VYPR

CVEs

385,854 total · page 6862 of 7,718

AllCriticalHighKEV
  • CVE-2010-1888Aug 11, 2010
    Microsoft
    Windows Xp
    risk 0.03cvss —epss 0.03

    Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka "Windows Kernel Data Initialization Vulnerability."

  • CVE-2010-1887Aug 11, 2010
    Microsoft
    Windows
    risk 0.03cvss —epss 0.02

    The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate an unspecified system-call argument, which allows local users to…

  • CVE-2010-1882Aug 11, 2010
    Microsoft
    Windows Xp
    risk 0.02cvss —epss 0.23

    Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in (1) a crafted media file or (2) crafted…

  • CVE-2010-1258Aug 11, 2010
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.17

    Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain…

  • CVE-2010-0209Aug 11, 2010
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2213, CVE-2010-2214, and…

  • CVE-2010-0019Aug 11, 2010
    Microsoft
    Silverlight
    risk 0.01cvss —epss 0.14

    Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and framework outage) via a crafted web site, aka…

  • CVE-2010-2989Aug 10, 2010
    Tenable
    Web Server Plugin
    risk 0.00cvss —epss 0.01

    nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a request to the /feed method, which reveals the version in a response.

  • CVE-2010-2988Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtf35333.

  • CVE-2010-2987Aug 10, 2010
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Wireless Control System (WCS) 7.x before 7.0.164, as used in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka…

  • CVE-2010-2986Aug 10, 2010
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System (WCS) before 6.0(194.0) and 7.x before 7.0.164 allows remote attackers to inject arbitrary web script or HTML via the searchText…

  • CVE-2010-2985Aug 10, 2010
    IBM
    Websphere Service Registry And Repository
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the searchTerm parameter to ServiceRegistry/HelpSearch.do or (2) the queryItems[0].value…

  • CVE-2010-2634Aug 10, 2010
    Rsa
    Envision
    risk 0.00cvss —epss 0.01

    RSA enVision before 3.7 SP1 allows remote authenticated users to cause a denial of service via unspecified vectors.

  • CVE-2010-2574Aug 10, 2010
    Mantisbt
    Mantisbt
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in manage_proj_cat_add.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action.

  • CVE-2010-2493Aug 10, 2010
    Red Hat
    Jboss Enterprise Soa Platform
    risk 0.00cvss —epss 0.02

    The default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1) the security_saml quickstart, (2) the webservice_proxy_security quickstart, (3) the web-console application, (4) the http-invoker application, (5) the gpd-deployer application, (6)…

  • CVE-2010-2474Aug 10, 2010
    Red Hat
    Jboss Enterprise Service Bus
    risk 0.00cvss —epss 0.01

    JBoss Enterprise Service Bus (ESB) before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service.

  • CVE-2010-0834Aug 10, 2010
    Ubuntu
    base-files
    risk 0.00cvss —epss 0.03

    The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require authentication for package installation, which allows remote archive servers and man-in-the-middle…

  • CVE-2010-2984Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.03

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTH_REQD state, which allows remote attackers to bypass intended access restrictions via WLAN traffic, aka Bug ID CSCtb75305.

  • CVE-2010-2983Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    The workgroup bridge (aka WGB) functionality in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (dropped connection) via a series of spoofed EAPoL-Logoff frames, related to an "EAPoL logoff attack," aka Bug…

  • CVE-2010-2982Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to discover a group password via a series of SNMP requests, as demonstrated by an SNMP walk, aka Bug ID CSCtb74037.

  • CVE-2010-2981Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (device crash) by pinging a virtual interface, aka Bug ID CSCte55370.

  • CVE-2010-2980Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (pbuf exhaustion and device crash) via fragmented traffic, aka Bug ID CSCtd26794.

  • CVE-2010-2979Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (buffer leak and device crash) via ARP requests that trigger an ARP storm, aka Bug ID CSCte43508.

  • CVE-2010-2978Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.02

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660.

  • CVE-2010-2977Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtd01611.

  • CVE-2010-2976Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.02

    The controller in Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 has (1) a default SNMP read-only community of public, (2) a default SNMP read-write community of private, and a value of "default" for the (3) SNMP v3 username, (4) SNMP v3 authentication…

  • CVE-2010-2975Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.00

    Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, which allows physically proximate attackers to read a password, related to an "arrow key failure," aka Bug ID CSCtg51544.

  • CVE-2010-2821Aug 9, 2010
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on the Cisco Firewall Services Module (FWSM) with software 3.2 before 3.2(17.2), 4.0 before 4.0(11.1), and 4.1 before 4.1(1.2) for Catalyst 6500 series switches and 7600 series routers, when multi-mode is enabled, allows remote attackers to cause a…

  • CVE-2010-2820Aug 9, 2010
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote…

  • CVE-2010-2819Aug 9, 2010
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote…

  • CVE-2010-2818Aug 9, 2010
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote…

  • CVE-2010-2817Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the IKE implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.10), and 8.3 before 8.3(1.1) and Cisco…

  • CVE-2010-2816Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2 before 8.2(2.13) allows remote attackers to cause a denial of service (device reload) via…

  • CVE-2010-2815Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX…

  • CVE-2010-2814Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX…

  • CVE-2010-2801Aug 9, 2010
    Cabextract Project
    Cabextract
    risk 0.00cvss —epss 0.04

    Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file,…

  • CVE-2010-2800Aug 9, 2010
    Cabextract Project
    Cabextract
    risk 0.00cvss —epss 0.02

    The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library.

  • CVE-2010-2708Aug 9, 2010
    Microfocus
    ProCurve 2610
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on the HP ProCurve 2610 switch before R.11.22, when DHCP is enabled, allows remote attackers to cause a denial of service via unknown vectors.

  • CVE-2010-2707Aug 9, 2010
    Microfocus
    ProCurve 2626
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on the HP ProCurve 2626 and 2650 switches before H.10.80 allows remote attackers to obtain sensitive information, modify data, and cause a denial of service via unknown vectors.

  • CVE-2010-2706Aug 9, 2010
    Microfocus
    ProCurve 2610
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the In-band Agent on the HP ProCurve 2610 switch before R.11.30 allows remote attackers to cause a denial of service via unknown vectors.

  • CVE-2010-2705Aug 9, 2010
    Microfocus
    ProCurve 1800-8G
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on the HP ProCurve 1800-24G switch with software PB.03.02 and earlier, and the ProCurve 1800-8G switch with software PA.03.02 and earlier, when SNMP is enabled, allows remote attackers to obtain sensitive information via unknown vectors.

  • CVE-2010-1581Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX…

  • CVE-2010-1580Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices…

  • CVE-2010-1579Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices…

  • CVE-2010-1578Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices…

  • CVE-2010-2974Aug 5, 2010
    Invensys
    Wonderware Application Server
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server (WAS) before 3.1 SP2 P01, as used in the Wonderware Archestra Integrated Development Environment…

  • CVE-2010-2973Aug 5, 2010
    Apple Inc.
    iOS
    risk 0.03cvss —epss 0.01

    Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privileges via vectors involving IOSurface properties, as demonstrated by JailbreakMe.

  • CVE-2010-2862Aug 5, 2010
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.16

    Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a TrueType font with a large maxCompositePoints value in a Maximum Profile (maxp) table.

  • CVE-2010-2796Aug 5, 2010
    PhpCAS
    phpCAS
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to inject arbitrary web script or HTML via a callback URL.

  • CVE-2010-2795Aug 5, 2010
    PhpCAS
    phpCAS
    risk 0.00cvss —epss 0.02

    phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value.

  • CVE-2010-2791Aug 5, 2010
    Apache
    HTTP Server
    risk 0.01cvss —epss 0.08

    mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different…