VYPR

CVEs

386,623 total · page 6701 of 7,733

AllCriticalHighKEV
  • CVE-2012-0847Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.01

    Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file.

  • CVE-2012-3456Aug 20, 2012
    Calligra
    Calligra
    risk 0.05cvss —epss 0.20

    Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted…

  • CVE-2012-3447Aug 20, 2012
    OpenStack
    Nova
    risk 0.00cvss —epss 0.02

    virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability…

  • CVE-2012-2387Aug 20, 2012
    Debian
    Devotee
    risk 0.00cvss —epss 0.01

    devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack.

  • CVE-2012-2132Aug 20, 2012
    GNOME Foundation
    Libsoup
    risk 0.00cvss —epss 0.02

    libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection.

  • CVE-2012-0947Aug 20, 2012
    Libav
    Libav
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute…

  • CVE-2012-0859Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.04

    The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier. NOTE: this…

  • CVE-2012-0858Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.04

    The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (application crash) and…

  • CVE-2012-0853Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.04

    The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of…

  • CVE-2012-0852Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary…

  • CVE-2012-0851Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly…

  • CVE-2011-3952Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via…

  • CVE-2011-3951Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary…

  • CVE-2011-3947Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.04

    Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute…

  • CVE-2011-3940Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted NSV…

  • CVE-2011-3936Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and…

  • CVE-2011-3929Aug 20, 2012
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.05

    The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (NULL pointer…

  • CVE-2012-4359Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.00cvss —epss 0.03

    Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified…

  • CVE-2012-4358Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.00cvss —epss 0.03

    Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified…

  • CVE-2012-4357Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.04cvss —epss 0.07

    Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an…

  • CVE-2012-4356Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.05cvss —epss 0.27

    Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a…

  • CVE-2012-4355Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.04cvss —epss 0.08

    TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorrect function-pointer…

  • CVE-2012-4354Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.04cvss —epss 0.08

    TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer…

  • CVE-2012-4353Aug 19, 2012
    Sielcosistemi
    Winlog Pro
    risk 0.05cvss —epss 0.25

    Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the…

  • CVE-2012-4007Aug 17, 2012
    Mixi
    Mixi
    risk 0.00cvss —epss 0.01

    The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a crafted application that leverages the storage of these comments on an SD card.

  • CVE-2012-4006Aug 17, 2012
    Gree
    Haconiwa
    risk 0.00cvss —epss 0.01

    The GREE application before 1.4.0, GREE Tanken Dorirando application before 1.0.7, GREE Tsurisuta application before 1.5.0, GREE Monpura application before 1.1.1, GREE Kaizokuoukoku Columbus application before 1.3.5, GREE haconiwa application before 1.1.0, GREE Seisen Cerberus…

  • CVE-2012-3296Aug 17, 2012
    IBM
    Power Hardware Management Console
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Help link in the login panel in IBM Power Hardware Management Console (HMC) 7R7.1.0 before SP4, 7R7.2.0 before SP2, and 7R7.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-2205Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a workspace query.

  • CVE-2012-2169Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field.

  • CVE-2012-2168Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.00cvss —epss 0.01

    IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter.

  • CVE-2012-2165Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.00cvss —epss 0.01

    IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote authenticated users to read password hashes via a user query.

  • CVE-2012-2164Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.00cvss —epss 0.01

    The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access restrictions, and use the Site Administration menu to modify system settings, via a parameter-tampering attack.

  • CVE-2012-0744Aug 17, 2012
    IBM
    Rational Clearquest
    risk 0.04cvss —epss 0.08

    IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information via a request to a (1) snoop, (2) hello, (3) ivt/, (4) hitcount, (5) HitCount.jsp, (6) HelloHTMLError.jsp, (7) HelloHTML.jsp, (8)…

  • CVE-2012-3308Aug 17, 2012
    IBM
    Sametime
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat.

  • CVE-2012-3294Aug 17, 2012
    IBM
    Websphere Mq
    risk 0.03cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier, and WebSphere MQ - Managed File Transfer 7.5, allow remote attackers to hijack the authentication of arbitrary users for requests…

  • CVE-2012-2206Aug 17, 2012
    IBM
    Websphere Mq
    risk 0.03cvss —epss 0.02

    The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.

  • CVE-2012-3381Aug 17, 2012
    SBLIM
    SFCB
    risk 0.00cvss —epss 0.00

    sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

  • CVE-2012-2750Aug 17, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has not commented on this possibility.

  • CVE-2012-2749Aug 17, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.

  • CVE-2012-2102Aug 17, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.

  • CVE-2012-1908Aug 17, 2012
    Splunk
    Splunk
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2012-1597Aug 17, 2012
    Ez
    Ezjscore
    risk 0.00cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-1585Aug 17, 2012
    OpenStack
    Nova
    risk 0.00cvss —epss 0.02

    OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.

  • CVE-2009-5026Aug 17, 2012
    MySQL
    MySQL
    risk 0.04cvss —epss 0.08

    The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments.

  • CVE-2012-4298Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.06

    Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.

  • CVE-2012-4297Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet.

  • CVE-2012-4296Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet.

  • CVE-2012-4295Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    Array index error in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service (application crash) via a crafted speed (aka rate) value.

  • CVE-2012-4294Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.03

    Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed (aka rate) value.

  • CVE-2012-4293Aug 16, 2012
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly handle certain integer fields, which allows remote attackers to cause a denial of service (application exit) via a…