VYPR

CVEs

386,273 total · page 6801 of 7,726

AllCriticalHighKEV
  • CVE-2011-1818Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in the image loader in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1817Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 12.0.742.91 does not properly implement history deletion, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1816Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in the developer tools in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1815Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 12.0.742.91 allows remote attackers to inject script into a tab page via vectors related to extensions.

  • CVE-2011-1814Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 12.0.742.91 attempts to read data from an uninitialized pointer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1813Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 12.0.742.91 does not properly implement the framework for extensions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-1812Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 12.0.742.91 allows remote attackers to bypass intended access restrictions via vectors related to extensions.

  • CVE-2011-1811Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 12.0.742.91 does not properly handle a large number of form submissions, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.

  • CVE-2011-1810Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    The Cascading Style Sheets (CSS) implementation in Google Chrome before 12.0.742.91 does not properly restrict access to the visit history, which allows remote attackers to obtain sensitive information via unspecified vectors.

  • CVE-2011-1809Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in the accessibility feature in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1808Jun 9, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to incorrect integer calculations during float handling.

  • CVE-2011-1760Jun 9, 2011
    Maynard Johnson
    Oprofile
    risk 0.03cvss —epss 0.01

    utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument.

  • CVE-2011-1707Jun 9, 2011
    Novell
    Iprint
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs parameter in a printer-url.

  • CVE-2011-1706Jun 9, 2011
    Novell
    Iprint
    risk 0.00cvss —epss 0.06

    Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted iprint-client-config-info parameter in a printer-url.

  • CVE-2011-1705Jun 9, 2011
    Novell
    Iprint
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url.

  • CVE-2011-1704Jun 9, 2011
    Novell
    Iprint
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted core-package parameter in a printer-url.

  • CVE-2011-1703Jun 9, 2011
    Novell
    Iprint
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted driver-version parameter in a printer-url.

  • CVE-2011-1702Jun 9, 2011
    Novell
    Iprint
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted file-date-time parameter in a printer-url.

  • CVE-2011-1701Jun 9, 2011
    Novell
    Iprint
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url.

  • CVE-2011-1700Jun 9, 2011
    Novell
    Iprint
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-time parameter in a printer-url.

  • CVE-2011-1699Jun 9, 2011
    Novell
    Iprint
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted uri parameter in a printer-url.

  • CVE-2011-1823HigKEVJun 9, 2011
    Google
    Android
    risk 0.66cvss 7.8epss 0.41

    The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in…

  • CVE-2010-4804Jun 9, 2011
    Google
    Android
    risk 0.05cvss —epss 0.27

    The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.

  • CVE-2011-2468Jun 9, 2011
    Anymacro
    Anymacro Mail System
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the web interface in AnyMacro Mail System G4X allows remote attackers to read arbitrary files via directory traversal sequences in a request.

  • CVE-2011-2395Jun 9, 2011
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    The Neighbor Discovery (ND) protocol implementation in Cisco IOS on unspecified switches allows remote attackers to bypass the Router Advertisement Guarding functionality via a fragmented IPv6 packet in which the Router Advertisement (RA) message is contained in the second…

  • CVE-2011-2107Jun 9, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal…

  • CVE-2011-1711Jun 9, 2011
    Novell
    Data Synchronizer
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access the accounts of other users via unknown vectors.

  • CVE-2009-5077Jun 8, 2011
    Cre Loaded
    Cre Loaded
    risk 0.00cvss —epss 0.01

    CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF variable, which is not properly handled by (1) includes/application_top.php and (2) admin/includes/application_top.php.

  • CVE-2011-2386Jun 8, 2011
    Visiwave
    Site Survey
    risk 0.07cvss —epss 0.45

    VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a (1) vws and (2) vwr file with an invalid Type property, which triggers an untrusted pointer dereference.

  • CVE-2011-1584Jun 8, 2011
    Dotclear
    Dotclear
    risk 0.00cvss —epss 0.02

    The updateFile function in inc/core/class.dc.media.php in the Media Manager in Dotclear before 2.2.3 does not properly restrict pathnames, which allows remote authenticated users to upload and execute arbitrary PHP code via the media_path or media_file parameter. NOTE: some of…

  • CVE-2010-4663Jun 8, 2011
    Cmsmadesimple
    Cmsmadesimple
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the News module in CMS Made Simple (CMSMS) before 1.9.1 has unknown impact and attack vectors.

  • CVE-2009-5076Jun 8, 2011
    Cre Loaded
    Cre Loaded
    risk 0.00cvss —epss 0.01

    CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses…

  • CVE-2011-2217Jun 6, 2011
    VMware
    Infrastructure
    risk 0.06cvss —epss 0.42

    Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly…

  • CVE-2011-2216Jun 6, 2011
    Digium
    Asterisk
    risk 0.00cvss —epss 0.05

    reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed Contact header.

  • CVE-2011-2175Jun 6, 2011
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    Integer underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a malformed Visual Networks file that triggers a heap-based buffer over-read.

  • CVE-2011-2174Jun 6, 2011
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a packet with malformed data that uses zlib compression.

  • CVE-2011-2146Jun 6, 2011
    VMware
    Workstation
    risk 0.00cvss —epss 0.00

    mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence…

  • CVE-2011-2145Jun 6, 2011
    VMware
    Workstation
    risk 0.00cvss —epss 0.00

    mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used,…

  • CVE-2011-1959Jun 6, 2011
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.03

    The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that…

  • CVE-2011-1958Jun 6, 2011
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.03

    Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Diameter dictionary file.

  • CVE-2011-1957Jun 6, 2011
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.03

    The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length.

  • CVE-2011-1956Jun 6, 2011
    Wireshark
    Wireshark
    risk 0.03cvss —epss 0.06

    The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.

  • CVE-2011-1954Jun 6, 2011
    Postrev
    Post Revolution
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to (1) ajax-weblog-guardar.php, (2) verpost.php, (3) comments.php, or (4) perfil.php.

  • CVE-2011-1953Jun 6, 2011
    Post Revolution
    Post Revolution
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a (1) P, a (2) STRONG, a (3) A, a (4) EM, a (5) I, a (6) IMG, a (7) LI, an (8) OL, a (9) VIDEO,…

  • CVE-2011-1952Jun 6, 2011
    Postrev
    Post Revolution
    risk 0.00cvss —epss 0.02

    common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence.

  • CVE-2011-1950Jun 6, 2011
    Plone (software)
    Plone
    risk 0.00cvss —epss 0.02

    plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.

  • CVE-2011-1949Jun 6, 2011
    Plone (software)
    Plone
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.

  • CVE-2011-1948Jun 6, 2011
    Plone (software)
    Plone
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

  • CVE-2011-1921Jun 6, 2011
    Apache
    Subversion
    risk 0.00cvss —epss 0.06

    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows…

  • CVE-2011-1787Jun 6, 2011
    VMware
    Workstation
    risk 0.00cvss —epss 0.00

    Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain…