VYPR

CVEs

386,273 total · page 6807 of 7,726

AllCriticalHighKEV
  • CVE-2011-0756May 5, 2011
    Trustwave
    Webdefend
    risk 0.00cvss —epss 0.01

    The application server in Trustwave WebDefend Enterprise before 5.0 uses hardcoded console credentials, which makes it easier for remote attackers to read security-event data by using the remote console GUI to connect to the management port.

  • CVE-2011-1900May 4, 2011
    Indusoft
    Web Studio
    risk 0.06cvss —epss 0.32

    Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request.

  • CVE-2011-1209May 4, 2011
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encryption algorithm, which makes it easier for remote attackers to obtain plaintext data from a (1) JAX-RPC or (2) JAX-WS Web Services request via unspecified vectors…

  • CVE-2011-0714May 4, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 might allow remote attackers to cause a denial of service (crash) via malformed data in a packet, related to lockd and…

  • CVE-2011-0340May 4, 2011
    Indusoft
    Thin Client
    risk 0.06cvss —epss 0.32

    Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers…

  • CVE-2011-1786May 3, 2011
    VMware
    Esx
    risk 0.00cvss —epss 0.03

    lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service (daemon crash) via an…

  • CVE-2011-1785May 3, 2011
    VMware
    Esx
    risk 0.00cvss —epss 0.03

    VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic.

  • CVE-2011-1613May 3, 2011
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, and 7.0.1xx before 7.0.112.0 allows remote attackers to cause a denial of service (device reload) via a sequence of ICMP packets, aka Bug ID CSCth74426.

  • CVE-2011-1610May 3, 2011
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.02cvss —epss 0.25

    Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5)su4, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1)su1 allow…

  • CVE-2011-1609May 3, 2011
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.05cvss —epss 0.20

    SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors,…

  • CVE-2011-1607May 3, 2011
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a…

  • CVE-2011-1606May 3, 2011
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP…

  • CVE-2011-1605May 3, 2011
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su2, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP…

  • CVE-2011-1604May 3, 2011
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.03

    Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (memory consumption and process failure) via a…

  • CVE-2011-1456May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not properly handle PDF forms, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."

  • CVE-2011-1455May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not properly handle PDF documents with multipart encoding, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.

  • CVE-2011-1454May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in the DOM id handling functionality in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.

  • CVE-2011-1452May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 allows user-assisted remote attackers to spoof the URL bar via vectors involving a redirect and a manual reload.

  • CVE-2011-1451May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."

  • CVE-2011-1450May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not properly present file dialogs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."

  • CVE-2011-1449May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1448May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not properly perform height calculations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-1447May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-1446May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 allows remote attackers to spoof the URL bar via vectors involving (1) a navigation error or (2) an interrupted load.

  • CVE-2011-1445May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not properly handle SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

  • CVE-2011-1444May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Race condition in the sandbox launcher implementation in Google Chrome before 11.0.696.57 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1443May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."

  • CVE-2011-1442May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service (node tree corruption) or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1441May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not properly perform a cast of an unspecified variable during handling of floating select lists, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.

  • CVE-2011-1440May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the ruby element and Cascading Style Sheets (CSS) token sequences.

  • CVE-2011-1439May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 on Linux does not properly isolate renderer processes, which has unspecified impact and remote attack vectors.

  • CVE-2011-1438May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 allows remote attackers to bypass the Same Origin Policy via vectors involving blobs.

  • CVE-2011-1437May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to float rendering.

  • CVE-2011-1436May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.

  • CVE-2011-1435May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension.

  • CVE-2011-1434May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not ensure thread safety during handling of MIME data, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-1305May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to linked lists and a database.

  • CVE-2011-1304May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to bypass the pop-up blocker via vectors related to plug-ins.

  • CVE-2011-1303May 3, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 11.0.696.57 does not properly handle floating objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-1847May 3, 2011
    IBM
    Db2
    risk 0.00cvss —epss 0.02

    IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly enforce privilege requirements for table access, which allows remote authenticated users to modify SYSSTAT.TABLES statistics columns via an UPDATE statement. NOTE: some of these details are…

  • CVE-2011-1846May 3, 2011
    IBM
    Db2
    risk 0.00cvss —epss 0.02

    IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly revoke role membership from groups, which allows remote authenticated users to execute non-DDL statements by leveraging previous inherited possession of a role, a different vulnerability than…

  • CVE-2011-1739May 3, 2011
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.01

    The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in…

  • CVE-2011-1727May 3, 2011
    Microfocus
    Sitescope
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue.

  • CVE-2011-1726May 3, 2011
    Microfocus
    Sitescope
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1684May 3, 2011
    VideoLAN
    VLC media player
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted MP4 file.

  • CVE-2011-1593May 3, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call.

  • CVE-2011-1522May 3, 2011
    Doctrine Project
    Doctrine
    risk 0.00cvss —epss 0.02

    Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset field.

  • CVE-2010-4665May 3, 2011
    LibTIFF
    Libtiff
    risk 0.00cvss —epss 0.03

    Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with…

  • CVE-2009-5022May 3, 2011
    LibTIFF
    Libtiff
    risk 0.04cvss —epss 0.11

    Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted TIFF file.

  • CVE-2011-1845May 3, 2011
    Microsoft
    Silverlight
    risk 0.01cvss —epss 0.12

    Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service (memory consumption) via an application involving (1) subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or…