VYPR

CVEs

385,422 total · page 6970 of 7,709

AllCriticalHighKEV
  • CVE-2009-1840Jun 12, 2009
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail…

  • CVE-2009-1839Jun 12, 2009
    Mozilla Corporation
    Firefox
    risk 0.04cvss —epss 0.07

    Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL…

  • CVE-2009-1838Jun 12, 2009
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome…

  • CVE-2009-1837HigJun 12, 2009
    Mozilla Corporation
    Firefox
    risk 0.49cvss 7.5epss 0.04

    Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free…

  • CVE-2009-1836Jun 12, 2009
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web…

  • CVE-2009-1835Jun 12, 2009
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a…

  • CVE-2009-1834Jun 12, 2009
    Mozilla Corporation
    Firefox
    risk 0.03cvss —epss 0.03

    Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the…

  • CVE-2009-1833Jun 12, 2009
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.09

    The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1)…

  • CVE-2009-1832Jun 12, 2009
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.09

    Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors involving "double frame construction."

  • CVE-2009-1392Jun 12, 2009
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.09

    The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1)…

  • CVE-2009-2042Jun 12, 2009
    Libpng
    Libpng
    risk 0.00cvss —epss 0.02

    libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via…

  • CVE-2009-2041Jun 12, 2009
    Activecollab
    Activecollab
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in A51 D.O.O. activeCollab 0.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1772.

  • CVE-2009-2040Jun 12, 2009
    Grestul
    Grestul
    risk 0.03cvss —epss 0.03

    admin/options.php in Grestul 1.2 does not properly restrict access, which allows remote attackers to bypass authentication and create administrative accounts via a manage_admin action in a direct request.

  • CVE-2009-2039Jun 12, 2009
    OsCommerce
    Luottokunta
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders.

  • CVE-2009-2038Jun 12, 2009
    OsCommerce
    Finnish Bank Payment
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges.

  • CVE-2009-2037Jun 12, 2009
    Online Grades & Attendance
    Online Grades & Attendance
    risk 0.03cvss —epss 0.02

    Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) GLOBALS[SKIN] parameter to…

  • CVE-2009-2036Jun 12, 2009
    Open Biller
    Open Biller
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter.

  • CVE-2009-2035Jun 12, 2009
    Microsoft
    Services
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Services 6.x before 6.x-0.14, a module for Drupal, when key-based access is enabled, allows remote attackers to read or add keys and access unauthorized services via unspecified vectors.

  • CVE-2009-2034Jun 12, 2009
    Ricardo Alexandre De Oliveira Staudt
    Yogurt
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter.

  • CVE-2009-2033Jun 12, 2009
    Yogurt
    Yogurt
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

  • CVE-2009-2032Jun 12, 2009
    Pagedowntech
    Pdshoppro
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter.

  • CVE-2009-2031Jun 11, 2009
    Sun Corporation
    Opensolaris
    risk 0.00cvss —epss 0.00

    smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes.

  • CVE-2009-2030Jun 11, 2009
    IBM
    JVA-RUN
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the XML Digital Signature verification functionality in JVA-RUN in JDK 6.0 in IBM OS/400 i5/OS V5R4M0 and V6R1M0 has unknown impact and attack vectors related to "XML SECURITY PATCH."

  • CVE-2009-1904Jun 11, 2009
    Ruby Lang
    Ruby
    risk 0.01cvss —epss 0.13

    The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type.

  • CVE-2009-1760Jun 11, 2009
    Rasterbar
    libtorrent
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative…

  • CVE-2009-0202Jun 11, 2009
    Microsoft
    Powerpoint
    risk 0.02cvss —epss 0.24

    Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified "layout information" that triggers a heap-based buffer overflow.

  • CVE-2009-2029Jun 11, 2009
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in rpc.nisd in Sun Solaris 8 through 10, and OpenSolaris before snv_104, allows remote authenticated users to cause a denial of service (NIS+ daemon hang) via unspecified vectors related to NIS+ callbacks.

  • CVE-2009-2028Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues."

  • CVE-2009-1861Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.09

    Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via…

  • CVE-2009-1859Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.

  • CVE-2009-1858Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.09

    The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.

  • CVE-2009-1857Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.07

    Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a PDF document with a crafted TrueType font.

  • CVE-2009-1856Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.14

    Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified…

  • CVE-2009-1855Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.12

    Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via a PDF file containing a malformed U3D model file with a crafted…

  • CVE-2009-1420Jun 11, 2009
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.13

    Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of…

  • CVE-2009-0889Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.11

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different…

  • CVE-2009-0888Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.11

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different…

  • CVE-2009-0512Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.11

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different…

  • CVE-2009-0511Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.11

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different…

  • CVE-2009-0510Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.11

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different…

  • CVE-2009-0509Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.09

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to execute arbitrary code via a crafted file that triggers memory…

  • CVE-2009-0198Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.09

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute…

  • CVE-2009-2027Jun 10, 2009
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.00

    The Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by checking a box that specifies an immediate launch of the application after installation, related to an unspecified compression method.

  • CVE-2009-1532HigJun 10, 2009
    Microsoft
    Internet Explorer
    risk 0.60cvss 8.8epss 0.37

    Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 for Server 2003 SP2; 8 for Vista Gold, SP1, and SP2; and 8 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via "malformed row property references"…

  • CVE-2009-1531Jun 10, 2009
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.35

    Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code via frequent calls to the getElementsByTagName function combined with the creation of an…

  • CVE-2009-1530Jun 10, 2009
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.34

    Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code by repeatedly adding HTML document nodes and calling event…

  • CVE-2009-1529HigJun 10, 2009
    Microsoft
    Internet Explorer
    risk 0.55cvss 8.1epss 0.29

    Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a…

  • CVE-2009-1528Jun 10, 2009
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.35

    Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests, which allows allows remote attackers to execute arbitrary code via a large number…

  • CVE-2009-1141Jun 10, 2009
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.28

    Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the "insertion, deletion and attributes of a table cell," which trigger memory…

  • CVE-2009-1140Jun 10, 2009
    Microsoft
    Internet Explorer
    risk 0.05cvss —epss 0.25

    Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not prevent HTML rendering of cached content, which allows remote attackers to bypass the Same Origin…