VYPR

CVEs

386,273 total · page 6806 of 7,726

AllCriticalHighKEV
  • CVE-2011-2022May 9, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl…

  • CVE-2011-1747May 9, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by the (1) AGPIOC_RESERVE and (2) AGPIOC_ALLOCATE ioctls, which allows local users to cause a denial of service (memory consumption) by making many calls to these ioctls.

  • CVE-2011-1746May 9, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Multiple integer overflows in the (1) agp_allocate_memory and (2) agp_create_user_memory functions in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allow local users to trigger buffer overflows, and consequently cause a denial of service (system crash) or…

  • CVE-2011-1745May 9, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call.

  • CVE-2011-1547May 9, 2011
    NetBSD
    NetBSD
    risk 0.03cvss —epss 0.05

    Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a crafted (1)…

  • CVE-2011-1324May 9, 2011
    Buffalotech
    AS-100 routers
    risk 0.00cvss —epss 0.00

    Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of…

  • CVE-2011-1323May 9, 2011
    Yamaha
    RTX, RT, SRT, RTV, RTW, and RTA series routers
    risk 0.00cvss —epss 0.02

    Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service (device reboot) via a crafted…

  • CVE-2011-1090May 9, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.

  • CVE-2011-1013May 9, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in the kernel in OpenBSD before 4.9 allows local users to trigger…

  • CVE-2011-1736May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.10

    Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message.

  • CVE-2011-1735May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.14

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed bm message.

  • CVE-2011-1734May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.15

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed omniiaputil message.

  • CVE-2011-1733May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.14

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed HPFGConfig message.

  • CVE-2011-1732May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.02cvss —epss 0.25

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed stutil message.

  • CVE-2011-1731May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.15

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_INTEGUTIL message.

  • CVE-2011-1730May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.14

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_SCRIPT message.

  • CVE-2011-1729May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.14

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed GET_FILE message.

  • CVE-2011-1728May 7, 2011
    Microfocus
    Storage Data Protector
    risk 0.01cvss —epss 0.14

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_BAR message.

  • CVE-2011-1571May 7, 2011
    Liferay
    Portal
    risk 0.00cvss —epss 0.08

    Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.

  • CVE-2011-1570May 7, 2011
    Liferay
    Portal
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to inject arbitrary web script or HTML via a message title, a different vulnerability than CVE-2004-2030.

  • CVE-2011-1504May 7, 2011
    Liferay
    Portal
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA allows remote authenticated users to inject arbitrary web script or HTML via a blog title.

  • CVE-2011-1503May 7, 2011
    Liferay
    Portal
    risk 0.00cvss —epss 0.01

    The XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat or Oracle GlassFish is used, allows remote authenticated users to read arbitrary (1) XSL and (2) XML files via a file:/// URL.

  • CVE-2011-1502May 7, 2011
    Liferay
    Portal
    risk 0.00cvss —epss 0.02

    Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to read arbitrary files via an entity declaration in conjunction with an entity reference, related to an XML External Entity (aka XXE) issue.

  • CVE-2011-0081May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x before 4.0.1, and Thunderbird 3.1.x before 3.1.10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via…

  • CVE-2011-0080May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.06

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or…

  • CVE-2011-0079May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.07

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x before 4.0.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to…

  • CVE-2011-0078May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2011-0077May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2011-0076May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Java Embedding Plugin (JEP) in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, on Mac OS X allows remote attackers to bypass intended access restrictions via unknown vectors.

  • CVE-2011-0075May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2011-0074May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2011-0073May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.09cvss —epss 0.70

    Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."

  • CVE-2011-0072May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2011-0071May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrary files, and possibly load resources, via vectors involving…

  • CVE-2011-0070May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application…

  • CVE-2011-0069May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application…

  • CVE-2011-0067May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocompletion for forms, which allows remote attackers to read form history entries via a Java applet that spoofs interaction with the autocomplete controls.

  • CVE-2011-0066May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mObserverList.

  • CVE-2011-0065May 7, 2011
    Mozilla Corporation
    Firefox
    risk 0.09cvss —epss 0.74

    Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.

  • CVE-2011-1906May 5, 2011
    Trustwave
    Webdefend
    risk 0.00cvss —epss 0.01

    Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756.

  • CVE-2011-1905May 5, 2011
    Proofpoint
    Messaging Security Gateway
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allow remote attackers to hijack…

  • CVE-2011-1904May 5, 2011
    Proofpoint
    Messaging Security Gateway
    risk 0.00cvss —epss 0.02

    An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary commands via unknown vectors, related…

  • CVE-2011-1903May 5, 2011
    Proofpoint
    Messaging Security Gateway
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary SQL commands via unknown…

  • CVE-2011-1902May 5, 2011
    Proofpoint
    Messaging Security Gateway
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to read arbitrary files via unspecified vectors.

  • CVE-2011-1901May 5, 2011
    Proofpoint
    Messaging Security Gateway
    risk 0.00cvss —epss 0.02

    The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to bypass authentication via unspecified vectors.

  • CVE-2011-1826May 5, 2011
    Ca
    Arcot Webfort Versatile Authentication Server
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

  • CVE-2011-1825May 5, 2011
    Ca
    Arcot Webfort Versatile Authentication Server
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1423May 5, 2011
    Rsa
    Data Loss Prevention Enterprise Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in RSA Data Loss Prevention (DLP) Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1208May 5, 2011
    IBM
    Soliddb
    risk 0.00cvss —epss 0.03

    IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4) does not properly handle the (1) rpc_test_svc_readwrite and (2) rpc_test_svc_done commands, which allows remote attackers to cause a…

  • CVE-2011-1207May 5, 2011
    IBM
    Rational System Architect
    risk 0.00cvss —epss 0.05

    The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute…