VYPR

CVEs

386,572 total · page 6743 of 7,732

AllCriticalHighKEV
  • CVE-2012-0456Mar 14, 2012
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive…

  • CVE-2012-0455Mar 14, 2012
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows…

  • CVE-2012-0454Mar 14, 2012
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service…

  • CVE-2012-0451Mar 14, 2012
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions…

  • CVE-2012-1480Mar 14, 2012
    Pansi
    Pansi Sms
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Pansi SMS (com.pansi.msg) application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors.

  • CVE-2012-1479Mar 14, 2012
    Movesti
    Acontact
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the AContact (com.movester.quickcontact) application 1.8.2 for Android has unknown impact and attack vectors.

  • CVE-2012-1478Mar 14, 2012
    UCMobile
    BloveStorm
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the UCMobile BloveStorm (com.blovestorm) application 2.2.0 and 3.2.1 for Android has unknown impact and attack vectors.

  • CVE-2012-1477Mar 14, 2012
    Cnectd
    Cnectd
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Cnectd (mci.cnectd) application 3.1.0 for Android has unknown impact and attack vectors.

  • CVE-2012-1476Mar 14, 2012
    Kktalk
    Kktalk
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the KKtalk (com.kkliaotian.android) application 4.0.0 and 4.1.5 for Android has unknown impact and attack vectors.

  • CVE-2012-1475Mar 14, 2012
    YagattaTalk
    YagattaTalk Messenger
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the YagattaTalk Messenger (com.iskoot.yagatta.yagattatalk) application 1.00.01.08 for Android has unknown impact and attack vectors.

  • CVE-2012-1474Mar 14, 2012
    Youni
    Youni SMS
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Youni SMS (com.snda.youni) application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors.

  • CVE-2012-1409Mar 14, 2012
    Tinycouch
    Tiny Password
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Tiny Password (com.tinycouch.android.freepassword) application 1.64 for Android has unknown impact and attack vectors.

  • CVE-2012-1408Mar 14, 2012
    Cc
    App Lock
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the App Lock (com.cc.applock) application 1.7.5 and 1.7.6 for Android has unknown impact and attack vectors.

  • CVE-2012-0124Mar 14, 2012
    Microfocus
    Data Protector Express
    risk 0.08cvss —epss 0.62

    Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.

  • CVE-2012-0123Mar 14, 2012
    Microfocus
    Data Protector Express
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1498.

  • CVE-2012-0122Mar 14, 2012
    Microfocus
    Data Protector Express
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1393.

  • CVE-2012-0121Mar 14, 2012
    Microfocus
    Data Protector Express
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1392.

  • CVE-2012-1663Mar 13, 2012
    GNU
    Gnutls
    risk 0.03cvss —epss 0.05

    Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list.

  • CVE-2012-0770Mar 13, 2012
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.03

    Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

  • CVE-2012-0157HigMar 13, 2012
    Microsoft
    Windows
    risk 0.55cvss 8.4epss 0.01

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle window messaging, which allows local users to gain privileges via a…

  • CVE-2012-0156Mar 13, 2012
    Microsoft
    Windows
    risk 0.01cvss —epss 0.15

    DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unicode characters, which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site,…

  • CVE-2012-0152Mar 13, 2012
    Microsoft
    Windows Server 2008
    risk 0.07cvss —epss 0.86

    The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."

  • CVE-2012-0016Mar 13, 2012
    Microsoft
    Expression Design
    risk 0.05cvss —epss 0.22

    Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .xpr or…

  • CVE-2012-0008Mar 13, 2012
    Microsoft
    Visual Studio
    risk 0.00cvss —epss 0.02

    Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."

  • CVE-2012-0006Mar 13, 2012
    Microsoft
    Windows Server 2003
    risk 0.02cvss —epss 0.31

    The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during record lookup, which allows remote attackers to cause a denial of service (daemon restart) via a crafted query, aka "DNS Denial of Service…

  • CVE-2012-0002Mar 13, 2012
    Microsoft
    Windows
    risk 0.09cvss —epss 0.74

    The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to…

  • CVE-2012-1099Mar 13, 2012
    Rubyonrails
    Rails
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors…

  • CVE-2012-1098Mar 13, 2012
    Rubyonrails
    Rails
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through certain methods.

  • CVE-2012-0690Mar 13, 2012
    TIBCO Software
    Spotfire Analytics Server
    risk 0.00cvss —epss 0.02

    TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to…

  • CVE-2012-0689Mar 13, 2012
    TIBCO Software
    Activematrix Service Grid
    risk 0.00cvss —epss 0.01

    The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via…

  • CVE-2012-0688Mar 13, 2012
    TIBCO Software
    Activematrix Service Grid
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote…

  • CVE-2012-0687Mar 13, 2012
    TIBCO Software
    Activematrix Service Grid
    risk 0.00cvss —epss 0.01

    TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5,…

  • CVE-2012-1472Mar 13, 2012
    VMware
    Vcenter Chargeback Manager
    risk 0.00cvss —epss 0.02

    VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified vectors.

  • CVE-2012-0884Mar 13, 2012
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.14

    The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA)…

  • CVE-2012-0195Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2;…

  • CVE-2011-4819Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow remote attackers to inject arbitrary web script or HTML via the uisesionid parameter to (1) maximo.jsp or (2) the default URI under ui/.

  • CVE-2011-4818Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the uisessionid parameter to an unspecified component.

  • CVE-2011-4817Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and…

  • CVE-2011-4816Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli…

  • CVE-2011-1397Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the Labor Reporting page in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service…

  • CVE-2011-1396Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the reportType parameter to an unspecified component.

  • CVE-2011-1395Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in imicon.jsp in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the controlid parameter.

  • CVE-2011-1394Mar 13, 2012
    IBM
    Maximo Asset Management
    risk 0.00cvss —epss 0.03

    IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB)…

  • CVE-2012-0647Mar 12, 2012
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.

  • CVE-2012-0640Mar 12, 2012
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie.

  • CVE-2012-0584Mar 12, 2012
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via unspecified homoglyphs.

  • CVE-2012-1558Mar 12, 2012
    Yassl
    Cyassl
    risk 0.00cvss —epss 0.01

    yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate.

  • CVE-2012-1557Mar 12, 2012
    Parallels
    Parallels Plesk Panel
    risk 0.00cvss —epss 0.06

    SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x before 9.5 MU#11, 10.0.x before MU#13, 10.1.x before MU#22, 10.2.x before MU#16, and 10.3.x before MU#5 allows remote attackers to execute arbitrary SQL commands…

  • CVE-2011-3047Mar 10, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    The GPU process in Google Chrome before 17.0.963.79 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by leveraging an error in the plug-in loading mechanism.

  • CVE-2012-1545Mar 9, 2012
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.20

    Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at…