VYPR

CVEs

387,028 total · page 6638 of 7,741

AllCriticalHighKEV
  • CVE-2013-2686Apr 1, 2013
    Asterisk
    Certified Asterisk
    risk 0.00cvss —epss 0.02

    main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict…

  • CVE-2013-2685Apr 1, 2013
    Asterisk
    Asterisk Open Source
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol (SDP) header.

  • CVE-2013-2264Apr 1, 2013
    Asterisk
    Certified Asterisk
    risk 0.00cvss —epss 0.01

    The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before…

  • CVE-2013-0130Mar 29, 2013
    Coreftp
    Coreftp
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in Core FTP before 2.2 build 1769 allow remote FTP servers to execute arbitrary code or cause a denial of service (application crash) via a long directory name in a (1) DELE, (2) LIST, or (3) VIEW command.

  • CVE-2013-2301Mar 29, 2013
    Omron
    Openwnn
    risk 0.00cvss —epss 0.01

    The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem.

  • CVE-2013-1299Mar 29, 2013
    Microsoft
    Windows Modern Mail
    risk 0.01cvss —epss 0.09

    Microsoft Windows Modern Mail allows remote attackers to spoof link targets via a crafted HTML e-mail message.

  • CVE-2013-1085Mar 29, 2013
    Novell
    Groupwise Messenger
    risk 0.00cvss —epss 0.06

    Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute arbitrary code via an import command containing a long string in the filename parameter.

  • CVE-2013-1083Mar 29, 2013
    Novell
    Identity Manager Roles Based Provisioning Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager (aka IDM) Roles Based Provisioning Module 4.0.2 before Field Patch C has unknown impact and attack vectors.

  • CVE-2013-1082Mar 29, 2013
    Novell
    Zenworks Mobile Management
    risk 0.01cvss —epss 0.13

    Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and execute arbitrary local files via the language parameter.

  • CVE-2013-1080Mar 29, 2013
    Novell
    Zenworks Configuration Management
    risk 0.09cvss —epss 0.77

    The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to conduct directory traversal attacks, and consequently upload and execute arbitrary…

  • CVE-2013-1079Mar 29, 2013
    Novell
    Zenworks Configuration Management
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web…

  • CVE-2013-0532Mar 29, 2013
    IBM
    Security Appscan
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that cause a denial of service…

  • CVE-2013-0513Mar 29, 2013
    IBM
    Security Appscan
    risk 0.00cvss —epss 0.00

    IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program, related to an…

  • CVE-2013-0512Mar 29, 2013
    IBM
    Security Appscan
    risk 0.00cvss —epss 0.01

    Stack-based buffer overflow in the Manual Explore browser plug-in for Firefox in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to cause a denial of service (plug-in crash) via a crafted…

  • CVE-2013-0511Mar 29, 2013
    IBM
    Security Appscan
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified parameters.

  • CVE-2013-0510Mar 29, 2013
    IBM
    Security Appscan
    risk 0.00cvss —epss 0.01

    IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends session cookies to a specific external server, which allows man-in-the-middle attackers to hijack the test account by capturing these cookies.

  • CVE-2013-0474Mar 29, 2013
    IBM
    Security Appscan
    risk 0.00cvss —epss 0.01

    The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to discover test Platform Authentication credentials via a crafted web site.

  • CVE-2013-0473Mar 29, 2013
    IBM
    Security Appscan
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allow remote attackers to inject arbitrary web script or HTML via a crafted report.

  • CVE-2013-0452Mar 29, 2013
    IBM
    Tivoli Endpoint Manager
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format…

  • CVE-2012-6534Mar 29, 2013
    Novell
    Sentinel Log Manager
    risk 0.03cvss —epss 0.04

    Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a…

  • CVE-2013-2690Mar 28, 2013
    Synchroweb
    Synconnect
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action.

  • CVE-2013-2290Mar 28, 2013
    Arubanetworks
    Arubaos
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller,…

  • CVE-2013-1861Mar 28, 2013
    MariaDB
    MariaDB
    risk 0.04cvss —epss 0.19

    MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that…

  • CVE-2013-1747Mar 28, 2013
    Ngircd
    Ngircd
    risk 0.00cvss —epss 0.03

    channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a KICK command for a user who is not on the associated channel.

  • CVE-2013-1492Mar 28, 2013
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553.

  • CVE-2013-1148Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S allows remote attackers to cause a denial of service (device reload) via crafted (1) IPv4…

  • CVE-2013-1147Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The Protocol Translation (PT) functionality in Cisco IOS 12.3 through 12.4 and 15.0 through 15.3, when one-step port-23 translation or a Telnet-to-PAD ruleset is configured, does not properly validate TCP connection information, which allows remote attackers to cause a denial of…

  • CVE-2013-1146Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst switches allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in Smart Install packets, aka Bug ID CSCub55790.

  • CVE-2013-1145Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled, allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed SIP messages, aka Bug ID CSCtl99174.

  • CVE-2013-1144Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a denial of service (memory consumption) via unspecified (1) IPv4 or (2) IPv6 IKE packets, aka Bug ID CSCth81055.

  • CVE-2013-1143Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service (incorrect memory access and device…

  • CVE-2013-1142Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial of service (memory consumption) via IPv4 packets, aka Bug IDs CSCtg47129 and CSCtz96745.

  • CVE-2012-5879Mar 28, 2013
    McAfee
    Mcafee Virtual Technician
    risk 0.03cvss —epss 0.05

    An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method.

  • CVE-2012-5216Mar 28, 2013
    Microfocus
    ProCurve 1700-8
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown…

  • CVE-2012-0553Mar 28, 2013
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a different vulnerability than CVE-2013-1492.

  • CVE-2013-2494Mar 28, 2013
    Isc
    DHCP
    risk 0.00cvss —epss 0.01

    libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated by a memory-exhaustion attack against a machine running a dhcpd process, a related issue to…

  • CVE-2013-2266Mar 28, 2013
    Isc
    Bind
    risk 0.03cvss —epss 0.43

    libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a…

  • CVE-2013-2717Mar 28, 2013
    EMC Corporation
    Smarts Network Configuration Manager
    risk 0.00cvss —epss 0.01

    Multiple unspecified vulnerabilities in the System Management (aka SysAdmin) Console in EMC Smarts Network Configuration Manager (NCM) through 9.2 have unknown impact and attack vectors, a different issue than CVE-2013-0935. NOTE: this might overlap CVEs for open-source server…

  • CVE-2013-0936Mar 28, 2013
    EMC Corporation
    Smarts IP Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web…

  • CVE-2013-0935Mar 28, 2013
    EMC Corporation
    Smarts Network Configuration Manager
    risk 0.00cvss —epss 0.04

    EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2013-0926Mar 28, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.

  • CVE-2013-0925Mar 28, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a URL to this extension, which has unspecified impact and remote attack vectors.

  • CVE-2013-0924Mar 28, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.

  • CVE-2013-0923Mar 28, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2013-0922Mar 28, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require HTTP Basic Authentication, which has unspecified impact and attack vectors.

  • CVE-2013-0921Mar 28, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    The Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use of separate processes, which makes it easier for remote attackers to bypass intended access restrictions via a crafted web site.

  • CVE-2013-0920Mar 28, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2013-0919Mar 28, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the presence of an extension that creates a pop-up window.

  • CVE-2013-0918Mar 28, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 26.0.1410.43 does not prevent navigation to developer tools in response to a drag-and-drop operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.

  • CVE-2013-0917Mar 28, 2013
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    The URL loader in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.