CVEs

386,445 total · page 6775 of 7,729

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2011-3215	Apple Inc. Mac OS X		0.00	—	0.00		Oct 14, 2011	The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the (1) loginwindow, (2) boot, or…
CVE-2011-3214	Apple Inc. Mac OS X		0.00	—	0.00		Oct 14, 2011	IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate attackers to bypass the password requirement via unspecified vectors.
CVE-2011-3213	Apple Inc. Mac OS X		0.00	—	0.01		Oct 14, 2011	The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an…
CVE-2011-3212	Apple Inc. Mac OS X		0.00	—	0.00		Oct 14, 2011	CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate attackers to obtain sensitive information by reading directly from the disk device.
CVE-2011-0260	Apple Inc. Mac OS X		0.00	—	0.00		Oct 14, 2011	The CoreProcesses component in Apple Mac OS X 10.7 before 10.7.2 does not prevent a system window from receiving keystrokes in the locked-screen state, which might allow physically proximate attackers to bypass intended access restrictions by typing into this window.
CVE-2011-0231	Apple Inc. Mac OS X		0.00	—	0.01		Oct 14, 2011	CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it easier for remote web servers to track users via a cookie, related to a "synchronization issue."
CVE-2011-0230	Apple Inc. Mac OS X		0.00	—	0.04		Oct 14, 2011	Buffer overflow in the ATSFontDeactivate API in Apple Type Services (ATS) in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
CVE-2011-0229	Apple Inc. Mac OS X		0.00	—	0.02		Oct 14, 2011	Apple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote attackers to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access.
CVE-2011-0224	Apple Inc. Mac OS X		0.00	—	0.03		Oct 14, 2011	CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QuickTime movie file.
CVE-2011-0185	Apple Inc. Mac OS X		0.00	—	0.00		Oct 14, 2011	Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows local users to gain privileges via a crafted name of an executable file.
CVE-2011-3252	Apple Inc. iTunes		0.00	—	0.06		Oct 12, 2011	Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Advanced Audio Coding (AAC) stream.
CVE-2011-3244	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3241	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3239	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3238	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3237	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3236	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3235	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3233	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3219	Apple Inc. iTunes		0.00	—	0.05		Oct 12, 2011	Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
CVE-2011-2831	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2820	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2817	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2816	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2815	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2814	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2813	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2811	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2809	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2356	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2354	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2352	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2341	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2339	Apple Inc. iTunes		0.00	—	0.02		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2338	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-0259	Apple Inc. iTunes		0.00	—	0.03		Oct 12, 2011	CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
CVE-2011-3155	Microfocus Onboard Administrator		0.00	—	0.02		Oct 12, 2011	Unspecified vulnerability in HP Onboard Administrator (OA) 3.21 through 3.31 allows remote attackers to bypass intended access restrictions via unknown vectors.
CVE-2011-2012	Microsoft Forefront Unified Access Gateway		0.01	—	0.17		Oct 12, 2011	Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."
CVE-2011-2011	Microsoft Windows		0.00	—	0.02		Oct 12, 2011	Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted…
CVE-2011-2009	Microsoft Windows		0.00	—	0.06		Oct 12, 2011	Untrusted search path vulnerability in Windows Media Center in Microsoft Windows Vista SP2 and Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista, allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Media…
CVE-2011-2008	Microsoft Host Integration Server		0.02	—	0.21		Oct 12, 2011	Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."
CVE-2011-2007	Microsoft Host Integration Server		0.05	—	0.23		Oct 12, 2011	Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."
CVE-2011-2005	Microsoft Windows Xp	Hig	0.68	7.8	0.32	KEV	Oct 12, 2011	afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of…
CVE-2011-2003	Microsoft Windows		0.05	—	0.27		Oct 12, 2011	Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon…
CVE-2011-2002	Microsoft Windows		0.00	—	0.02		Oct 12, 2011	win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle TrueType fonts, which allows local users to cause a denial of service (system hang) via a crafted font file, aka…
CVE-2011-2001	Microsoft Internet Explorer		0.03	—	0.43		Oct 12, 2011	Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an attempted access to a virtual function table after corruption of this table has occurred, aka "Virtual Function Table Corruption…
CVE-2011-2000	Microsoft Internet Explorer		0.02	—	0.19		Oct 12, 2011	Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Body Element Remote Code Execution Vulnerability."
CVE-2011-1999	Microsoft Internet Explorer		0.05	—	0.27		Oct 12, 2011	Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vectors involving a "dereferenced memory address," aka "Select Element Remote Code Execution Vulnerability."
CVE-2011-1998	Microsoft Internet Explorer		0.02	—	0.21		Oct 12, 2011	Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that was not properly initialized, aka "Jscript9.dll Remote Code Execution Vulnerability."
CVE-2011-1997	Microsoft Internet Explorer		0.01	—	0.14		Oct 12, 2011	Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnLoad Event Remote Code Execution Vulnerability."

CVE-2011-3215Oct 14, 2011
Apple Inc.
Mac OS X
risk 0.00cvss —epss 0.00
The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the (1) loginwindow, (2) boot, or…
CVE-2011-3214Oct 14, 2011
Apple Inc.
Mac OS X
risk 0.00cvss —epss 0.00
IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate attackers to bypass the password requirement via unspecified vectors.
CVE-2011-3213Oct 14, 2011
Apple Inc.
Mac OS X
risk 0.00cvss —epss 0.01
The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an…
CVE-2011-3212Oct 14, 2011
Apple Inc.
Mac OS X
risk 0.00cvss —epss 0.00
CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate attackers to obtain sensitive information by reading directly from the disk device.
CVE-2011-0260Oct 14, 2011
Apple Inc.
Mac OS X
risk 0.00cvss —epss 0.00
The CoreProcesses component in Apple Mac OS X 10.7 before 10.7.2 does not prevent a system window from receiving keystrokes in the locked-screen state, which might allow physically proximate attackers to bypass intended access restrictions by typing into this window.
CVE-2011-0231Oct 14, 2011
Apple Inc.
Mac OS X
risk 0.00cvss —epss 0.01
CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it easier for remote web servers to track users via a cookie, related to a "synchronization issue."
CVE-2011-0230Oct 14, 2011
Apple Inc.
Mac OS X
risk 0.00cvss —epss 0.04
Buffer overflow in the ATSFontDeactivate API in Apple Type Services (ATS) in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
CVE-2011-0229Oct 14, 2011
Apple Inc.
Mac OS X
risk 0.00cvss —epss 0.02
Apple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote attackers to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access.
CVE-2011-0224Oct 14, 2011
Apple Inc.
Mac OS X
risk 0.00cvss —epss 0.03
CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QuickTime movie file.
CVE-2011-0185Oct 14, 2011
Apple Inc.
Mac OS X
risk 0.00cvss —epss 0.00
Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows local users to gain privileges via a crafted name of an executable file.
CVE-2011-3252Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.06
Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Advanced Audio Coding (AAC) stream.
CVE-2011-3244Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3241Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3239Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3238Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3237Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3236Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3235Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3233Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-3219Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.05
Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
CVE-2011-2831Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2820Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2817Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2816Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2815Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2814Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2813Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2811Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2809Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2356Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2354Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2352Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2341Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2339Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.02
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-2338Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in…
CVE-2011-0259Oct 12, 2011
Apple Inc.
iTunes
risk 0.00cvss —epss 0.03
CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
CVE-2011-3155Oct 12, 2011
Microfocus
Onboard Administrator
risk 0.00cvss —epss 0.02
Unspecified vulnerability in HP Onboard Administrator (OA) 3.21 through 3.31 allows remote attackers to bypass intended access restrictions via unknown vectors.
CVE-2011-2012Oct 12, 2011
Microsoft
Forefront Unified Access Gateway
risk 0.01cvss —epss 0.17
Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."
CVE-2011-2011Oct 12, 2011
Microsoft
Windows
risk 0.00cvss —epss 0.02
Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted…
CVE-2011-2009Oct 12, 2011
Microsoft
Windows
risk 0.00cvss —epss 0.06
Untrusted search path vulnerability in Windows Media Center in Microsoft Windows Vista SP2 and Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista, allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Media…
CVE-2011-2008Oct 12, 2011
Microsoft
Host Integration Server
risk 0.02cvss —epss 0.21
Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."
CVE-2011-2007Oct 12, 2011
Microsoft
Host Integration Server
risk 0.05cvss —epss 0.23
Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."
CVE-2011-2005HigKEVOct 12, 2011
Microsoft
Windows Xp
risk 0.68cvss 7.8epss 0.32
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of…
CVE-2011-2003Oct 12, 2011
Microsoft
Windows
risk 0.05cvss —epss 0.27
Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon…
CVE-2011-2002Oct 12, 2011
Microsoft
Windows
risk 0.00cvss —epss 0.02
win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle TrueType fonts, which allows local users to cause a denial of service (system hang) via a crafted font file, aka…
CVE-2011-2001Oct 12, 2011
Microsoft
Internet Explorer
risk 0.03cvss —epss 0.43
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an attempted access to a virtual function table after corruption of this table has occurred, aka "Virtual Function Table Corruption…
CVE-2011-2000Oct 12, 2011
Microsoft
Internet Explorer
risk 0.02cvss —epss 0.19
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Body Element Remote Code Execution Vulnerability."
CVE-2011-1999Oct 12, 2011
Microsoft
Internet Explorer
risk 0.05cvss —epss 0.27
Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vectors involving a "dereferenced memory address," aka "Select Element Remote Code Execution Vulnerability."
CVE-2011-1998Oct 12, 2011
Microsoft
Internet Explorer
risk 0.02cvss —epss 0.21
Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that was not properly initialized, aka "Jscript9.dll Remote Code Execution Vulnerability."
CVE-2011-1997Oct 12, 2011
Microsoft
Internet Explorer
risk 0.01cvss —epss 0.14
Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnLoad Event Remote Code Execution Vulnerability."