VYPR

CVEs

386,118 total · page 6831 of 7,723

AllCriticalHighKEV
  • CVE-2011-0479Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer.

  • CVE-2011-0478Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

  • CVE-2011-0477Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-0476Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers an out-of-memory error.

  • CVE-2011-0475Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a PDF document.

  • CVE-2011-0474Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown…

  • CVE-2011-0473Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via…

  • CVE-2011-0472Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a multi-page…

  • CVE-2011-0471Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    The node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 does not properly handle pointers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-0470Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle extensions notification, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.

  • CVE-2009-5018Jan 14, 2011
    Catb
    Gif2png
    risk 0.04cvss —epss 0.11

    Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long command-line argument, as demonstrated by a CGI program that launches gif2png.

  • CVE-2010-4334Jan 14, 2011
    Perl Foundation
    IO::Socket::SSL
    risk 0.00cvss —epss 0.02

    The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions.

  • CVE-2011-0310Jan 13, 2011
    IBM
    Websphere Mq
    risk 0.00cvss —epss 0.03

    Buffer overflow in IBM WebSphere MQ 7.0 before 7.0.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted header field in a message.

  • CVE-2011-0271Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.07

    The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection…

  • CVE-2011-0270Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.16

    Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in input data that involves an invalid template name.

  • CVE-2011-0269Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.17

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long schd_select1 parameter.

  • CVE-2011-0268Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.16

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long text1 parameter.

  • CVE-2011-0267Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.09cvss —epss 0.72

    Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long (1) schdParams or (2) nameParams parameter, a different vulnerability than CVE-2011-0266.

  • CVE-2011-0266Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.09cvss —epss 0.70

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long nameParams parameter, a different vulnerability than CVE-2011-0267.2.

  • CVE-2011-0265Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.17

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long data_select1 parameter.

  • CVE-2011-0264Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.17

    Stack-based buffer overflow in ovutil.dll in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long COOKIE variable.

  • CVE-2011-0263Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.17

    Multiple stack-based buffer overflows in ovas.exe in the OVAS service in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long (1) Source Node or (2) Destination Node variable.

  • CVE-2011-0262Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.17

    Buffer overflow in the stringToSeconds function in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via large values of variables to jovgraph.exe.

  • CVE-2011-0261Jan 13, 2011
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.16

    Unspecified vulnerability in jovgraph.exe in jovgraph in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a malformed displayWidth option in the arg parameter.

  • CVE-2010-4647Jan 13, 2011
    Eclipse
    Ide
    risk 0.03cvss —epss 0.06

    Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.

  • CVE-2010-4537Jan 13, 2011
    Crawltrack
    Crawltrack
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in CrawlTrack before 3.2.7, when a public stats page is provided, allows remote attackers to execute arbitrary PHP code via unknown vectors.

  • CVE-2010-4529Jan 13, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Integer underflow in the irda_getsockopt function in net/irda/af_irda.c in the Linux kernel before 2.6.37 on platforms other than x86 allows local users to obtain potentially sensitive information from kernel heap memory via an IRLMP_ENUMDEVICES getsockopt call.

  • CVE-2010-4527Jan 13, 2011
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The load_mixer_volumes function in sound/oss/soundcard.c in the OSS sound subsystem in the Linux kernel before 2.6.37 incorrectly expects that a certain name field ends with a '\0' character, which allows local users to conduct buffer overflow attacks and gain privileges, or…

  • CVE-2010-4052Jan 13, 2011
    GNU
    Glibc
    risk 0.07cvss —epss 0.51

    Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent…

  • CVE-2010-4051Jan 13, 2011
    GNU
    Glibc
    risk 0.06cvss —epss 0.40

    The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (application crash) via a regular expression containing adjacent bounded repetitions that bypass the…

  • CVE-2010-3925Jan 13, 2011
    Wb I
    Contents Mall
    risk 0.00cvss —epss 0.01

    Contents-Mall before 15 does not properly handle passwords, which allows remote attackers to discover the administrative password, and consequently obtain sensitive information or modify data, via unspecified vectors.

  • CVE-2010-3924Jan 13, 2011
    Aimluck
    Aipo
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Aimluck Aipo before 5.1.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-7271Jan 13, 2011
    Eclipse
    Ide
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via (1) the searchWord parameter to help/advanced/searchView.jsp or (2)…

  • CVE-2011-0445Jan 13, 2011
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.03

    The ASN.1 BER dissector in Wireshark 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (assertion failure) via crafted packets, as demonstrated by fuzz-2010-12-30-28473.pcap.

  • CVE-2011-0444Jan 13, 2011
    Wireshark
    Wireshark
    risk 0.01cvss —epss 0.07

    Buffer overflow in the MAC-LTE dissector (epan/dissectors/packet-mac-lte.c) in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of RARs.

  • CVE-2011-0443Jan 13, 2011
    Tinybb
    Tinybb
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in inc/tinybb-settings.php in tinyBB 1.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. NOTE: some of these details are obtained from third party…

  • CVE-2010-3912Jan 13, 2011
    Novell
    Suse Linux
    risk 0.00cvss —epss 0.02

    The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors.

  • CVE-2010-2604Jan 13, 2011
    Rim
    Blackberry Enterprise Server
    risk 0.00cvss —epss 0.06

    Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, allow remote attackers to execute arbitrary code via a…

  • CVE-2010-2599Jan 13, 2011
    Rim
    Blackberry Device Software
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Research In Motion (RIM) BlackBerry Device Software before 6.0.0 allows remote attackers to cause a denial of service (browser hang) via a crafted web page.

  • CVE-2011-0423Jan 12, 2011
    Polyvision
    Roomwizard
    risk 0.00cvss —epss 0.02

    The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which makes it easier for remote attackers to obtain console access via an HTTP session, a different vulnerability than CVE-2010-0214.

  • CVE-2011-0316Jan 12, 2011
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request.

  • CVE-2011-0315Jan 12, 2011
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to the lack of an…

  • CVE-2011-0314Jan 12, 2011
    IBM
    Websphere Mq
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 allows remote authenticated users to execute arbitrary code or cause a denial of service (queue manager crash) by inserting an invalid message into the queue.

  • CVE-2011-0027Jan 12, 2011
    Microsoft
    Data Access Components
    risk 0.07cvss —epss 0.54

    Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property…

  • CVE-2011-0026Jan 12, 2011
    Microsoft
    Data Access Components
    risk 0.03cvss —epss 0.34

    Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name…

  • CVE-2010-3926Jan 12, 2011
    Wb I
    Sgx Sp Final Ne
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Shop.cgi in SGX-SP Final before 11.00 and SGX-SP Final NE before 11.00 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0214Jan 12, 2011
    Polyvision
    Roomwizard
    risk 0.00cvss —epss 0.02

    The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source…

  • CVE-2010-3683Jan 11, 2011
    MySQL
    MySQL
    risk 0.04cvss —epss 0.12

    Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.

  • CVE-2010-3682Jan 11, 2011
    MySQL
    MySQL
    risk 0.04cvss —epss 0.11

    Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in…

  • CVE-2010-3681Jan 11, 2011
    MySQL
    MySQL
    risk 0.04cvss —epss 0.12

    Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.