VYPR

CVEs

386,623 total · page 6703 of 7,733

AllCriticalHighKEV
  • CVE-2012-2046Aug 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2047.

  • CVE-2012-2045Aug 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2046, and CVE-2012-2047.

  • CVE-2012-2044Aug 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2045, CVE-2012-2046, and CVE-2012-2047.

  • CVE-2012-2043Aug 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2044, CVE-2012-2045, CVE-2012-2046, and CVE-2012-2047.

  • CVE-2012-1535HigKEVAug 15, 2012
    Adobe Inc.
    Flashplayer
    risk 0.71cvss 7.8epss 0.70

    Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in…

  • CVE-2012-1525Aug 15, 2012
    Adobe Inc.
    Acrobat
    risk 0.03cvss —epss 0.32

    Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2012-2527Aug 15, 2012
    Microsoft
    Windows
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted…

  • CVE-2012-2526Aug 15, 2012
    Microsoft
    Windows Xp
    risk 0.02cvss —epss 0.25

    The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to a deleted object, aka "Remote Desktop Protocol…

  • CVE-2012-2524Aug 15, 2012
    Microsoft
    Office
    risk 0.02cvss —epss 0.20

    Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability."

  • CVE-2012-2523Aug 15, 2012
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.22

    Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an incorrect size calculation during object copying, aka "JavaScript Integer Overflow Remote Code Execution…

  • CVE-2012-2522Aug 15, 2012
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.25

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a malformed virtual function table after this table's deletion, aka "Virtual Function Table Corruption Remote Code Execution…

  • CVE-2012-2521Aug 15, 2012
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.21

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Asynchronous NULL Object Access Remote Code Execution Vulnerability."

  • CVE-2012-1888Aug 15, 2012
    Microsoft
    Visio
    risk 0.02cvss —epss 0.24

    Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."

  • CVE-2012-1856HigKEVAug 15, 2012
    Microsoft
    Office
    risk 0.75cvss 8.8epss 0.72

    The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server…

  • CVE-2012-1853Aug 15, 2012
    Microsoft
    Windows Xp
    risk 0.02cvss —epss 0.29

    Stack-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP3 allows remote attackers to execute arbitrary code via crafted RAP response packets, aka "Remote Administration Protocol Stack…

  • CVE-2012-1852Aug 15, 2012
    Microsoft
    Windows Xp
    risk 0.02cvss —epss 0.29

    Heap-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted RAP response packets, aka "Remote Administration Protocol Heap…

  • CVE-2012-1851Aug 15, 2012
    Microsoft
    Windows
    risk 0.05cvss —epss 0.66

    Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response,…

  • CVE-2012-1850Aug 15, 2012
    Microsoft
    Windows
    risk 0.02cvss —epss 0.27

    The Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle RAP responses,…

  • CVE-2012-1526Aug 15, 2012
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.20

    Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."

  • CVE-2012-2155Aug 14, 2012
    Drupal
    CDN2 Video
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the CDN2 Video module 6.x for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

  • CVE-2012-2154Aug 14, 2012
    Drupal
    CDN2 Video
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the CDN2 Video module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-2082Aug 14, 2012
    Chaos Tool Suite Project
    Ctools
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Chaos tool suite (aka CTools) module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature.

  • CVE-2012-2081Aug 14, 2012
    Drupal
    Organic Groups
    risk 0.00cvss —epss 0.02

    The Organic Groups (OG) module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access, which allows remote attackers to obtain sensitive information such as private group titles via a request through the Views module.

  • CVE-2012-2080Aug 14, 2012
    Drupal
    Node Limit Number
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the Node Limit Number module before 6.x-1.2 for Drupal allows remote attackers to hijack the authentication of users with the administer node limitnumber permission for requests that delete limits.

  • CVE-2012-2077Aug 14, 2012
    Sharethis
    Sharethis
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API."

  • CVE-2012-2076Aug 14, 2012
    Sharethis
    Sharethis
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-2075Aug 14, 2012
    Drupal
    Contact Save
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Contact Save module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the access site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-2074Aug 14, 2012
    Drupal
    Ubercart Views
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in certain default views in the Ubercart Views module 6.x before 6.x-3.2 for Drupal allows remote attackers to obtain sensitive information via unknown attack vectors.

  • CVE-2012-2073Aug 14, 2012
    Drupal
    Bundle copy
    risk 0.00cvss —epss 0.02

    The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP for settings" permission while importing settings, which allows remote authenticated users with certain permissions to execute arbitrary PHP code via unspecified vectors.

  • CVE-2012-2072Aug 14, 2012
    Drupal
    AddToAny
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Share Buttons (AddToAny) module 6.x-3.x before 6.x-3.4 for Drupal allows remote authenticated users with the administer addtoany permission to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-2071Aug 14, 2012
    Drupal
    Contact Forms
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Contact Forms module 6.x-1.x before 6.x-1.13 for Drupal when the core contact form is enabled, allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML via…

  • CVE-2012-2070Aug 14, 2012
    Drupal
    MultiBlock
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the MultiBlock module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer blocks permission to inject arbitrary web script or HTML via the block title.

  • CVE-2012-4335Aug 14, 2012
    Samsung Mobile
    Net I Viewer
    risk 0.03cvss —epss 0.03

    Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative size value in a TCP request to (1) NiwMasterService or (2) NiwStorageService. NOTE: some of these details are obtained from third party information.

  • CVE-2012-4334Aug 14, 2012
    Samsung Mobile
    Net I Viewer
    risk 0.04cvss —epss 0.07

    The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party…

  • CVE-2012-4333Aug 14, 2012
    Samsung Mobile
    Net I Viewer
    risk 0.08cvss —epss 0.60

    Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. NOTE: some of…

  • CVE-2012-4332Aug 14, 2012
    WordPress
    ShareYourCart
    risk 0.00cvss —epss 0.02

    The ShareYourCart plugin 1.7.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors related to the SDK.

  • CVE-2012-4331Aug 14, 2012
    Spip
    Spip
    risk 0.00cvss —epss 0.01

    Multiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 have unknown impact and attack vectors that are not related to cross-site scripting (XSS), different vulnerabilities than CVE-2012-2151.

  • CVE-2012-4330Aug 14, 2012
    Samsung Mobile
    D6000 TV
    risk 0.04cvss —epss 0.14

    The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long string in certain fields, as demonstrated by the MAC address field, possibly a buffer overflow.

  • CVE-2012-4329Aug 14, 2012
    Samsung Mobile
    D6000 TV
    risk 0.04cvss —epss 0.13

    The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart) via a crafted controller name.

  • CVE-2012-4328Aug 14, 2012
    Jelsoft
    Vbulletin
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through 4.1.12, Forum 4.1.2 through 4.1.12, and the MAPI plugin 1.4.3 for vBulletin 3.x has unknown impact and attack vectors.

  • CVE-2012-2304Aug 14, 2012
    Drupal
    Linkit
    risk 0.00cvss —epss 0.02

    The Linkit module 7.x-2.x before 7.x-2.3 for Drupal, when using an entity access module, does not check permissions when searching for entities, which allows remote attackers to obtain sensitive information via unspecified vectors.

  • CVE-2012-2300Aug 14, 2012
    Ubercart
    Ubercart
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal allow remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-2299Aug 14, 2012
    Ubercart
    Ubercart
    risk 0.00cvss —epss 0.01

    The Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database.

  • CVE-2012-2298Aug 14, 2012
    Drupal
    Realname
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "user names in page titles" and (2) "autocomplete callbacks."

  • CVE-2012-2209Aug 14, 2012
    Piwigo
    Piwigo
    risk 0.03cvss —epss 0.04

    Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter in the configuration module, (2) installstatus parameter in the languages_new module, or (3) theme…

  • CVE-2012-2208Aug 14, 2012
    Piwigo
    Piwigo
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.

  • CVE-2012-2151Aug 14, 2012
    Spip
    Spip
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in SPIP 1.9.x before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2012-2141Aug 14, 2012
    Net SNMP
    Net SNMP
    risk 0.00cvss —epss 0.02

    Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.

  • CVE-2012-2135Aug 14, 2012
    Python (programming language)
    Python
    risk 0.00cvss —epss 0.05

    The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive information (process memory) or cause a denial of service (memory corruption and…

  • CVE-2011-5099Aug 14, 2012
    Chillcreations
    Mod Ccnewsletter
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.