VYPR

CVEs

384,820 total · page 6988 of 7,697

AllCriticalHighKEV
  • CVE-2009-0879Mar 12, 2009
    IBM
    Director
    risk 0.04cvss —epss 0.08

    The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI.

  • CVE-2009-0878Mar 12, 2009
    Wesnoth
    Wesnoth
    risk 0.00cvss —epss 0.02

    The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a map with a large (1) width or (2) height.

  • CVE-2009-0877Mar 12, 2009
    Sun Corporation
    Java System Communications Express
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the (1) Full Name or (2) Subject field.

  • CVE-2009-0876Mar 12, 2009
    Sun Corporation
    Virtualbox
    risk 0.03cvss —epss 0.01

    Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN.

  • CVE-2009-0875Mar 12, 2009
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allows local users to cause a denial of service (process hang), or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time…

  • CVE-2009-0874Mar 12, 2009
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allow local users to cause a denial of service (process hang), or possibly bypass file permissions or gain kernel-context privileges, via vectors…

  • CVE-2009-0778Mar 12, 2009
    Linux
    Kernel
    risk 0.00cvss —epss 0.05

    The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable…

  • CVE-2009-0632Mar 12, 2009
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.03

    The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 before 4.2(3)SR4b, 4.3 before 4.3(2)SR1b, 5.x before 5.1(3e), 6.x before 6.1(3), and 7.0 before 7.0(2) sends privileged…

  • CVE-2009-0366Mar 12, 2009
    Wesnoth
    Wesnoth
    risk 0.00cvss —epss 0.02

    The uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document.

  • CVE-2009-0873Mar 11, 2009
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a…

  • CVE-2009-0872Mar 11, 2009
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as…

  • CVE-2009-0871Mar 11, 2009
    Asterisk
    Asterisk Open Source
    risk 0.00cvss —epss 0.03

    The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service (crash) via a SIP…

  • CVE-2009-0854Mar 11, 2009
    Plotly
    Dash
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory.

  • CVE-2009-0848Mar 11, 2009
    OpenSUSE
    openSUSE
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified "relative search path."

  • CVE-2009-0713Mar 11, 2009
    Microfocus
    Systems Insight Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows remote attackers to obtain sensitive information via unknown vectors.

  • CVE-2009-0712Mar 11, 2009
    Microfocus
    Wmi Mapper
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows local users to gain privileges via unknown vectors.

  • CVE-2009-0660Mar 11, 2009
    Mahara (software)
    Mahara
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitrary web script or HTML via a (1) profile and (2) blog, a different vulnerability than CVE-2009-0487.

  • CVE-2009-0234Mar 11, 2009
    Microsoft
    Windows 2000
    risk 0.03cvss —epss 0.34

    The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by…

  • CVE-2009-0233Mar 11, 2009
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.27

    The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not reuse cached DNS responses in all applicable situations, which makes it easier for remote…

  • CVE-2009-0094Mar 11, 2009
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.23

    The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel…

  • CVE-2009-0093Mar 11, 2009
    Microsoft
    Windows 2000
    risk 0.01cvss —epss 0.17

    Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) feature, and…

  • CVE-2008-4563Mar 11, 2009
    IBM
    Tivoli Storage Manager
    risk 0.02cvss —epss 0.29

    Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute…

  • CVE-2008-3547Mar 10, 2009
    OpenTTD
    Openttd
    risk 0.00cvss —epss 0.05

    Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service (persistent game disruption) or possibly execute arbitrary code via vectors involving many long names for "companies and clients."

  • CVE-2009-0870Mar 10, 2009
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow local users to cause a denial of service (infinite loop and system hang) by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4_op_readdir function.

  • CVE-2009-0869Mar 10, 2009
    IBM
    Tivoli Storage Manager
    risk 0.01cvss —epss 0.06

    Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through 5.5.1.4 on Windows allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via…

  • CVE-2009-0837Mar 10, 2009
    Foxitsoftware
    Reader
    risk 0.09cvss —epss 0.76

    Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file"…

  • CVE-2009-0836Mar 10, 2009
    Foxitsoftware
    Reader
    risk 0.06cvss —epss 0.41

    Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via…

  • CVE-2009-0191Mar 10, 2009
    Foxitsoftware
    Reader
    risk 0.00cvss —epss 0.05

    Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of…

  • CVE-2009-0085Mar 10, 2009
    Microsoft
    Windows 2000
    risk 0.01cvss —epss 0.15

    The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport…

  • CVE-2009-0083Mar 10, 2009
    Microsoft
    Windows 2000
    risk 0.00cvss —epss 0.01

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka "Windows Kernel Invalid Pointer Vulnerability."

  • CVE-2009-0082HigMar 10, 2009
    Microsoft
    Windows 2000
    risk 0.51cvss 7.8epss 0.01

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users to gain privileges via a crafted application that triggers unspecified "actions," aka "Windows…

  • CVE-2009-0081Mar 10, 2009
    Microsoft
    Windows 2000
    risk 0.03cvss —epss 0.32

    The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute…

  • CVE-2009-0868Mar 10, 2009
    Fujitsu
    Jasmine2000
    risk 0.00cvss —epss 0.02

    CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

  • CVE-2009-0867Mar 10, 2009
    Fujitsu
    Enhanced Support Facility
    risk 0.00cvss —epss 0.01

    The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain (1) hardware and (2) software information via unspecified requests in a client connection.

  • CVE-2009-0866Mar 10, 2009
    Phpnews
    Phnews
    risk 0.03cvss —epss 0.03

    pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php.

  • CVE-2009-0865Mar 10, 2009
    Geovision
    LiveX
    risk 0.03cvss —epss 0.06

    Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control 8.1.2 and 8.2.0 in LIVEX_~1.OCX allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument, possibly involving the PlayX…

  • CVE-2009-0864Mar 10, 2009
    Matteoiammarrone
    S CMS
    risk 0.03cvss —epss 0.03

    S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie.

  • CVE-2009-0863Mar 10, 2009
    Matteoiammarrone
    S CMS
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in admin/delete_page.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2009-0862Mar 10, 2009
    Tangocms
    Tangocms
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x (aka Eagle) before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. …

  • CVE-2009-0861Mar 10, 2009
    Denora
    phpDenora
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via an IRC channel name. NOTE: some of these details are obtained from third party information.

  • CVE-2009-0860Mar 10, 2009
    Infoblox
    Netmri
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to error pages.

  • CVE-2009-0859Mar 9, 2009
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as…

  • CVE-2009-0858Mar 9, 2009
    D.j.bernstein
    Djbdns
    risk 0.04cvss —epss 0.06

    The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses…

  • CVE-2009-0857Mar 9, 2009
    Sun Corporation
    Management\+center
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: this can be leveraged for access to the…

  • CVE-2009-0856Mar 9, 2009
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, and 6.1 before 6.1.0.23 on z/OS, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-0855Mar 9, 2009
    IBM
    Websphere Application Server
    risk 0.03cvss —epss 0.06

    Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-0825Mar 9, 2009
    Tinx CMS
    cms
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2009-0781Mar 9, 2009
    Apache
    Tomcat
    risk 0.01cvss —epss 0.09

    Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the…

  • CVE-2009-0537Mar 9, 2009
    Microsoft
    Interix
    risk 0.03cvss —epss 0.04

    Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service (application crash) via a deep directory tree, related to the fts_level…

  • CVE-2009-0027Mar 9, 2009
    JBoss
    JBoss
    risk 0.00cvss —epss 0.02

    The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote…