VYPR

CVEs

385,880 total · page 6846 of 7,718

AllCriticalHighKEV
  • CVE-2010-3983Oct 18, 2010
    SAP
    Businessobjects
    risk 0.00cvss —epss 0.02

    CmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain privileges via vectors involving the Program Job Server and the Program Login property.

  • CVE-2010-3982Oct 18, 2010
    SAP
    Businessobjects
    risk 0.00cvss —epss 0.01

    SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an…

  • CVE-2010-3981Oct 18, 2010
    SAP
    Businessobjects
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to inject arbitrary web script or HTML via the ServiceClass field to the Edit Service Parameters page.

  • CVE-2010-3980Oct 18, 2010
    SAP
    Businessobjects
    risk 0.00cvss —epss 0.01

    Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI.

  • CVE-2010-3979Oct 18, 2010
    SAP
    Businessobjects
    risk 0.00cvss —epss 0.01

    Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a valid username, which allows remote attackers to enumerate account names via a login SOAPAction to the dswsbobje/services/session URI.

  • CVE-2010-3841Oct 18, 2010
    TWiki
    Twiki
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script.

  • CVE-2010-3287Oct 18, 2010
    Microfocus
    ProCurve Access Points
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability on HP ProCurve Access Points, Access Controllers, and Mobility Controllers with software 5.1.x through 5.1.9, 5.2.x through 5.2.7, 5.3.x through 5.3.5, and 5.4.x through 5.4.0 allows remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2010-3286Oct 18, 2010
    Microfocus
    Systems Insight Manager
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in HP Systems Insight Manager (SIM) 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors.

  • CVE-2010-2369Oct 18, 2010
    Lhasa
    Lhasa
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in Lhasa 0.19 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.

  • CVE-2010-2368Oct 18, 2010
    Lhaplus
    Lhaplus
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

  • CVE-2010-0219Oct 18, 2010
    Apache
    Axis2
    risk 0.10cvss —epss 0.91

    Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web…

  • CVE-2009-5006Oct 18, 2010
    Apache
    Qpid
    risk 0.00cvss —epss 0.04

    The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service…

  • CVE-2009-5005Oct 18, 2010
    Apache
    Qpid
    risk 0.00cvss —epss 0.06

    The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service (daemon crash and cluster outage) via invalid AMQP data.

  • CVE-2010-3934Oct 14, 2010
    Rim
    Blackberry Device Software
    risk 0.00cvss —epss 0.03

    The browser in Research In Motion (RIM) BlackBerry Device Software 5.0.0.593 Platform 5.1.0.147 on the BlackBerry 9700 does not properly restrict cross-domain execution of JavaScript, which allows remote attackers to bypass the Same Origin Policy via vectors related to a…

  • CVE-2010-3585Oct 14, 2010
    Oracle Corporation
    VM
    risk 0.07cvss —epss 0.52

    Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle…

  • CVE-2010-3584Oct 14, 2010
    Oracle Corporation
    VM
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Oracle VM component in Oracle VM 2.2.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not…

  • CVE-2010-3583Oct 14, 2010
    Oracle Corporation
    VM
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle…

  • CVE-2010-3582Oct 14, 2010
    Oracle Corporation
    VM
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent.

  • CVE-2010-3581Oct 14, 2010
    Oracle Corporation
    Fusion Middleware
    risk 0.03cvss —epss 0.02

    Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows remote authenticated users to affect integrity via unknown vectors.

  • CVE-2010-3580Oct 14, 2010
    Oracle Corporation
    Opensolaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle OpenSolaris allows local users to affect availability via unknown vectors related to Kernel/File System.

  • CVE-2010-3579Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the (1) Sun Convergence 1 and (2) Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 and 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail.

  • CVE-2010-3578Oct 14, 2010
    Oracle Corporation
    Opensolaris
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle OpenSolaris allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Depot Server.

  • CVE-2010-3577Oct 14, 2010
    Oracle Corporation
    Opensolaris
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle OpenSolaris allows remote attackers to affect confidentiality and integrity, related to Kernel/CIFS.

  • CVE-2010-3576Oct 14, 2010
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect integrity and availability, related to the SCSI enclosure services device driver.

  • CVE-2010-3575Oct 14, 2010
    Oracle Corporation
    Communications Messaging Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 6.0, 6.2, 6.3, and 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Mail.

  • CVE-2010-3564Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous…

  • CVE-2010-3547Oct 14, 2010
    Oracle Corporation
    PeopleSoft FMS ESA - EX
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft FMS ESA - EX component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3546Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Sun Java System Identity Manager component in Oracle Sun Products Suite 8.1 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3545Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.

  • CVE-2010-3544Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration. NOTE: the previous information was…

  • CVE-2010-3542Oct 14, 2010
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality, related to USB.

  • CVE-2010-3540Oct 14, 2010
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to ZFS.

  • CVE-2010-3539Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Fms
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS - GL component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different…

  • CVE-2010-3538Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Fms
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS - GL component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different…

  • CVE-2010-3537Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Fms
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS - AM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3536Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Scm
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3535Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Directory Server Enterprise Edition component in Oracle Sun Products Suite 6.0, 6.1, 6.2, and 6.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Identity Synchronization for Windows.

  • CVE-2010-3534Oct 14, 2010
    Oracle Corporation
    Primavera P6 Enterprise Project Portfolio Management
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 6.21.3.0 and 7.0.1.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Project Management…

  • CVE-2010-3533Oct 14, 2010
    Oracle Corporation
    Peoplesoft And Jdedwards Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise SCM OM and CRM Order Capture component in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3532Oct 14, 2010
    Oracle Corporation
    PeopleSoft Enterprise CRM - Order Capture
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise CRM - Order Capture component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #28 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3531Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Fms
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS ESA - RM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3530Oct 14, 2010
    Oracle Corporation
    Peoplesoft And Jdedwards Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HCM - HR component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #13 and 9.1 Bundle #3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3529Oct 14, 2010
    Oracle Corporation
    Peoplesoft And Jdedwards Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS - Cash Management component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3528Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise CRM - Common Components component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #41, 9.0 Bundle #28, and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2010-3527Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Fms
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS - AM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect integrity and availability via unknown vectors.

  • CVE-2010-3526Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise SCM - PO component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3525Oct 14, 2010
    Oracle Corporation
    Peoplesoft And Jdedwards Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the (1) PeopleSoft Enterprise FMS, (2) SCM, (3) EPM, (4) CRM, and (5) Campus Solutions components in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3524Oct 14, 2010
    Oracle Corporation
    Peoplesoft And Jdedwards Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise SCM - Strategic Sourcing component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-3523Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2010-3522Oct 14, 2010
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote authenticated users to affect confidentiality via unknown vectors.