VYPR

CVEs

385,730 total · page 6895 of 7,715

AllCriticalHighKEV
  • CVE-2008-3279Apr 5, 2010
    brltty
    brltty
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting.

  • CVE-2007-6735Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended access restrictions via an FTP session.

  • CVE-2007-6734Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.01

    NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors.

  • CVE-2005-4888Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (excessive stale connections) by establishing many FTP sessions, which persist in the Not-Logged-In state after each session is completed.

  • CVE-2005-4887Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.01

    NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords.

  • CVE-2004-2767Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.01

    NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.

  • CVE-2003-1596Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session.

  • CVE-2003-1595Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors.

  • CVE-2003-1594Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access restrictions via an FTP session.

  • CVE-2003-1593Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended access control via an FTP connection.

  • CVE-2003-1592Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow remote attackers to cause a denial of service (abend) via a long (1) username or (2) password.

  • CVE-2003-1591Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.01

    NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service (console hang) via a large number of FTP sessions, which are not properly handled during an NLM unload.

  • CVE-2002-2434Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of service (abend) via multiple FTP sessions.

  • CVE-2002-2433Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.01

    NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a crafted ABOR command.

  • CVE-2002-2432Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via a crafted username.

  • CVE-2001-1587Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.01

    NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous STOU command.

  • CVE-2000-1246Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.01

    NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO command after a failed RNFR command.

  • CVE-2000-1245Apr 5, 2010
    Novell
    Netware
    risk 0.00cvss —epss 0.01

    Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restrictions on anonymous access via unknown vectors.

  • CVE-2010-1237Apr 1, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via an empty SVG element.

  • CVE-2010-1236Apr 1, 2010
    Flock
    Flock
    risk 0.00cvss —epss 0.01

    The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote attackers to conduct…

  • CVE-2010-1235Apr 1, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to trigger the omission of a download warning dialog via unknown vectors.

  • CVE-2010-1234Apr 1, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentication dialog via unknown vectors.

  • CVE-2010-1233Apr 1, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Multiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an unspecified impact via vectors involving WebKit JavaScript objects.

  • CVE-2010-1232Apr 1, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via a malformed SVG document.

  • CVE-2010-1231Apr 1, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers.

  • CVE-2010-1230Apr 1, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.

  • CVE-2010-1229Apr 1, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    The sandbox infrastructure in Google Chrome before 4.1.249.1036 does not properly use pointers, which has unspecified impact and attack vectors.

  • CVE-2010-1228Apr 1, 2010
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Multiple race conditions in the sandbox infrastructure in Google Chrome before 4.1.249.1036 have unspecified impact and attack vectors.

  • CVE-2010-1227Apr 1, 2010
    Sun Corporation
    Java System Communications Express
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as demonstrated by a subject containing an IMG element with a SRC attribute that…

  • CVE-2010-1226Apr 1, 2010
    Apple Inc.
    Iphone OS
    risk 0.03cvss —epss 0.05

    The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service (Safari, Mail, or Springboard crash) via a crafted innerHTML property of a DIV element, related to a "malformed character" issue.

  • CVE-2010-1225Apr 1, 2010
    Microsoft
    Virtual Pc
    risk 0.05cvss —epss 0.28

    The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM…

  • CVE-2010-1224Apr 1, 2010
    Digium
    Asterisk
    risk 0.00cvss —epss 0.04

    main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 does not properly enforce remote host access controls when CIDR notation "/0" is used in permit= and deny= configuration rules, which causes an improper arithmetic…

  • CVE-2010-1193Apr 1, 2010
    VMware
    Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in WebAccess in VMware Server 2.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON error messages.

  • CVE-2010-1137Apr 1, 2010
    VMware
    Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine.

  • CVE-2010-1031Apr 1, 2010
    Microfocus
    Insight Control for Linux
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux or ICE-LX) 2.11 and earlier allows local users to gain privileges via unknown vectors.

  • CVE-2010-0770Apr 1, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to cause a denial of service (ORB ListenerThread hang) by aborting an SSL handshake.

  • CVE-2010-0769Apr 1, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.00

    IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the…

  • CVE-2010-0768Apr 1, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote attackers to inject arbitrary web script or HTML via the URI.

  • CVE-2010-0686Apr 1, 2010
    VMware
    Server
    risk 0.00cvss —epss 0.02

    WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a "URL forwarding vulnerability."

  • CVE-2009-2277Apr 1, 2010
    VMware
    Virtualcenter
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "context data."

  • CVE-2010-0850Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2010-0849Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-0848Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2010-0847Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-0846Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-0845Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2010-0844Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-0843Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-0842Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.09cvss —epss 0.78

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-0841Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained…