VYPR

CVEs

386,273 total · page 6814 of 7,726

AllCriticalHighKEV
  • CVE-2011-1525Apr 6, 2011
    RealNetworks
    Realplayer
    risk 0.04cvss —epss 0.12

    Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.

  • CVE-2011-1569Apr 5, 2011
    Douran
    Portal
    risk 0.03cvss —epss 0.04

    download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via (1) a trailing ".", (2) a trailing space, or (3) mixed case in the FileNameAttach parameter.

  • CVE-2011-1568Apr 5, 2011
    7-Technologies
    IGSS
    risk 0.05cvss —epss 0.19

    Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute…

  • CVE-2011-1567Apr 5, 2011
    7-Technologies
    Interactive Graphical SCADA System (IGSS)
    risk 0.09cvss —epss 0.70

    Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted (1) ListAll, (2) Write…

  • CVE-2011-1566Apr 5, 2011
    7-Technologies
    Interactive Graphical SCADA System (IGSS)
    risk 0.08cvss —epss 0.67

    Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397.

  • CVE-2011-1565Apr 5, 2011
    7-Technologies
    Interactive Graphical SCADA System (IGSS)
    risk 0.08cvss —epss 0.64

    Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to (1) read (opcode 0x3) or (2) create or write (opcode 0x2) arbitrary files via ..\ (dot dot backslash)…

  • CVE-2011-1564Apr 5, 2011
    Realflex
    Realwin
    risk 0.04cvss —epss 0.19

    Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via crafted (1) On_FC_MISC_FCS_MSGBROADCAST and (2) On_FC_MISC_FCS_MSGSEND packets, which trigger a heap-based buffer…

  • CVE-2011-1563Apr 5, 2011
    Realflex
    Realwin
    risk 0.09cvss —epss 0.75

    Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3)…

  • CVE-2011-1562Apr 5, 2011
    Ecava
    Integraxor
    risk 0.00cvss —epss 0.02

    Ecava IntegraXor HMI before n 3.60 (Build 4032) allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be…

  • CVE-2011-1561Apr 5, 2011
    IBM
    Aix
    risk 0.00cvss —epss 0.02

    The LDAP login feature in bos.rte.security 6.1.6.4 in IBM AIX 6.1, when ldap_auth is enabled in ldap.cfg, allows remote attackers to bypass authentication via a login attempt with an arbitrary password.

  • CVE-2011-1560Apr 5, 2011
    IBM
    Soliddb
    risk 0.00cvss —epss 0.04

    solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value.

  • CVE-2011-1559Apr 5, 2011
    IBM
    Webi
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 has unknown impact and attack vectors.

  • CVE-2011-1558Apr 5, 2011
    IBM
    Webi
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1242.

  • CVE-2011-1425Apr 4, 2011
    Apple Inc.
    Webkit
    risk 0.04cvss —epss 0.08

    xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature…

  • CVE-2011-1083Apr 4, 2011
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.

  • CVE-2011-1082Apr 4, 2011
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a…

  • CVE-2011-0894Apr 4, 2011
    Microfocus
    Operations
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in HP Operations 9.10 on UNIX platforms allows remote authenticated users to bypass intended access restrictions via unknown vectors.

  • CVE-2011-0893Apr 4, 2011
    Microfocus
    Operations
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HP Operations 9.10 on UNIX platforms allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-0891Apr 4, 2011
    Microfocus
    Hpux
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the OS-Core.CORE2-KRN fileset in HP HP-UX B.11.23 and B.11.31 allows local users to cause a denial of service via unknown vectors.

  • CVE-2011-1557Apr 4, 2011
    Icloudcenter
    Icjobsite
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in ICloudCenter ICJobSite 1.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter to an unspecified component, a different vulnerability than CVE-2011-1546. NOTE: the provenance of this information is unknown; the details…

  • CVE-2011-1556Apr 4, 2011
    Andy's PHP Knowledgebase
    Andy's PHP Knowledgebase
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter.

  • CVE-2011-1555Apr 4, 2011
    Andy Grayndler
    Aphpkb
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details are obtained from third…

  • CVE-2011-1546Apr 4, 2011
    Andy's PHP Knowledgebase
    Aphpkb
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to (1) a_viewusers.php or (2) keysearch.php; and allow remote authenticated administrators to execute arbitrary…

  • CVE-2011-1126Apr 4, 2011
    VMware
    Workstation
    risk 0.00cvss —epss 0.00

    VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory.

  • CVE-2011-0951Apr 4, 2011
    Cisco Systems, Inc.
    Secure Access Control System
    risk 0.04cvss —epss 0.15

    The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.

  • CVE-2011-0468Apr 4, 2011
    OpenSUSE
    openSUSE
    risk 0.00cvss —epss 0.00

    The aaa_base package before 11.3-8.9.1 in SUSE openSUSE 11.3, and before 11.4-54.62.1 in openSUSE 11.4, allows local users to gain privileges via shell metacharacters in a filename, related to tab expansion.

  • CVE-2011-0461Apr 4, 2011
    OpenSUSE
    openSUSE
    risk 0.00cvss —epss 0.00

    /etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab.

  • CVE-2010-4778Apr 4, 2011
    Horde (software)
    Imp
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka fmusername), (2) password (aka…

  • CVE-2010-4596Apr 4, 2011
    RealNetworks
    Helix Mobile Server
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via a long string in an RTSP request.

  • CVE-2010-4235Apr 4, 2011
    RealNetworks
    Helix Mobile Server
    risk 0.00cvss —epss 0.04

    Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

  • CVE-2010-3693Apr 4, 2011
    Horde (software)
    Groupware
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via vectors related to displaying mailbox names.

  • CVE-2010-3447Apr 4, 2011
    Horde (software)
    Gollem
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the file parameter in a view_file action.

  • CVE-2011-1554Mar 31, 2011
    Xpdf
    Xpdf
    risk 0.00cvss —epss 0.05

    Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer…

  • CVE-2011-1553Mar 31, 2011
    Glyphandcog
    Xpdfreader
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write,…

  • CVE-2011-1552Mar 31, 2011
    Xpdf
    Xpdf
    risk 0.01cvss —epss 0.10

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than…

  • CVE-2011-1175Mar 31, 2011
    Asterisk
    Asterisk Open Source
    risk 0.00cvss —epss 0.03

    tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by establishing many short TCP sessions to…

  • CVE-2011-1174Mar 31, 2011
    Asterisk
    Asterisk Open Source
    risk 0.00cvss —epss 0.03

    manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a series of manager sessions involving invalid data.

  • CVE-2011-0963Mar 31, 2011
    Cisco Systems, Inc.
    Nac Guest Server
    risk 0.00cvss —epss 0.02

    The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control (NAC) Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID…

  • CVE-2011-0764Mar 31, 2011
    Glyphandcog
    Xpdfreader
    risk 0.01cvss —epss 0.13

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by…

  • CVE-2011-0727Mar 31, 2011
    GNOME Foundation
    Gdm
    risk 0.00cvss —epss 0.00

    GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

  • CVE-2010-3695Mar 31, 2011
    Horde (software)
    Imp
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related to the…

  • CVE-2011-1551Mar 30, 2011
    Novell
    Opensuse Factory
    risk 0.00cvss —epss 0.00

    SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon.

  • CVE-2011-1550Mar 30, 2011
    File Project
    Logrotate
    risk 0.00cvss —epss 0.00

    The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted…

  • CVE-2011-1549Mar 30, 2011
    File Project
    Logrotate
    risk 0.00cvss —epss 0.00

    The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories,…

  • CVE-2011-1548Mar 30, 2011
    File Project
    Logrotate
    risk 0.00cvss —epss 0.00

    The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted…

  • CVE-2011-1155Mar 30, 2011
    Logrotate
    logrotate
    risk 0.00cvss —epss 0.00

    The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is…

  • CVE-2011-1154Mar 30, 2011
    Logrotate
    logrotate
    risk 0.00cvss —epss 0.00

    The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or…

  • CVE-2011-1098Mar 30, 2011
    Logrotate
    logrotate
    risk 0.00cvss —epss 0.00

    Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.

  • CVE-2011-1097Mar 30, 2011
    Rsync
    Rsync
    risk 0.00cvss —epss 0.03

    rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.

  • CVE-2009-5064Mar 30, 2011
    GNU
    Glibc
    risk 0.00cvss —epss 0.01

    ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense.…