VYPR

CVEs

386,592 total · page 6731 of 7,732

AllCriticalHighKEV
  • CVE-2012-2027May 9, 2012
    Adobe Inc.
    Photoshop
    risk 0.04cvss —epss 0.13

    Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file.

  • CVE-2012-2026May 9, 2012
    Adobe Inc.
    Illustrator
    risk 0.00cvss —epss 0.05

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2024, and CVE-2012-2025.

  • CVE-2012-2025May 9, 2012
    Adobe Inc.
    Illustrator
    risk 0.00cvss —epss 0.05

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2024, and CVE-2012-2026.

  • CVE-2012-2024May 9, 2012
    Adobe Inc.
    Illustrator
    risk 0.00cvss —epss 0.05

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2025, and CVE-2012-2026.

  • CVE-2012-2023May 9, 2012
    Adobe Inc.
    Illustrator
    risk 0.00cvss —epss 0.05

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026.

  • CVE-2012-0780May 9, 2012
    Adobe Inc.
    Illustrator
    risk 0.04cvss —epss 0.15

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026.

  • CVE-2012-0778May 9, 2012
    Adobe Inc.
    Flash Professional
    risk 0.01cvss —epss 0.11

    Buffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2012-1848May 9, 2012
    Microsoft
    Windows
    risk 0.00cvss —epss 0.02

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode,…

  • CVE-2012-1847May 9, 2012
    Microsoft
    Office
    risk 0.02cvss —epss 0.25

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a…

  • CVE-2012-0185May 9, 2012
    Microsoft
    Excel
    risk 0.02cvss —epss 0.25

    Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening,…

  • CVE-2012-0184May 9, 2012
    Microsoft
    Office
    risk 0.02cvss —epss 0.24

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a…

  • CVE-2012-0183May 9, 2012
    Microsoft
    Word
    risk 0.02cvss —epss 0.24

    Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."

  • CVE-2012-0181May 9, 2012
    Microsoft
    Windows
    risk 0.03cvss —epss 0.03

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly manage Keyboard Layout files, which allows…

  • CVE-2012-0180HigMay 9, 2012
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode…

  • CVE-2012-0179May 9, 2012
    Microsoft
    Windows Server 2008
    risk 0.00cvss —epss 0.02

    Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability."

  • CVE-2012-0178May 9, 2012
    Microsoft
    Windows
    risk 0.00cvss —epss 0.02

    Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP)…

  • CVE-2012-0176May 9, 2012
    Microsoft
    Silverlight
    risk 0.02cvss —epss 0.22

    Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vectors involving crafted XAML glyphs, aka "Silverlight Double-Free Vulnerability."

  • CVE-2012-0174May 9, 2012
    Microsoft
    Windows
    risk 0.00cvss —epss 0.05

    Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly enforce firewall rules for outbound broadcast packets, which allows remote attackers to obtain potentially sensitive information by…

  • CVE-2012-0167May 9, 2012
    Microsoft
    Office
    risk 0.02cvss —epss 0.29

    Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."

  • CVE-2012-0165May 9, 2012
    Microsoft
    Office
    risk 0.02cvss —epss 0.25

    GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type…

  • CVE-2012-0164May 9, 2012
    Microsoft
    .net Framework
    risk 0.01cvss —epss 0.17

    Microsoft .NET Framework 4 does not properly compare index values, which allows remote attackers to cause a denial of service (application hang) via crafted requests to a Windows Presentation Foundation (WPF) application, aka ".NET Framework Index Comparison Vulnerability."

  • CVE-2012-0162May 9, 2012
    Microsoft
    .net Framework
    risk 0.02cvss —epss 0.22

    Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Buffer Allocation Vulnerability."

  • CVE-2012-0161May 9, 2012
    Microsoft
    .net Framework
    risk 0.02cvss —epss 0.22

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML…

  • CVE-2012-0160May 9, 2012
    Microsoft
    .net Framework
    risk 0.02cvss —epss 0.23

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application,…

  • CVE-2012-0159May 9, 2012
    Microsoft
    Office
    risk 0.02cvss —epss 0.27

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and…

  • CVE-2012-0143May 9, 2012
    Microsoft
    Office
    risk 0.02cvss —epss 0.22

    Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."

  • CVE-2012-0142May 9, 2012
    Microsoft
    Office
    risk 0.02cvss —epss 0.22

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted…

  • CVE-2012-0141May 9, 2012
    Microsoft
    Office
    risk 0.02cvss —epss 0.22

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted…

  • CVE-2012-0018May 9, 2012
    Microsoft
    Visio Viewer
    risk 0.02cvss —epss 0.25

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."

  • CVE-2012-1675May 8, 2012
    Oracle Corporation
    Database Server
    risk 0.09cvss —epss 0.77

    The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary…

  • CVE-2012-0674May 8, 2012
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.02

    Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site.

  • CVE-2012-0672May 8, 2012
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    WebKit in Apple iOS before 5.1.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

  • CVE-2012-0779May 4, 2012
    Adobe Inc.
    Flashplayer
    risk 0.10cvss —epss 0.87

    Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object…

  • CVE-2012-2450May 4, 2012
    VMware
    Workstation
    risk 0.00cvss —epss 0.02

    VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service (invalid write…

  • CVE-2012-2449May 4, 2012
    VMware
    Workstation
    risk 0.00cvss —epss 0.02

    VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which allows guest OS users to cause a denial of service…

  • CVE-2012-2448May 4, 2012
    VMware
    Esx
    risk 0.00cvss —epss 0.03

    VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via NFS traffic.

  • CVE-2012-1517May 4, 2012
    VMware
    Esx
    risk 0.00cvss —epss 0.02

    The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.

  • CVE-2012-1516CriMay 4, 2012
    VMware
    Esx
    risk 0.65cvss 9.9epss 0.03

    The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving…

  • CVE-2012-0745May 4, 2012
    IBM
    Aix
    risk 0.00cvss —epss 0.00

    The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.

  • CVE-2012-0202May 4, 2012
    IBM
    Cognos Tm1
    risk 0.07cvss —epss 0.54

    Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data.

  • CVE-2012-1328May 3, 2012
    Cisco Systems, Inc.
    Unified IP Phone Firmware
    risk 0.00cvss —epss 0.00

    Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.

  • CVE-2011-3620May 3, 2012
    Apache
    Qpid
    risk 0.00cvss —epss 0.05

    Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.

  • CVE-2012-1710CriKEVMay 3, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.82cvss 9.8epss 0.08

    Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.

  • CVE-2012-1709May 3, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1710.

  • CVE-2012-1708May 3, 2012
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Application Express component in Oracle Database Server 4.0 and 4.1 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2012-1707May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base, a different…

  • CVE-2012-1706May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Logging.

  • CVE-2012-1704May 3, 2012
    Oracle Corporation
    Financial Services Software
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base, a different…

  • CVE-2012-1703May 3, 2012
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer, a different vulnerability than CVE-2012-1690.

  • CVE-2012-1698May 3, 2012
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Oracle Sun Solaris 11 allows remote authenticated users to affect confidentiality, related to Kernel/GLD.