VYPR

CVEs

386,559 total · page 6749 of 7,732

AllCriticalHighKEV
  • CVE-2011-3015Feb 16, 2012
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2012-0767MedKEVFeb 16, 2012
    Adobe Inc.
    Flashplayer
    risk 0.52cvss 6.1epss 0.06

    Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web…

  • CVE-2012-0756Feb 16, 2012
    Adobe Inc.
    Flashplayer
    risk 0.01cvss —epss 0.14

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different…

  • CVE-2012-0755Feb 16, 2012
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different…

  • CVE-2012-0754HigKEVFeb 16, 2012
    Adobe Inc.
    Flashplayer
    risk 0.75cvss 8.1epss 0.91

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption)…

  • CVE-2012-0753Feb 16, 2012
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption)…

  • CVE-2012-0752Feb 16, 2012
    Adobe Inc.
    Flashplayer
    risk 0.01cvss —epss 0.09

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption)…

  • CVE-2012-0751Feb 16, 2012
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.04

    The ActiveX control in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2012-0508Feb 15, 2012
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX, 1.3.0 and earlier, and 1.2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2012-0506Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to…

  • CVE-2012-0505Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…

  • CVE-2012-0504Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install and the Java…

  • CVE-2012-0503Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to…

  • CVE-2012-0502Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to…

  • CVE-2012-0501Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability via unknown vectors.

  • CVE-2012-0500Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.08cvss —epss 0.58

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,…

  • CVE-2012-0499Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier; and JavaFX 2.0.2 and earlier; allows remote attackers to affect confidentiality,…

  • CVE-2012-0498Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related…

  • CVE-2012-0497Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

  • CVE-2011-3563Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors…

  • CVE-2012-0766Feb 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761,…

  • CVE-2012-0765Feb 15, 2012
    Adobe Inc.
    Robohelp
    risk 0.00cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 8 and 9 for Word allow remote attackers to inject arbitrary web script or HTML via a crafted URL, related to certain .htm files in (1) template_stock and (2) template_csh directories.

  • CVE-2012-0764Feb 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.05

    The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761,…

  • CVE-2012-0763Feb 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761,…

  • CVE-2012-0762Feb 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761,…

  • CVE-2012-0761Feb 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0762,…

  • CVE-2012-0760Feb 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0761, CVE-2012-0762,…

  • CVE-2012-0759Feb 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0771.

  • CVE-2012-0758Feb 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2012-0757Feb 15, 2012
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0760, CVE-2012-0761, CVE-2012-0762,…

  • CVE-2012-0155Feb 14, 2012
    Microsoft
    Internet Explorer
    risk 0.05cvss —epss 0.65

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."

  • CVE-2012-0154Feb 14, 2012
    Microsoft
    Windows
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted…

  • CVE-2012-0150Feb 14, 2012
    Microsoft
    Windows
    risk 0.02cvss —epss 0.24

    Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, aka "Msvcrt.dll Buffer Overflow Vulnerability."

  • CVE-2012-0149Feb 14, 2012
    Microsoft
    Windows Server 2003
    risk 0.00cvss —epss 0.01

    afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege…

  • CVE-2012-0148Feb 14, 2012
    Microsoft
    Windows
    risk 0.00cvss —epss 0.02

    afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which…

  • CVE-2012-0145Feb 14, 2012
    Microsoft
    Sharepoint Server
    risk 0.01cvss —epss 0.17

    Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in…

  • CVE-2012-0144Feb 14, 2012
    Microsoft
    Sharepoint Server
    risk 0.01cvss —epss 0.17

    Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in…

  • CVE-2012-0138Feb 14, 2012
    Microsoft
    Visio Viewer
    risk 0.02cvss —epss 0.20

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability…

  • CVE-2012-0137Feb 14, 2012
    Microsoft
    Visio Viewer
    risk 0.02cvss —epss 0.20

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability…

  • CVE-2012-0136Feb 14, 2012
    Microsoft
    Visio Viewer
    risk 0.02cvss —epss 0.20

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability…

  • CVE-2012-0020Feb 14, 2012
    Microsoft
    Visio Viewer
    risk 0.02cvss —epss 0.20

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability…

  • CVE-2012-0019Feb 14, 2012
    Microsoft
    Visio Viewer
    risk 0.02cvss —epss 0.20

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability…

  • CVE-2012-0017Feb 14, 2012
    Microsoft
    Sharepoint Foundation
    risk 0.01cvss —epss 0.17

    Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."

  • CVE-2012-0015Feb 14, 2012
    Microsoft
    .net Framework
    risk 0.02cvss —epss 0.23

    Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET…

  • CVE-2012-0014HigFeb 14, 2012
    Microsoft
    .net Framework
    risk 0.53cvss 7.8epss 0.28

    Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a…

  • CVE-2012-0012Feb 14, 2012
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.16

    Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability."

  • CVE-2012-0011Feb 14, 2012
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.27

    Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "HTML Layout Remote Code Execution Vulnerability."

  • CVE-2012-0010Feb 14, 2012
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.13

    Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows user-assisted remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Copy and Paste Information Disclosure Vulnerability."

  • CVE-2010-5085Feb 14, 2012
    Hulihan
    Amethyst
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in admin/update_user in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the…

  • CVE-2010-5084Feb 14, 2012
    E107
    E107
    risk 0.00cvss —epss 0.00

    The cross-site request forgery (CSRF) protection mechanism in e107 before 0.7.23 uses a predictable random token based on the creation date of the administrator account, which allows remote attackers to hijack the authentication of administrators for requests that add new users…