VYPR

CVEs

386,336 total · page 6789 of 7,727

AllCriticalHighKEV
  • CVE-2011-1357Aug 11, 2011
    IBM
    Websphere Service Registry And Repository
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP…

  • CVE-2010-4309Aug 11, 2011
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-4308.

  • CVE-2010-4308Aug 11, 2011
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.04

    Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-4309.

  • CVE-2011-2425Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.08

    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2011-2417Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.08

    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2011-2416Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.10

    Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified…

  • CVE-2011-2415Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.12

    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified…

  • CVE-2011-2414Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.12

    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified…

  • CVE-2011-2140Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.10cvss —epss 0.82

    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2011-2139Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to bypass the Same Origin Policy and obtain sensitive…

  • CVE-2011-2138Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.10

    Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified…

  • CVE-2011-2136Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.10

    Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified…

  • CVE-2011-2135Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.08

    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2011-3130Aug 10, 2011
    WordPress
    WordPress
    risk 0.00cvss —epss 0.02

    wp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Taxonomy query hardening," possibly involving SQL injection.

  • CVE-2011-3129Aug 10, 2011
    WordPress
    WordPress
    risk 0.00cvss —epss 0.02

    The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

  • CVE-2011-3128Aug 10, 2011
    WordPress
    WordPress
    risk 0.00cvss —epss 0.02

    WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.

  • CVE-2011-3127Aug 10, 2011
    WordPress
    WordPress
    risk 0.00cvss —epss 0.02

    WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

  • CVE-2011-3126Aug 10, 2011
    WordPress
    WordPress
    risk 0.00cvss —epss 0.02

    WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.

  • CVE-2011-3125Aug 10, 2011
    WordPress
    WordPress
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Various security hardening."

  • CVE-2011-2137Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.12

    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified…

  • CVE-2011-2134Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.12

    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified…

  • CVE-2011-2130Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.12

    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified…

  • CVE-2011-1979Aug 10, 2011
    Microsoft
    Visio
    risk 0.02cvss —epss 0.22

    Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."

  • CVE-2011-1978Aug 10, 2011
    Microsoft
    .net Framework
    risk 0.02cvss —epss 0.20

    Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via (1) a crafted XAML browser application (aka XBAP), (2) a…

  • CVE-2011-1977Aug 10, 2011
    Microsoft
    .net Framework
    risk 0.02cvss —epss 0.21

    The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart…

  • CVE-2011-1976Aug 10, 2011
    Microsoft
    Visual Studio
    risk 0.05cvss —epss 0.21

    Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."

  • CVE-2011-1975Aug 10, 2011
    Microsoft
    Windows Server 2008
    risk 0.03cvss —epss 0.42

    Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current…

  • CVE-2011-1974Aug 10, 2011
    Microsoft
    Windows Xp
    risk 0.04cvss —epss 0.07

    NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of…

  • CVE-2011-1972Aug 10, 2011
    Microsoft
    Visio
    risk 0.02cvss —epss 0.22

    Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."

  • CVE-2011-1971Aug 10, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.03

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file metadata, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Metadata Parsing DOS…

  • CVE-2011-1970Aug 10, 2011
    Microsoft
    Windows Server 2003
    risk 0.02cvss —epss 0.23

    The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service (service outage) via a query for a nonexistent domain, aka "DNS Uninitialized Memory…

  • CVE-2011-1968Aug 10, 2011
    Microsoft
    Windows Xp
    risk 0.02cvss —epss 0.26

    The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory, which allows remote attackers to cause a denial of service (reboot) by sending crafted RDP packets triggering access to…

  • CVE-2011-1967Aug 10, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.02

    Winsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for…

  • CVE-2011-1966Aug 10, 2011
    Microsoft
    Windows Server 2008
    risk 0.04cvss —epss 0.55

    The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."

  • CVE-2011-1965Aug 10, 2011
    Microsoft
    Windows Server 2008
    risk 0.05cvss —epss 0.25

    Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server, aka "TCP/IP QOS Denial of…

  • CVE-2011-1964Aug 10, 2011
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.23

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Style Object Memory Corruption Vulnerability."

  • CVE-2011-1963Aug 10, 2011
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.23

    Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "XSLT Memory Corruption Vulnerability."

  • CVE-2011-1962Aug 10, 2011
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.13

    Microsoft Internet Explorer 6 through 9 does not properly handle unspecified character sequences, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site that triggers "inactive filtering," aka "Shift JIS Character Encoding…

  • CVE-2011-1961Aug 10, 2011
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.34

    The telnet URI handler in Microsoft Internet Explorer 6 through 9 does not properly launch the handler application, which allows remote attackers to execute arbitrary programs via a crafted web site, aka "Telnet Handler Remote Code Execution Vulnerability."

  • CVE-2011-1960Aug 10, 2011
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.18

    Microsoft Internet Explorer 6 through 9 does not properly implement JavaScript event handlers, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified script code, aka "Event Handlers Information Disclosure Vulnerability."

  • CVE-2011-1871Aug 10, 2011
    Microsoft
    Windows
    risk 0.03cvss —epss 0.38

    Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."

  • CVE-2011-1263Aug 10, 2011
    Microsoft
    Windows Server 2008
    risk 0.01cvss —epss 0.15

    Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."

  • CVE-2011-1257Aug 10, 2011
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.15

    Race condition in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors involving access to an object, aka "Window Open Race Condition Vulnerability."

  • CVE-2011-3124Aug 10, 2011
    IBM
    Infosphere Information Server
    risk 0.00cvss —epss 0.00

    IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors.

  • CVE-2011-3123Aug 10, 2011
    IBM
    Infosphere Information Server
    risk 0.00cvss —epss 0.00

    IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

  • CVE-2011-3122Aug 10, 2011
    WordPress
    WordPress
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Media security."

  • CVE-2011-3007Aug 10, 2011
    McAfee
    SaaS Endpoint Protection
    risk 0.00cvss —epss 0.01

    The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log…

  • CVE-2011-3006Aug 10, 2011
    McAfee
    SaaS Endpoint Protection
    risk 0.00cvss —epss 0.02

    The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass the MyASUtil.SecureObjectFactory.CreateSecureObject domain execution policy using a cross-site scripting (XSS) attack, execute arbitrary…

  • CVE-2011-2511Aug 10, 2011
    Libvirt
    Libvirt
    risk 0.00cvss —epss 0.04

    Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.

  • CVE-2011-2178Aug 10, 2011
    Libvirt
    Libvirt
    risk 0.00cvss —epss 0.00

    The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users…