Search vulnerabilities

Results 425,871

CVE-2012-0113

mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0118.

CVSS 2.0 · 5.5 Medium EPSS 2.5% KEV · Not listed
Vendors
CVE-2012-0114

mysql: Unspecified vulnerability allows local users to affect confidentiality and integrity

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows local users to affect confidentiality and integrity via unknown vectors.

CVSS 2.0 · 3.0 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2012-3754

Use-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 4.4% KEV · Not listed
Vendors
Products
CVE-2012-0117

mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.

CVSS 2.0 · 3.5 Low EPSS 1.8% KEV · Not listed
Vendors
Products
CVE-2012-0118

mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0113.

CVSS 2.0 · 4.9 Medium EPSS 2.1% KEV · Not listed
Vendors
CVE-2012-0120

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0485, and CVE-2012-0492.

CVSS 2.0 · 4.0 Medium EPSS 2.5% KEV · Not listed
Vendors
CVE-2012-0488

mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.

CVSS 2.0 · 4.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Products
CVE-2012-0490

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors.

CVSS 2.0 · 4.0 Medium EPSS 2.9% KEV · Not listed
Vendors
CVE-2012-0491

mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0493, and CVE-2012-0495.

CVSS 2.0 · 4.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Products
CVE-2012-0492

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0485.

CVSS 2.0 · 2.1 Low EPSS 2.5% KEV · Not listed
Vendors
CVE-2012-0493

mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, and CVE-2012-0495.

CVSS 2.0 · 2.1 Low EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2012-0496

mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and integrity via unknown vectors

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2012-0781

php: tidy_diagnose() NULL pointer dereference may cause DoS

The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153.

CVSS 2.0 · 5.0 Medium EPSS 10.4% KEV · Not listed
Vendors
CVE-2011-4153

php: zend_strndup() NULL pointer dereference may cause DoS

PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c.

CVSS 2.0 · 5.0 Medium EPSS 11.8% KEV · Not listed
Vendors
CVE-2011-4043

Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code via a large value for an integer parameter, leading to a buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 7.4% KEV · Not listed
Vendors
CVE-2011-4042

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.

CVSS 2.0 · 9.3 Critical EPSS 6.4% KEV · Not listed
Vendors
CVE-2011-3568

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security.

CVSS 2.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2011-3566

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote attackers to affect availability via unknown vectors related to Web Container.

CVSS 2.0 · 5.0 Medium EPSS 1.2% KEV · Not listed
Vendors
CVE-2010-5266

Untrusted search path vulnerability in VideoCharge Studio 2.9.0.632 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .vsc file. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2012-3729

The Berkeley Packet Filter (BPF) interpreter implementation in the kernel in Apple iOS before 6 accesses uninitialized memory locations, which allows local users to obtain sensitive information about the layout of kernel memory via a crafted program that uses a BPF interface.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Products