VYPR

CVEs

386,273 total · page 6811 of 7,726

AllCriticalHighKEV
  • CVE-2011-1717Apr 18, 2011
    Skype Technologies
    Skype for Android
    risk 0.00cvss —epss 0.00

    Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information.

  • CVE-2011-1716Apr 18, 2011
    Xymon
    Xymon
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1715Apr 18, 2011
    Qooxdoo
    Qooxdoo
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to read arbitrary files via ..%2f (encoded dot dot) sequences in…

  • CVE-2011-1714Apr 18, 2011
    Qooxdoo
    Qooxdoo
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback…

  • CVE-2011-1518Apr 18, 2011
    OTRS
    Otrs
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x before 2.4.10 and 3.x before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1496Apr 18, 2011
    Tmux
    tmux
    risk 0.03cvss —epss 0.01

    tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.

  • CVE-2011-1426Apr 18, 2011
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.05

    The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, launches a default handler for the filename specified in the first argument, which allows remote attackers to execute arbitrary code…

  • CVE-2011-1168Apr 18, 2011
    KDE
    Kde
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.

  • CVE-2011-0286Apr 18, 2011
    Rim
    Blackberry Enterprise Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and…

  • CVE-2010-4229Apr 18, 2011
    Novell
    Zenworks Configuration Management
    risk 0.02cvss —epss 0.25

    Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code,…

  • CVE-2011-1179Apr 18, 2011
    Red Hat
    Spice Xpi
    risk 0.00cvss —epss 0.04

    The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) plugin/nsScriptablePeer.cpp and (2) plugin/plugin.cpp, which trigger…

  • CVE-2011-0988Apr 18, 2011
    Novell
    Suse Linux
    risk 0.00cvss —epss 0.00

    pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified…

  • CVE-2011-0012Apr 18, 2011
    Red Hat
    Spice Xpi
    risk 0.00cvss —epss 0.00

    The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name.

  • CVE-2010-1171Apr 18, 2011
    Red Hat
    Satellite
    risk 0.00cvss —epss 0.03

    Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and package group (comps.xml) files…

  • CVE-2009-0788Apr 18, 2011
    Red Hat
    Satellite
    risk 0.00cvss —epss 0.02

    Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information or (2) use the server as an inadvertent proxy to connect to arbitrary services and IP addresses via…

  • CVE-2011-1655Apr 18, 2011
    Ca
    Total Defense
    risk 0.01cvss —epss 0.12

    The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote attackers to obtain database…

  • CVE-2011-1654Apr 18, 2011
    Ca
    Total Defense
    risk 0.01cvss —epss 0.11

    Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an…

  • CVE-2011-1653Apr 18, 2011
    Ca
    Total Defense
    risk 0.10cvss —epss 0.89

    Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter,…

  • CVE-2011-1713Apr 15, 2011
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.11

    Microsoft msxml.dll, as used in Internet Explorer 8 on Windows 7, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. NOTE: this might overlap CVE-2011-1202.

  • CVE-2011-1712Apr 15, 2011
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    The txXPathNodeUtils::getXSLTId function in txMozillaXPathTreeWalker.cpp and txStandaloneXPathTreeWalker.cpp in Mozilla Firefox before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1, and SeaMonkey before 2.0.14, allows remote attackers to obtain potentially sensitive…

  • CVE-2011-1302Apr 15, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2011-1301Apr 15, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.04

    Use-after-free vulnerability in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2011-1300Apr 15, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on…

  • CVE-2011-0195Apr 15, 2011
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE: this may overlap CVE-2011-1202.

  • CVE-2011-1691Apr 15, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement…

  • CVE-2011-1533Apr 15, 2011
    Microfocus
    ENVY 100 D410
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1532Apr 15, 2011
    Microfocus
    ENVY 100 D410
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the SNMP component on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to obtain sensitive information or modify data via vectors related to…

  • CVE-2011-1531Apr 15, 2011
    Microfocus
    ENVY 100 D410
    risk 0.00cvss —epss 0.02

    The webscan component in the Embedded Web Server (EWS) on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to read documents on the scan surface via unspecified vectors.

  • CVE-2011-0898Apr 15, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.00 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-0897Apr 15, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00 allows local users to read arbitrary files via unknown vectors.

  • CVE-2011-0896Apr 15, 2011
    Microfocus
    Oncplus
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in HP NFS/ONCplus B.11.31.10 and earlier on HP-UX B.11.31 allows remote authenticated users to cause a denial of service via unknown vectors.

  • CVE-2011-0285Apr 15, 2011
    Mit
    Kerberos 5
    risk 0.05cvss —epss 0.21

    The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted…

  • CVE-2011-0935Apr 14, 2011
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.04

    The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which allows remote attackers to bypass authentication and have unspecified other impact by leveraging an IKE peer relationship in which a key was previously valid but…

  • CVE-2011-0992Apr 13, 2011
    Mono
    Mono
    risk 0.00cvss —epss 0.03

    Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.

  • CVE-2011-0991Apr 13, 2011
    Mono
    Mono
    risk 0.00cvss —epss 0.03

    Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to finalizing and then resurrecting a DynamicMethod instance.

  • CVE-2011-0990Apr 13, 2011
    Mono
    Mono
    risk 0.00cvss —epss 0.02

    Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to trigger a buffer overflow and modify internal data structures, and cause a denial of service…

  • CVE-2011-0989Apr 13, 2011
    Mono
    Mono
    risk 0.00cvss —epss 0.03

    The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does not properly restrict data types, which allows remote attackers to modify internal read-only data structures, and cause a denial of service…

  • CVE-2011-1242Apr 13, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a…

  • CVE-2011-1241Apr 13, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a…

  • CVE-2011-1240Apr 13, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a…

  • CVE-2011-1239Apr 13, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a…

  • CVE-2011-1238Apr 13, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a…

  • CVE-2011-1237Apr 13, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.03

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a…

  • CVE-2011-1236HigApr 13, 2011
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a…

  • CVE-2011-1235Apr 13, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a…

  • CVE-2011-1234Apr 13, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a…

  • CVE-2011-1233Apr 13, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers…

  • CVE-2011-1232Apr 13, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers…

  • CVE-2011-1231HigApr 13, 2011
    Microsoft
    Windows
    risk 0.55cvss 8.4epss 0.01

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers…

  • CVE-2011-1230Apr 13, 2011
    Microsoft
    Windows
    risk 0.00cvss —epss 0.01

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers…