VYPR

CVEs

386,273 total · page 6800 of 7,726

AllCriticalHighKEV
  • CVE-2011-1255Jun 16, 2011
    Microsoft
    Internet Explorer
    risk 0.06cvss —epss 0.42

    The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized…

  • CVE-2011-1254Jun 16, 2011
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.18

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Drag and Drop Memory Corruption Vulnerability."

  • CVE-2011-1252MedJun 16, 2011
    Microsoft
    Internet Explorer
    risk 0.41cvss 6.1epss 0.14

    Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2,…

  • CVE-2011-1251Jun 16, 2011
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.18

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "DOM Manipulation Memory Corruption Vulnerability."

  • CVE-2011-1250Jun 16, 2011
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.22

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Link Properties Handling Memory Corruption…

  • CVE-2011-1249Jun 16, 2011
    Microsoft
    Windows
    risk 0.04cvss —epss 0.08

    The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users…

  • CVE-2011-1246Jun 16, 2011
    Microsoft
    Internet Explorer
    risk 0.00cvss —epss 0.06

    Microsoft Internet Explorer 8 does not properly handle content settings in HTTP responses, which allows remote web servers to obtain sensitive information from a different (1) domain or (2) zone via a crafted response, aka "MIME Sniffing Information Disclosure Vulnerability."

  • CVE-2011-0664Jun 16, 2011
    Microsoft
    .net Framework
    risk 0.01cvss —epss 0.16

    Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser…

  • CVE-2011-0658Jun 16, 2011
    Microsoft
    Windows
    risk 0.02cvss —epss 0.21

    Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute…

  • CVE-2011-0873Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, and 5.0 Update 29 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

  • CVE-2011-0872Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO.

  • CVE-2011-0871Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,…

  • CVE-2011-0869Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 26 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to SAAJ.

  • CVE-2011-0868Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.

  • CVE-2011-0867Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via…

  • CVE-2011-0866Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to…

  • CVE-2011-0865Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown…

  • CVE-2011-0864Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,…

  • CVE-2011-0863Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related…

  • CVE-2011-0862Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.06

    Multiple unspecified vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors…

  • CVE-2011-0817Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via…

  • CVE-2011-0815Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,…

  • CVE-2011-0814Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…

  • CVE-2011-0802Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…

  • CVE-2011-0788Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via…

  • CVE-2011-0786Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via…

  • CVE-2011-2477Jun 14, 2011
    Icinga
    Icinga
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escape_html_tags is disabled, allow remote attackers to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a BODY…

  • CVE-2011-2476Jun 14, 2011
    Coppermine
    Coppermine Photo Gallery
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667.

  • CVE-2011-2179Jun 14, 2011
    Nagios
    Nagios
    risk 0.05cvss —epss 0.26

    Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts action.

  • CVE-2011-1943Jun 14, 2011
    Networkmanager
    Networkmanager
    risk 0.00cvss —epss 0.00

    The destroy_one_secret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0.8.999-3.git20110526 in Fedora 15 creates a log entry containing a certificate password, which allows local users to obtain sensitive information by reading a log file.

  • CVE-2011-1924Jun 14, 2011
    Tor
    Tor
    risk 0.00cvss —epss 0.03

    Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a long port list.

  • CVE-2011-1864Jun 14, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.09

    Unspecified vulnerability in HP OpenView Storage Data Protector 6.0, 6.10, and 6.11 allows remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2011-1863Jun 14, 2011
    Microfocus
    Service Manager
    risk 0.00cvss —epss 0.01

    HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allow remote authenticated users to conduct unspecified script injection attacks via unknown vectors.

  • CVE-2011-1862Jun 14, 2011
    Microfocus
    Service Manager
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1861Jun 14, 2011
    Microfocus
    Service Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to modify data or obtain sensitive information via unknown vectors.

  • CVE-2011-1860Jun 14, 2011
    Microfocus
    Service Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors.

  • CVE-2011-1859Jun 14, 2011
    Microfocus
    Service Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to obtain sensitive information via unknown vectors.

  • CVE-2011-1858Jun 14, 2011
    Microfocus
    Service Manager
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows local users to bypass intended access restrictions via unknown vectors.

  • CVE-2011-1857Jun 14, 2011
    Microfocus
    Service Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote authenticated users to bypass intended access restrictions via unknown vectors.

  • CVE-2011-1709Jun 14, 2011
    GNOME Foundation
    Gdm
    risk 0.00cvss —epss 0.00

    GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.

  • CVE-2010-4667Jun 14, 2011
    Coppermine
    Coppermine Photo Gallery
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-2475Jun 9, 2011
    Sybase
    Onebridge Mobile Data Suite
    risk 0.00cvss —epss 0.04

    Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybase OneBridge Mobile Data Suite 5.5 and 5.6 allows remote attackers to execute arbitrary code via format string specifiers in unspecified…

  • CVE-2011-2474Jun 9, 2011
    Sybase
    Easerver
    risk 0.08cvss —epss 0.64

    Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.\../\../\ sequence in a path.

  • CVE-2011-2473Jun 9, 2011
    OProfile
    OProfile
    risk 0.00cvss —epss 0.00

    The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opd_pipe file, a different vulnerability than CVE-2011-1760.

  • CVE-2011-2472Jun 9, 2011
    OProfile
    OProfile
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. (dot dot) in the --save argument, related to the --session-dir argument, a different vulnerability than CVE-2011-1760.

  • CVE-2011-2471Jun 9, 2011
    OProfile
    OProfile
    risk 0.00cvss —epss 0.00

    utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different…

  • CVE-2011-1708Jun 9, 2011
    Novell
    Iprint
    risk 0.00cvss —epss 0.06

    Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs cookie.

  • CVE-2011-2342Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    The DOM implementation in Google Chrome before 12.0.742.91 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

  • CVE-2011-2332Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google V8, as used in Google Chrome before 12.0.742.91, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

  • CVE-2011-1819Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 12.0.742.91 allows remote attackers to perform unspecified injection into a chrome:// page via vectors related to extensions.