VYPR

CVEs

385,868 total · page 6849 of 7,718

AllCriticalHighKEV
  • CVE-2010-2938Oct 8, 2010
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure (VMCS) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when an Intel platform without Extended Page Tables (EPT) functionality is used, accesses VMCS fields without verifying…

  • CVE-2010-2797Oct 8, 2010
    Cmsmadesimple
    Cmsmadesimple
    risk 0.01cvss —epss 0.08

    Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the default_cms_lang parameter to an admin script, as demonstrated by…

  • CVE-2010-3697Oct 7, 2010
    FreeRADIUS
    Freeradius
    risk 0.00cvss —epss 0.02

    The wait_for_child_to_die function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote attackers to cause a denial of service (daemon crash)…

  • CVE-2010-3696Oct 7, 2010
    FreeRADIUS
    Freeradius
    risk 0.00cvss —epss 0.02

    The fr_dhcp_decode function in lib/dhcp.c in FreeRADIUS 2.1.9, in certain non-default builds, does not properly handle the DHCP Relay Agent Information option, which allows remote attackers to cause a denial of service (infinite loop and daemon outage) via a packet that has more…

  • CVE-2010-3692Oct 7, 2010
    PhpCAS
    phpCAS
    risk 0.00cvss —epss 0.04

    Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote attackers to create or overwrite arbitrary files via directory traversal sequences in a Proxy Granting Ticket IOU (PGTiou) parameter.

  • CVE-2010-3691Oct 7, 2010
    PhpCAS
    phpCAS
    risk 0.00cvss —epss 0.00

    PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file.

  • CVE-2010-3690Oct 7, 2010
    PhpCAS
    phpCAS
    risk 0.00cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting Ticket IOU (PGTiou) parameter to the callback function in client.php, (2)…

  • CVE-2010-3321Oct 7, 2010
    Rsa
    Authentication Client
    risk 0.00cvss —epss 0.00

    RSA Authentication Client 2.0.x, 3.0, and 3.5.x before 3.5.3 does not properly handle a SENSITIVE or NON-EXTRACTABLE tag on a secret key object that is stored on a SecurID 800 authenticator, which allows local users to bypass intended access restrictions and read keys via…

  • CVE-2010-1322Oct 7, 2010
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.03

    The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service (daemon crash), or…

  • CVE-2010-3781Oct 6, 2010
    PostgreSQL
    PL/php
    risk 0.00cvss —epss 0.02

    The PL/php add-on 1.4 and earlier for PostgreSQL does not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain privileges via crafted script code in a SECURITY DEFINER function, a related…

  • CVE-2010-3780Oct 6, 2010
    Dovecot (software)
    Dovecot
    risk 0.00cvss —epss 0.02

    Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions.

  • CVE-2010-3779Oct 6, 2010
    Dovecot (software)
    Dovecot
    risk 0.00cvss —epss 0.01

    Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.beta2 grants the admin permission to the owner of each mailbox in a non-public namespace, which might allow remote authenticated users to bypass intended access restrictions by changing the ACL of a mailbox, as demonstrated by a…

  • CVE-2010-3707Oct 6, 2010
    Dovecot (software)
    Dovecot
    risk 0.00cvss —epss 0.02

    plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain…

  • CVE-2010-3706Oct 6, 2010
    Dovecot (software)
    Dovecot
    risk 0.00cvss —epss 0.02

    plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain…

  • CVE-2010-3658Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621,…

  • CVE-2010-3657Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3656.

  • CVE-2010-3656Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3657.

  • CVE-2010-3632Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621,…

  • CVE-2010-3631Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.12

    Array index error in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2010-3630Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

  • CVE-2010-3629Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted image, a different vulnerability than CVE-2010-3620.

  • CVE-2010-3628Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621,…

  • CVE-2010-3627Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via unknown vectors.

  • CVE-2010-3626Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-2889.

  • CVE-2010-3625Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.08

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnerability."

  • CVE-2010-3624Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execute arbitrary code via a crafted image.

  • CVE-2010-3623Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2010-3622Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621,…

  • CVE-2010-3621Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3622,…

  • CVE-2010-3620Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted image, a different vulnerability than CVE-2010-3629.

  • CVE-2010-3619Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3621, CVE-2010-3622,…

  • CVE-2010-3433Oct 6, 2010
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.03

    The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22, 8.2 before 8.2.18, 8.3 before 8.3.12, 8.4 before 8.4.5, and 9.0 before 9.0.1 do not properly protect script execution by a different SQL user identity within the same…

  • CVE-2010-2890Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.06

    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-3619, CVE-2010-3621, CVE-2010-3622,…

  • CVE-2010-2889Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.02cvss —epss 0.27

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-3626.

  • CVE-2010-2888Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Multiple unspecified vulnerabilities in an ActiveX control in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Windows allow attackers to execute arbitrary code via unknown vectors.

  • CVE-2010-2887Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in Adobe Reader and Acrobat 9.x before 9.4 on Linux allow attackers to gain privileges via unknown vectors.

  • CVE-2010-2367Oct 6, 2010
    Norenz
    AD Edit2
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-3763Oct 5, 2010
    Mantisbt
    Mantisbt
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in core/summary_api.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303.

  • CVE-2010-3762Oct 5, 2010
    Isc
    Bind
    risk 0.01cvss —epss 0.08

    ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service (daemon crash) via a DNS query.

  • CVE-2010-3761Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-700. NOTE: this might overlap CVE-2010-3058 or CVE-2010-3059.

  • CVE-2010-3760Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.02

    FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service (NULL pointer…

  • CVE-2010-3759Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.04

    FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via…

  • CVE-2010-3758Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.01cvss —epss 0.07

    Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the (1) AGI_SendToLog (aka…

  • CVE-2010-3757Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.04

    Format string vulnerability in the _Eventlog function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via format string specifiers located after…

  • CVE-2010-3756Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.01

    The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of…

  • CVE-2010-3755Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.02

    The _DAS_ReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via data in a…

  • CVE-2010-3754Oct 5, 2010
    IBM
    Tivoli Storage Manager Fastback
    risk 0.00cvss —epss 0.05

    The FXCLI_OraBR_Exec_Command function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 uses values of packet fields to determine the content and length of data copied to memory, which allows…

  • CVE-2010-3753Oct 5, 2010
    Xelerance
    Openswan
    risk 0.00cvss —epss 0.02

    programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the cisco_banner (aka server_banner) field, a different vulnerability than CVE-2010-3308.

  • CVE-2010-3752Oct 5, 2010
    Xelerance
    Openswan
    risk 0.00cvss —epss 0.02

    programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302.

  • CVE-2010-3308Oct 5, 2010
    Xelerance
    Openswan
    risk 0.00cvss —epss 0.04

    Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long cisco_banner (aka server_banner) field.