VYPR

CVEs

386,417 total · page 6778 of 7,729

AllCriticalHighKEV
  • CVE-2011-3305Oct 6, 2011
    Cisco Systems, Inc.
    Nac Manager
    risk 0.05cvss —epss 0.22

    Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.

  • CVE-2011-3304Oct 6, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.2(5.3), 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2), and 8.5…

  • CVE-2011-3303Oct 6, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.6), 8.3 before…

  • CVE-2011-3302Oct 6, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before…

  • CVE-2011-3301Oct 6, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before…

  • CVE-2011-3300Oct 6, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before…

  • CVE-2011-3299Oct 6, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before…

  • CVE-2011-3298Oct 6, 2011
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.3), 8.0 before 8.0(5.24), 8.1 before 8.1(2.50), 8.2 before 8.2(5), 8.3 before 8.3(2.18),…

  • CVE-2011-3297Oct 6, 2011
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote attackers to cause a denial of service (module crash) by making many authentication…

  • CVE-2011-3296Oct 6, 2011
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.02

    Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allows remote attackers to cause a denial of service (memory corruption and module crash or hang) via vectors that trigger syslog…

  • CVE-2011-3288HigOct 6, 2011
    Cisco Systems, Inc.
    Unified Presence Server
    risk 0.49cvss 7.5epss 0.02

    Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity…

  • CVE-2011-3287Oct 6, 2011
    Cisco Systems, Inc.
    Jabber Extensible Communications Platform
    risk 0.00cvss —epss 0.01

    Cisco Jabber Extensible Communications Platform (aka Jabber XCP) 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption,…

  • CVE-2011-3368Oct 5, 2011
    Apache
    HTTP Server
    risk 0.03cvss —epss 0.91

    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers…

  • CVE-2010-4869Oct 5, 2011
    DBHcms
    DBHcms
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter.

  • CVE-2010-4868Oct 5, 2011
    W Agora
    W Agora
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter.

  • CVE-2010-4867Oct 5, 2011
    W Agora
    W Agora
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the bn parameter.

  • CVE-2010-4866Oct 5, 2011
    Chipmunk Scripts
    Chipmunk Board
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter.

  • CVE-2010-4865Oct 5, 2011
    Shiromuku
    Guestbook
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to index.php.

  • CVE-2010-4864Oct 5, 2011
    Joomla
    Club Manager
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cm_id parameter in an equip presenta action to index.php.

  • CVE-2010-4863Oct 5, 2011
    Get Simple.
    CMS
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter.

  • CVE-2010-4862Oct 5, 2011
    Jextensions
    JE Directory
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.

  • CVE-2010-4861Oct 5, 2011
    Webspell
    Webspell
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.

  • CVE-2010-4860Oct 5, 2011
    Phpauction
    Phpauction
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-4859Oct 5, 2011
    Shop Script
    Shop Script
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog_id parameter in a news action.

  • CVE-2010-4858Oct 5, 2011
    DNET
    Live-Stats
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the showlang parameter.

  • CVE-2010-4857Oct 5, 2011
    CAG
    CAG CMS
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter.

  • CVE-2010-4856Oct 5, 2011
    XWeblog
    xWeblog
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter.

  • CVE-2010-4855Oct 5, 2011
    XWeblog
    xWeblog
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale_id parameter.

  • CVE-2010-4854Oct 5, 2011
    Zuitu
    Zuitu
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action.

  • CVE-2010-4853Oct 5, 2011
    Joomla
    ccInvoices
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php.

  • CVE-2011-3982Oct 5, 2011
    IBM
    Aix
    risk 0.00cvss —epss 0.00

    The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, which allows local users to cause a denial of service (system hang) via vectors that generate a large amount of DMA I/O, related to a deadlock in timer…

  • CVE-2011-1827Oct 5, 2011
    Checkpoint
    Endpoint Security
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by SecurePlatform, IPSO6, Connectra, and VSX, allow remote attackers to execute arbitrary code via vectors involving a (1) ActiveX…

  • CVE-2011-1764Oct 5, 2011
    Exim
    Exim
    risk 0.00cvss —epss 0.04

    Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by…

  • CVE-2011-1159Oct 5, 2011
    Tedfelix
    Acpid
    risk 0.03cvss —epss 0.01

    acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but…

  • CVE-2011-1076Oct 5, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    net/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NULL pointer dereference and OOPS) by not providing a valid response to a DNS query, as demonstrated by an erroneous grand.centrall.org query, which triggers…

  • CVE-2011-0459Oct 5, 2011
    Cyber Ark
    Password Vault Web Access
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Cyber-Ark Password Vault Web Access (PVWA) 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 through 6.0 patch 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-7302Oct 5, 2011
    Joomla
    nBill
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in netinvoice.php in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving "knowledge of ... the contents of an encrypted file."

  • CVE-2008-7301Oct 5, 2011
    JSite
    jSite
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2008-7300Oct 5, 2011
    Solaris
    Solaris
    risk 0.00cvss —epss 0.01

    The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through snv_67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control (MAC) policy and obtain access to…

  • CVE-2000-1247Oct 5, 2011
    Apache
    Jserv
    risk 0.00cvss —epss 0.01

    The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ URI.

  • CVE-2011-1221Oct 4, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.01

    Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.0 through 2.1.5 allows remote attackers to inject arbitrary web script or…

  • CVE-2011-3873Oct 4, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 14.0.835.202 does not properly implement shader translation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2011-2881Oct 4, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 14.0.835.202 does not properly handle Google V8 hidden objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.

  • CVE-2011-2880Oct 4, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings.

  • CVE-2011-2879Oct 4, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 14.0.835.202 does not properly consider object lifetimes and thread safety during the handling of audio nodes, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-2878Oct 4, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

  • CVE-2011-2877Oct 4, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale font."

  • CVE-2011-2876Oct 4, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a text line box.

  • CVE-2011-2443Oct 4, 2011
    Adobe Inc.
    Photoshop Elements
    risk 0.04cvss —epss 0.14

    Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted (1) .grd or (2) .abr file, a related issue to CVE-2010-1296.

  • CVE-2011-3981Oct 4, 2011
    WordPress
    Allwebmenus plugin
    risk 0.00cvss —epss 0.10

    PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.