VYPR

CVEs

385,798 total · page 6876 of 7,716

AllCriticalHighKEV
  • CVE-2010-1417Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…

  • CVE-2010-1416Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly restrict the reading of a canvas that contains an SVG image pattern from a different web site, which allows remote attackers to read images from other…

  • CVE-2010-1415Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle libxml contexts, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document,…

  • CVE-2010-1414Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the removeChild…

  • CVE-2010-1413Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.02

    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends NTLM credentials in cleartext in unspecified circumstances, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.

  • CVE-2010-1412Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to hover events.

  • CVE-2010-1410Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an SVG document with nested use elements.

  • CVE-2010-1409Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    Incomplete blacklist vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to trigger disclosure of data over IRC via vectors involving an IRC service port.

  • CVE-2010-1408Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to bypass intended restrictions on outbound connections to "non-default TCP ports" via a crafted port number, related to an "integer truncation…

  • CVE-2010-1406Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.02

    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain…

  • CVE-2010-1405Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML element that has custom…

  • CVE-2010-1404Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.09

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an SVG document that contains…

  • CVE-2010-1403Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.09

    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during the handling of a use element in an SVG document, which allows remote attackers to execute arbitrary code or cause a denial of…

  • CVE-2010-1402Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.09

    Double free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to an event listener…

  • CVE-2010-1401Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.09

    Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service…

  • CVE-2010-1400Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving caption elements.

  • CVE-2010-1399Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during a selection change on a form input element, which allows remote attackers to execute arbitrary code or cause a denial of service…

  • CVE-2010-1398Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.09

    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and…

  • CVE-2010-1397Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.09

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to a layout change…

  • CVE-2010-1396Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.09

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the…

  • CVE-2010-1395Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via vectors involving DOM constructor objects, related to a…

  • CVE-2010-1394Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML document fragments.

  • CVE-2010-1393Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.02

    The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to discover sensitive URLs via an HREF attribute associated with a redirecting URL.

  • CVE-2010-1392Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to HTML buttons…

  • CVE-2010-1391Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.04

    Multiple directory traversal vulnerabilities in the (a) Local Storage and (b) Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allow remote attackers to create arbitrary database…

  • CVE-2010-1390Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via vectors related to improper UTF-7 canonicalization, and…

  • CVE-2010-1389Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) paste or (2)…

  • CVE-2010-1388Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6, and before 4.1 on Mac OS X 10.4, does not properly handle clipboard (1) drag and (2) paste operations for URLs, which allows user-assisted remote attackers to read arbitrary files via a crafted HTML document.

  • CVE-2010-1385Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.05

    Use-after-free vulnerability in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

  • CVE-2010-1384Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not provide a warning about a (1) http or (2) https URL that contains a username and password, which makes it easier for remote attackers to conduct phishing attacks via a…

  • CVE-2009-4892Jun 11, 2010
    Webjump
    Webjump\!
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) portfolio_genre.php and (2) news_id.php.

  • CVE-2009-4891Jun 11, 2010
    Office Ocx
    Cs Cart
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in index.php in CS-Cart 2.0.0 Beta 3 allows remote attackers to execute arbitrary SQL commands via the product_id parameter in a products.view action.

  • CVE-2009-4890Jun 11, 2010
    VBook
    vBook
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the login application in vBook 4.2.17 allow remote attackers to inject arbitrary web script or HTML via the (1) title and (2) message parameters.

  • CVE-2009-4889Jun 11, 2010
    Basti2web
    Book Panel
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the bookid parameter.

  • CVE-2009-4888Jun 11, 2010
    PHortail
    PHortail
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (4) txt parameters.

  • CVE-2009-4887Jun 11, 2010
    Sbuilder
    CMS S.builder
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in index.php in CMS S.Builder 3.7 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in a binn_include_path cookie. NOTE: this can also be leveraged to include and execute…

  • CVE-2009-4886Jun 11, 2010
    phpCommunity
    phpCommunity 2
    risk 0.03cvss —epss 0.03

    Multiple directory traversal vulnerabilities in phpCommunity 2 2.1.8 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter to module/admin/files/show_file.php and the (2) path parameter to module/admin/files/show_source.php.

  • CVE-2009-4885Jun 11, 2010
    Bernhard Frohlich
    Phpcom
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in templates/1/login.php in phpCommunity 2 2.1.8 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

  • CVE-2009-4884Jun 11, 2010
    phpCommunity
    phpCommunity 2
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in phpCommunity 2 2.1.8, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter in a forum action to index.php, (2) the topic_id parameter in a forum action to index.php,…

  • CVE-2009-4883Jun 11, 2010
    Phprecipebook
    Phprecipebook
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL commands via the (1) base_id or (2) course_id parameter in a search action.

  • CVE-2010-2262Jun 10, 2010
    Galileo Students
    Team Weborf
    risk 0.00cvss —epss 0.02

    Galileo Students Team Weborf before 0.12.1 allows remote attackers to cause a denial of service (crash) via a crafted Range header.

  • CVE-2010-2261Jun 10, 2010
    Linksys
    Wap54gv3
    risk 0.00cvss —epss 0.03

    Linksys WAP54Gv3 firmware 3.04.03 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) data2 and (2) data3 parameters to (a) Debug_command_page.asp and (b) debug.cgi.

  • CVE-2010-2193Jun 10, 2010
    Ca
    PSFormX
    risk 0.00cvss —epss 0.06

    Multiple unspecified vulnerabilities in the CA (1) PSFormX and (2) WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2010-1961Jun 10, 2010
    Microfocus
    OpenView Network Node Manager
    risk 0.08cvss —epss 0.67

    Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function.

  • CVE-2010-1960Jun 10, 2010
    Microfocus
    OpenView Network Node Manager
    risk 0.08cvss —epss 0.67

    Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long, invalid option to jovgraph.exe.

  • CVE-2010-1931Jun 10, 2010
    Cubecart
    Cubecart
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php.

  • CVE-2010-1573CriJun 10, 2010
    Linksys
    Wap54gv3
    risk 0.65cvss 9.8epss 0.21

    Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username (Gemtek) and password (gemtekswd) for a debug interface for certain web pages, which allows remote attackers to execute arbitrary commands via the (1) data1, (2) data2, or (3) data3 parameters to (a)…

  • CVE-2010-1572Jun 10, 2010
    Cisco Systems, Inc.
    Application Extension Platform
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the tech support diagnostic shell in Cisco Application Extension Platform (AXP) 1.1 and 1.1.5 allows local users to obtain sensitive configuration information and gain administrator privileges via unspecified API calls.

  • CVE-2010-1571Jun 10, 2010
    Cisco Systems, Inc.
    Unified Contact Center Express
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP…

  • CVE-2010-1570Jun 10, 2010
    Cisco Systems, Inc.
    Unified Contact Center Express
    risk 0.00cvss —epss 0.03

    The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node Manager failure) via…