VYPR

CVEs

387,228 total · page 6622 of 7,745

AllCriticalHighKEV
  • CVE-2013-2412Jun 18, 2013
    Openjdk
    OpenJDK
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous…

  • CVE-2013-2407Jun 18, 2013
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the…

  • CVE-2013-2400Jun 18, 2013
    Oracle Corporation
    Jre
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-3744.

  • CVE-2013-1571Jun 18, 2013
    Openjdk
    OpenJDK
    risk 0.05cvss —epss 0.67

    Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc.…

  • CVE-2013-1500Jun 18, 2013
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to…

  • CVE-2013-3927Jun 18, 2013
    Siemens Foundation
    Comos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the client library in Siemens COMOS 9.2 before 9.2.0.6.10 and 10.0 before 10.0.3.0.4 allows local users to obtain unintended write access to the database by leveraging read access.

  • CVE-2013-3647Jun 18, 2013
    Cybozu
    Live
    risk 0.00cvss —epss 0.01

    The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL. NOTE: this…

  • CVE-2013-3646Jun 18, 2013
    Cybozu
    Live
    risk 0.00cvss —epss 0.02

    The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression.

  • CVE-2013-3644Jun 18, 2013
    Justsystems
    Ichitaro
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in JustSystems Ichitaro 2006 through 2013; Ichitaro Pro through 2; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro Portable with oreplug; Ichitaro Viewer; and Ichitaro JUST School through 2010 allows remote attackers to execute arbitrary code…

  • CVE-2013-4616Jun 18, 2013
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The WifiPasswordController generateDefaultPassword method in Preferences in Apple iOS 6 and earlier relies on the UITextChecker suggestWordInLanguage method for selection of Wi-Fi hotspot WPA2 PSK passphrases, which makes it easier for remote attackers to obtain access via a…

  • CVE-2013-1203Jun 18, 2013
    Cisco Systems, Inc.
    Asa Cx Context Aware Security Software
    risk 0.00cvss —epss 0.01

    Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service (device reload) via crafted TCP packets that appear to have been forwarded by a Cisco Adaptive Security Appliances (ASA) device, aka Bug ID CSCue88386.

  • CVE-2013-4612Jun 17, 2013
    Vanderbilt
    Redcap
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in REDCap before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving different modules.

  • CVE-2013-4611Jun 17, 2013
    REDCap
    REDCap
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page.

  • CVE-2013-4610Jun 17, 2013
    REDCap
    REDCap
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap before 5.0.3 and 5.1.x before 5.1.2 has unknown impact and remote attack vectors.

  • CVE-2013-4609Jun 17, 2013
    Vanderbilt
    Redcap
    risk 0.00cvss —epss 0.02

    REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass intended access restrictions via (1) the Online Designer or (2) the Data Dictionary upload, as…

  • CVE-2013-4608Jun 17, 2013
    REDCap
    REDCap
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page.

  • CVE-2013-2981Jun 17, 2013
    IBM
    Data Studio
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors.

  • CVE-2013-2980Jun 17, 2013
    IBM
    Data Studio
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information.

  • CVE-2013-1097Jun 17, 2013
    Novell
    Zenworks Configuration Management
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onload event.

  • CVE-2013-1095Jun 17, 2013
    Novell
    Zenworks Configuration Management
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError event.

  • CVE-2013-1094Jun 17, 2013
    Novell
    Zenworks Configuration Management
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via an invalid locale.

  • CVE-2013-1093Jun 17, 2013
    Novell
    Zenworks Configuration Management
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks…

  • CVE-2012-6567Jun 17, 2013
    REDCap
    REDCap
    risk 0.00cvss —epss 0.01

    REDCap before 4.14.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the logic of a custom rule.

  • CVE-2012-6566Jun 17, 2013
    REDCap
    REDCap
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in REDCap before 4.14.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-6565Jun 17, 2013
    REDCap
    REDCap
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in REDCap before 4.14.3 allows remote authenticated users to inject arbitrary web script or HTML via uppercase characters in JavaScript events within user-defined labels.

  • CVE-2012-6564Jun 17, 2013
    REDCap
    REDCap
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in REDCap before 4.14.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-3643Jun 17, 2013
    Galapagos
    Galapagos Browser
    risk 0.00cvss —epss 0.01

    The Galapagos Browser application for Android does not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.

  • CVE-2013-3642Jun 17, 2013
    Adgjm
    Angel Browser
    risk 0.00cvss —epss 0.01

    The Angel Browser application 1.47b and earlier for Android 1.6 through 2.1, 1.62b and earlier for Android 2.2 through 2.3.4, 1.68b and earlier for Android 3.0 through 4.0.3, and 1.76b and earlier for Android 4.1 through 4.2 does not properly implement the WebView class, which…

  • CVE-2013-3520Jun 17, 2013
    VMware
    Vcenter Chargeback Manager
    risk 0.07cvss —epss 0.56

    VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2013-3026Jun 17, 2013
    IBM
    Lotus Quickr
    risk 0.00cvss —epss 0.03

    Buffer overflow in the Lotus Quickr for Domino ActiveX control in qp2.cab in IBM Lotus Quickr 8.1 before FP 8.1.0.32-001a, 8.2 before FP 8.2.0.28-001a, and 8.5.1 before FP 8.5.1.39-002a for Domino allows remote attackers to execute arbitrary code via a crafted web site.

  • CVE-2013-2310Jun 17, 2013
    Softbank
    Wisprclient
    risk 0.00cvss —epss 0.01

    SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi application before 1.7.1,…

  • CVE-2013-2309Jun 17, 2013
    Tejimaya
    Openpne
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the management screen in OpenPNE 3.4.x before 3.4.21.1, 3.6.x before 3.6.9.1, and 3.8.x before 3.8.5.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the "mobile version color scheme."

  • CVE-2013-0148Jun 16, 2013
    Faircom
    C Treeace
    risk 0.00cvss —epss 0.01

    The Data Camouflage (aka FairCom Standard Encryption) algorithm in FairCom c-treeACE does not ensure that a decryption key is needed for accessing database contents, which allows context-dependent attackers to read cleartext database records by copying a database to another…

  • CVE-2013-2066Jun 15, 2013
    Xorg
    Libxv
    risk 0.00cvss —epss 0.02

    Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function.

  • CVE-2013-2005Jun 15, 2013
    Xorg
    libXt
    risk 0.00cvss —epss 0.02

    X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4)…

  • CVE-2013-2004Jun 15, 2013
    Xorg
    Libx11
    risk 0.00cvss —epss 0.02

    The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.

  • CVE-2013-2003Jun 15, 2013
    Xorg
    libXcursor
    risk 0.00cvss —epss 0.02

    Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the _XcursorFileHeaderCreate function.

  • CVE-2013-2002Jun 15, 2013
    Xorg
    libXt
    risk 0.00cvss —epss 0.03

    Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the _XtResourceConfigurationEH function.

  • CVE-2013-2001Jun 15, 2013
    Xorg
    libXxf86vm
    risk 0.00cvss —epss 0.03

    Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function.

  • CVE-2013-2000Jun 15, 2013
    Xorg
    libXxf86dga
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions.

  • CVE-2013-1999Jun 15, 2013
    Xorg
    Libxvmc
    risk 0.00cvss —epss 0.02

    Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvMCGetDRInfo function.

  • CVE-2013-1998Jun 15, 2013
    Xorg
    Libxi
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.

  • CVE-2013-1997Jun 15, 2013
    Xorg
    Libx11
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XAllocColorCells, (2) _XkbReadGetDeviceInfoReply, (3)…

  • CVE-2013-1996Jun 15, 2013
    Xorg
    libFS
    risk 0.00cvss —epss 0.01

    X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.

  • CVE-2013-1995Jun 15, 2013
    Xorg
    Libxi
    risk 0.00cvss —epss 0.02

    X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.

  • CVE-2013-2064Jun 15, 2013
    Xorg
    libxcb
    risk 0.00cvss —epss 0.02

    Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.

  • CVE-2013-2063Jun 15, 2013
    LibXtst
    libXtst
    risk 0.00cvss —epss 0.01

    Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XRecordGetContext function.

  • CVE-2013-2062Jun 15, 2013
    Xorg
    libXp
    risk 0.00cvss —epss 0.02

    Multiple integer overflows in X.org libXp 1.0.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XpGetAttributes, (2) XpGetOneAttribute, (3) XpGetPrinterList, and (4) XpQueryScreens functions.

  • CVE-2013-1994Jun 15, 2013
    Openchrome
    Openchrome
    risk 0.00cvss —epss 0.02

    Multiple integer overflows in X.org libchromeXvMC and libchromeXvMCPro in openChrome 0.3.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) uniDRIOpenConnection and (2) uniDRIGetClientDriverName…

  • CVE-2013-1993Jun 15, 2013
    Mesa
    libGLX
    risk 0.00cvss —epss 0.03

    Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.