat, which allows remote authenticated users to bypass…

  • CVE-2013-4801Jul 29, 2013
    Microfocus
    Loadrunner
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1736.

  • CVE-2013-4800Jul 29, 2013
    Microfocus
    Loadrunner
    risk 0.06cvss —epss 0.39

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735.

  • CVE-2013-4799Jul 29, 2013
    Microfocus
    Loadrunner
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1734.

  • CVE-2013-4798Jul 29, 2013
    Microfocus
    Loadrunner
    risk 0.08cvss —epss 0.67

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705.

  • CVE-2013-4797Jul 29, 2013
    Microfocus
    Loadrunner
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1690.

  • CVE-2013-2370Jul 29, 2013
    Microfocus
    Loadrunner
    risk 0.08cvss —epss 0.62

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1671.

  • CVE-2013-2369Jul 29, 2013
    Microfocus
    Loadrunner
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1670.

  • CVE-2013-2368Jul 29, 2013
    Microfocus
    Loadrunner
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to cause a denial of service via unknown vectors, aka ZDI-CAN-1669.

  • CVE-2013-4802Jul 29, 2013
    Microfocus
    Application LifeCycle Management
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality Center before 11.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka ZDI-CAN-1565.

  • CVE-2013-3445Jul 29, 2013
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.00cvss —epss 0.03

    The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service (CPU consumption or process crash) via a flood of malformed IP packets, aka Bug ID CSCug94572.

  • CVE-2013-3300Jul 29, 2013
    Liftweb
    Lift
    risk 0.00cvss —epss 0.01

    The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character.

  • CVE-2013-4937Jul 26, 2013
    Asus
    AiCloud
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT-N56U, and DSL-N55U with firmware before 3.0.4.372 have unknown impact and attack vectors.

  • CVE-2013-4015Jul 26, 2013
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.03

    Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected Mode or (2) Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code.

  • CVE-2013-3431Jul 25, 2013
    Cisco Systems, Inc.
    Video Surveillance Manager
    risk 0.04cvss —epss 0.09

    Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka…

  • CVE-2013-3430Jul 25, 2013
    Cisco Systems, Inc.
    Video Surveillance Manager
    risk 0.04cvss —epss 0.08

    Cisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37288.

  • CVE-2013-3429Jul 25, 2013
    Cisco Systems, Inc.
    Video Surveillance Manager
    risk 0.04cvss —epss 0.10

    Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.

  • CVE-2013-3414Jul 25, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080.

  • CVE-2013-3999Jul 25, 2013
    IBM
    Social Media Analytics
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Social Media Analytics 1.2 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-3979Jul 25, 2013
    IBM
    Cognos Command Center
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Web\Content\Help\ in the Web Client in IBM Cognos Command Center (aka Star Command Center or Star Analytics) before 10.1, when Internet Explorer is used, allow remote authenticated users to inject arbitrary…

  • CVE-2013-3438Jul 24, 2013
    Cisco Systems, Inc.
    Unified Meetingplace Web Conferencing
    risk 0.00cvss —epss 0.01

    The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.

  • CVE-2012-6581Jul 24, 2013
    Bestpractical
    Rt
    risk 0.00cvss —epss 0.01

    Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to bypass intended restrictions on reading keys in the product's keyring, and trigger outbound e-mail messages signed by an arbitrary stored secret key, by…

  • CVE-2012-6580Jul 24, 2013
    Bestpractical
    Rt
    risk 0.00cvss —epss 0.01

    Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, does not ensure that the UI labels unencrypted messages as unencrypted, which might make it easier for remote attackers to spoof details of a message's origin or interfere with…

  • CVE-2012-6579Jul 24, 2013
    Bestpractical
    Rt
    risk 0.00cvss —epss 0.01

    Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to configure encryption or signing for certain outbound e-mail, and possibly cause a denial of service (loss of e-mail readability), via an e-mail message to a…

  • CVE-2012-6578Jul 24, 2013
    Bestpractical
    Rt
    risk 0.00cvss —epss 0.01

    Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" queue configuration, uses a queue's key for signing, which might allow remote attackers to spoof messages by leveraging the lack of authentication semantics.

  • CVE-2013-3440Jul 23, 2013
    Cisco Systems, Inc.
    Unified Operations Manager
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186.

  • CVE-2013-3439Jul 23, 2013
    Cisco Systems, Inc.
    Unified Operations Manager
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka Bug ID CSCud80182.

  • CVE-2013-2249Jul 23, 2013
    Apache
    HTTP Server
    risk 0.01cvss —epss 0.14

    mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors.

  • CVE-2013-4002Jul 23, 2013
    Apache
    Xerces2 Java
    risk 0.00cvss —epss 0.25

    XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java…

  • CVE-2013-3012Jul 23, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via…

  • CVE-2013-3011Jul 23, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via…

  • CVE-2013-3010Jul 23, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3007.

  • CVE-2013-3009Jul 23, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.04

    The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to…

  • CVE-2013-3008Jul 23, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006.

  • CVE-2013-3007Jul 23, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006.

  • CVE-2013-3006Jul 23, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3008.

  • CVE-2013-4890Jul 23, 2013
    Samsung Mobile
    PS50C7700
    risk 0.03cvss —epss 0.03

    The DMCRUIS/0.1 web server on the Samsung PS50C7700 TV allows remote attackers to cause a denial of service (daemon crash) via a long URI to TCP port 5600.