VYPR

CVEs

385,854 total · page 6864 of 7,718

AllCriticalHighKEV
  • CVE-2010-2915Jul 30, 2010
    AJ Square
    Aj Hyip
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-2914Jul 30, 2010
    Tenable
    Web Server Plugin
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-2753HigJul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.58cvss 8.8epss 0.07

    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which…

  • CVE-2010-2752Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.04cvss —epss 0.10

    Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS)…

  • CVE-2010-2751Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple…

  • CVE-2010-1796Jul 30, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.02

    The AutoFill feature in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to obtain sensitive Address Book Card information via JavaScript code that forces keystroke events for input fields.

  • CVE-2010-1793Jul 30, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allow remote attackers to execute arbitrary code or cause a denial of service (application…

  • CVE-2010-1792Jul 30, 2010
    Webkitgtk
    Webkitgtk
    risk 0.00cvss —epss 0.06

    WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted…

  • CVE-2010-1791Jul 30, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.06

    Integer signedness error in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving a JavaScript…

  • CVE-2010-1790Jul 30, 2010
    Webkitgtk
    Webkitgtk
    risk 0.00cvss —epss 0.06

    WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time (JIT) compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a…

  • CVE-2010-1789Jul 30, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.06

    Heap-based buffer overflow in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a JavaScript string object.

  • CVE-2010-1788Jul 30, 2010
    Webkitgtk
    Webkitgtk
    risk 0.00cvss —epss 0.06

    WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a use…

  • CVE-2010-1787Jul 30, 2010
    Webkitgtk
    Webkitgtk
    risk 0.00cvss —epss 0.06

    WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a floating…

  • CVE-2010-1786Jul 30, 2010
    Webkitgtk
    Webkitgtk
    risk 0.00cvss —epss 0.06

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…

  • CVE-2010-1785Jul 30, 2010
    Webkitgtk
    Webkitgtk
    risk 0.00cvss —epss 0.06

    WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the (1) :first-letter and (2) :first-line pseudo-elements in an SVG text element,…

  • CVE-2010-1784Jul 30, 2010
    Webkitgtk
    Webkitgtk
    risk 0.00cvss —epss 0.06

    The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or…

  • CVE-2010-1783Jul 30, 2010
    Webkitgtk
    Webkitgtk
    risk 0.00cvss —epss 0.06

    WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle dynamic modification of a text node, which allows remote attackers to execute arbitrary code or cause a denial…

  • CVE-2010-1782Jul 30, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.06

    WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors…

  • CVE-2010-1780Jul 30, 2010
    Webkitgtk
    Webkitgtk
    risk 0.00cvss —epss 0.06

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via…

  • CVE-2010-1778Jul 30, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via an RSS feed.

  • CVE-2010-1215Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka SJOW) wrapper, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging…

  • CVE-2010-1214Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.04cvss —epss 0.08

    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.

  • CVE-2010-1213Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the…

  • CVE-2010-1212Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1)…

  • CVE-2010-1211Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and…

  • CVE-2010-1210Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting…

  • CVE-2010-1209Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the…

  • CVE-2010-1208HigJul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.58cvss 8.8epss 0.05

    Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event…

  • CVE-2010-1207Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion.

  • CVE-2010-2913Jul 30, 2010
    Citibank
    Citi Mobile
    risk 0.00cvss —epss 0.00

    The Citibank Citi Mobile app before 2.0.3 for iOS stores account data in a file, which allows local users to obtain sensitive information via vectors involving (1) the mobile device or (2) a synchronized computer.

  • CVE-2010-2755Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.04

    layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document,…

  • CVE-2010-2754Jul 30, 2010
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error…

  • CVE-2010-2528Jul 30, 2010
    Pidgin (software)
    Pidgin
    risk 0.00cvss —epss 0.02

    The clientautoresp function in family_icbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via an X-Status message that lacks the expected end tag…

  • CVE-2010-1777Jul 30, 2010
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.05

    Buffer overflow in Apple iTunes before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted itpc: URL.

  • CVE-2010-2912Jul 28, 2010
    Kayako
    Esupport
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the _a parameter in a downloads action.

  • CVE-2010-2911Jul 28, 2010
    Kayako
    Esupport
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a viewnews action.

  • CVE-2010-2910Jul 28, 2010
    Alexred
    Com Oziogallery
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Ozio Gallery (com_oziogallery) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.

  • CVE-2010-2909Jul 28, 2010
    Toughtomato
    Com Ttvideo
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in ttvideo.php in the TTVideo (com_ttvideo) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a video action to index.php.

  • CVE-2010-2908Jul 28, 2010
    Joomla
    Joomdle
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Joomdle (com_joomdle) component 0.24 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the course_id parameter in a detail action to index.php.

  • CVE-2010-2907Jul 28, 2010
    Joomla
    Huru Helpdesk
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the Huru Helpdesk (com_huruhelpdesk) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid[0] parameter in a detail action to index.php.

  • CVE-2010-2906Jul 28, 2010
    Brotherscripts
    Scripts Directory
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-2905.

  • CVE-2010-2905Jul 28, 2010
    Brotherscripts
    Scripts Directory
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-2904Jul 28, 2010
    SAP
    Netweaver
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the System Landscape Directory (SLD) component 6.4 through 7.02 in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter to testsdic and the (2) helpstring parameter to…

  • CVE-2010-2903Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecified impact and remote attack vectors.

  • CVE-2010-2902Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    The SVG implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

  • CVE-2010-2901Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    The rendering implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

  • CVE-2010-2900Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors.

  • CVE-2010-2899Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the layout implementation in Google Chrome before 5.0.375.125 allows remote attackers to obtain sensitive information from process memory via unknown vectors.

  • CVE-2010-2898Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library, which has unknown impact and attack vectors.

  • CVE-2010-2897Jul 28, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack vectors.