VYPR

CVEs

386,183 total · page 6823 of 7,724

AllCriticalHighKEV
  • CVE-2010-4731Feb 15, 2011
    Intellicom
    Netbiter Webscada Ws100
    risk 0.00cvss —epss 0.02

    Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read…

  • CVE-2010-4730Feb 15, 2011
    Intellicom
    Netbiter Webscada Ws100
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read…

  • CVE-2008-7274Feb 15, 2011
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password.

  • CVE-2011-1031Feb 14, 2011
    Feh
    feh
    risk 0.00cvss —epss 0.00

    The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh_ temporary file, a different vulnerability than CVE-2011-0702.

  • CVE-2011-1030Feb 14, 2011
    IBM
    Connections
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Confirm New Page scene."

  • CVE-2011-1029Feb 14, 2011
    IBM
    Rational Team Concert
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 2.0.0.x allows remote authenticated users to inject arbitrary web script or HTML via the name of a shared report.

  • CVE-2011-0987Feb 14, 2011
    PhpMyAdmin
    phpMyAdmin
    risk 0.00cvss —epss 0.03

    The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL query by…

  • CVE-2011-0986Feb 14, 2011
    PhpMyAdmin
    phpMyAdmin
    risk 0.00cvss —epss 0.02

    phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.

  • CVE-2011-0702Feb 14, 2011
    Feh
    feh
    risk 0.00cvss —epss 0.00

    The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack on a /tmp/feh_ temporary file.

  • CVE-2011-0698Feb 14, 2011
    Djangoproject
    Django
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.

  • CVE-2011-0697Feb 14, 2011
    Djangoproject
    Django
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.

  • CVE-2011-0696Feb 14, 2011
    Djangoproject
    Django
    risk 0.00cvss —epss 0.02

    Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged AJAX requests that leverage a…

  • CVE-2011-0447Feb 14, 2011
    Rubyonrails
    Rails
    risk 0.00cvss —epss 0.01

    Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged (1) AJAX or (2)…

  • CVE-2011-0446Feb 14, 2011
    Rubyonrails
    Rails
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the mail_to helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascript encoding is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) name or (2) email value.

  • CVE-2011-0985Feb 10, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspecified impact and remote attack vectors.

  • CVE-2011-0984Feb 10, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

  • CVE-2011-0983Feb 10, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-0982Feb 10, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Use-after-free vulnerability in Google Chrome before 9.0.597.94 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG font faces.

  • CVE-2011-0981Feb 10, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-0980Feb 10, 2011
    Microsoft
    Office
    risk 0.02cvss —epss 0.26

    Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling…

  • CVE-2011-0979Feb 10, 2011
    Microsoft
    Office
    risk 0.02cvss —epss 0.27

    Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; and Excel Viewer SP2 do not properly handle errors during the parsing of Office Art records in Excel spreadsheets, which allows remote attackers…

  • CVE-2011-0978Feb 10, 2011
    Microsoft
    Office
    risk 0.06cvss —epss 0.43

    Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an…

  • CVE-2011-0977Feb 10, 2011
    Microsoft
    Office
    risk 0.03cvss —epss 0.32

    Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka…

  • CVE-2011-0976Feb 10, 2011
    Microsoft
    Powerpoint
    risk 0.02cvss —epss 0.25

    Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 do not properly handle Office Art…

  • CVE-2011-0975Feb 10, 2011
    BMC Software
    Performance Analysis For Servers
    risk 0.01cvss —epss 0.07

    Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00…

  • CVE-2011-0758Feb 10, 2011
    Ca
    Etrust Secure Content Manager
    risk 0.01cvss —epss 0.08

    The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a…

  • CVE-2011-0647Feb 10, 2011
    EMC Corporation
    Networker Module
    risk 0.08cvss —epss 0.64

    The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.

  • CVE-2011-0606Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors…

  • CVE-2011-0605Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2011-0604Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than…

  • CVE-2011-0603Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.09

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image, a different vulnerability than CVE-2011-0566 and…

  • CVE-2011-0602Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file, which causes heap corruption, a different vulnerability…

  • CVE-2011-0600Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.03cvss —epss 0.40

    The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and…

  • CVE-2011-0599Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.09

    The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted image that causes an invalid pointer calculation related to…

  • CVE-2011-0598Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.10

    Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code via crafted ICC data, a different vulnerability than CVE-2011-0596, CVE-2011-0599, and…

  • CVE-2011-0596Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with crafted (1) height and (2) width values for an RLE_8…

  • CVE-2011-0595Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.10

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, a different vulnerability than…

  • CVE-2011-0594Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a font.

  • CVE-2011-0593Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.50

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, a different vulnerability than…

  • CVE-2011-0592Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.48

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to "Texture bmp," a…

  • CVE-2011-0591Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.48

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to Texture and rgba, a…

  • CVE-2011-0590Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.06

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file, a different vulnerability than CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0595, and…

  • CVE-2011-0589Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.05

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0563 and…

  • CVE-2011-0588Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and…

  • CVE-2011-0587Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than…

  • CVE-2011-0586Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X do not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.

  • CVE-2011-0585Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than…

  • CVE-2011-0570Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and…

  • CVE-2011-0568Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

  • CVE-2011-0567Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.03cvss —epss 0.40

    AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image that triggers an incorrect pointer…