VYPR

CVEs

385,453 total · page 6961 of 7,710

AllCriticalHighKEV
  • CVE-2009-1892Jul 17, 2009
    Isc
    DHCP
    risk 0.01cvss —epss 0.09

    dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service (daemon crash) via unspecified requests.

  • CVE-2009-2491Jul 16, 2009
    Sun Corporation
    Ray Server Software
    risk 0.00cvss —epss 0.00

    The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to "resource leaks."

  • CVE-2009-2490Jul 16, 2009
    Sun Corporation
    Ray Server Software
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service (audio outage) or possibly gain privileges via unknown vectors related to "resource leaks."

  • CVE-2009-2489Jul 16, 2009
    Sun Corporation
    Ray Server Software
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access the sessions of arbitrary users via unknown vectors.

  • CVE-2009-2488Jul 16, 2009
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv_102 through snv_119, allows local users to cause a denial of service (client panic) via vectors involving "file operations."

  • CVE-2009-2487Jul 16, 2009
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.03

    Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv_45 through snv_110, allows remote attackers to cause a denial of service (panic) via unspecified vectors.

  • CVE-2009-2486Jul 16, 2009
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote attackers to cause a denial of service (panic) via unspecified packets.

  • CVE-2009-2485Jul 16, 2009
    HT MP3Player
    HT-MP3Player
    risk 0.08cvss —epss 0.58

    Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file.

  • CVE-2009-2484Jul 16, 2009
    VideoLAN
    VLC media player
    risk 0.06cvss —epss 0.35

    Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long…

  • CVE-2009-2483Jul 16, 2009
    NetBSD
    NetBSD
    risk 0.00cvss —epss 0.00

    libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via a malformed externalized plist (XML form) containing an undefined element.

  • CVE-2009-2482Jul 16, 2009
    NetBSD
    NetBSD
    risk 0.00cvss —epss 0.00

    The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.

  • CVE-2009-2481Jul 16, 2009
    Movabletype
    Movabletype
    risk 0.00cvss —epss 0.01

    mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.

  • CVE-2009-2480Jul 16, 2009
    Movabletype
    Six Apart Movable Type
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type 4.24, and 4.25 when global templates are not initialized, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-2479Jul 16, 2009
    Mozilla Corporation
    Firefox
    risk 0.04cvss —epss 0.12

    Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught exception and application crash) via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on…

  • CVE-2009-2478Jul 16, 2009
    Mozilla Corporation
    Firefox
    risk 0.04cvss —epss 0.08

    Mozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors, related to a "flash bug."

  • CVE-2009-2048Jul 16, 2009
    Cisco Systems, Inc.
    Crs
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX…

  • CVE-2009-2047Jul 16, 2009
    Cisco Systems, Inc.
    Crs
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified…

  • CVE-2009-1895Jul 16, 2009
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory…

  • CVE-2009-2477Jul 15, 2009
    Mozilla Corporation
    Firefox
    risk 0.06cvss —epss 0.43

    js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally…

  • CVE-2009-1542Jul 15, 2009
    Microsoft
    Virtual Pc
    risk 0.01cvss —epss 0.08

    The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and…

  • CVE-2009-1539Jul 15, 2009
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.26

    The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers…

  • CVE-2009-1538Jul 15, 2009
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.27

    The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote…

  • CVE-2009-1136Jul 15, 2009
    Microsoft
    Office
    risk 0.08cvss —epss 0.62

    The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet…

  • CVE-2009-1135Jul 15, 2009
    Microsoft
    Isa Server
    risk 0.02cvss —epss 0.26

    Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving…

  • CVE-2009-0566Jul 15, 2009
    Microsoft
    Publisher
    risk 0.02cvss —epss 0.29

    Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."

  • CVE-2009-0232Jul 15, 2009
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.26

    Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType…

  • CVE-2009-0231HigJul 15, 2009
    Microsoft
    Windows 2000
    risk 0.60cvss 8.8epss 0.37

    The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers…

  • CVE-2009-1989Jul 14, 2009
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2009-1988Jul 14, 2009
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2009-1987Jul 14, 2009
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools - Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.21 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2009-1986Jul 14, 2009
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality via unknown vectors.

  • CVE-2009-1984Jul 14, 2009
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Patch Administrator.

  • CVE-2009-1983Jul 14, 2009
    Oracle Corporation
    Istore
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2009-1982Jul 14, 2009
    Oracle Corporation
    Applications Framework
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.6 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2009-1981Jul 14, 2009
    Oracle Corporation
    Siebel Suite
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Highly Interactive Client component in Siebel Product Suite 7.5.3, 7.7.2, 7.8.2, 8.0.0.5, and 8.1.0 allows local users to affect confidentiality and integrity via unknown vectors.

  • CVE-2009-1980Jul 14, 2009
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2009-1978Jul 14, 2009
    Oracle Corporation
    Secure Backup
    risk 0.08cvss —epss 0.65

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle…

  • CVE-2009-1977Jul 14, 2009
    Oracle Corporation
    Secure Backup
    risk 0.09cvss —epss 0.73

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle…

  • CVE-2009-1976Jul 14, 2009
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the HTTP Server component in Oracle Application Server 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2009-1975Jul 14, 2009
    Oracle Corporation
    Bea Product Suite
    risk 0.03cvss —epss 0.03

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, and availability, related to the WLS Console Package.

  • CVE-2009-1974Jul 14, 2009
    Oracle Corporation
    Bea Product Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Servlet Container Package.

  • CVE-2009-1973Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Virtual Private Database component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to VPD policies.

  • CVE-2009-1970Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.12

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-0991.

  • CVE-2009-1969Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2009-1968Jul 14, 2009
    Oracle Corporation
    Secure Enterprise Search
    risk 0.06cvss —epss 0.40

    Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors. NOTE: the previous information was obtained from the July 2009 CPU. Oracle has not commented on claims from an…

  • CVE-2009-1967Jul 14, 2009
    Oracle Corporation
    Enterprise Manager
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1966.

  • CVE-2009-1966Jul 14, 2009
    Oracle Corporation
    Enterprise Manager
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1967.

  • CVE-2009-1963Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.09

    Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows remote authenticated users to affect integrity and availability via unknown vectors.

  • CVE-2009-1021Jul 14, 2009
    Oracle Corporation
    Advanced Replication
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2009-1020Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.