Search vulnerabilities

Results 425,803

CVE-2009-5061

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.14 services for Lotus Domino, when Domino Native Authentication is enabled, might allow remote authenticated users to cause a denial of service (daemon crash) by going offline, aka SPR MLZG7UPB9N.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Ibm
CVE-2009-5060

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.11 services for Lotus Domino might allow remote authenticated users to cause a denial of service (daemon crash) by accessing an entry in a calendar, aka SPR MZHA7SEBJX.

CVSS 2.0 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Ibm
CVE-2013-1502

mysql: unspecified DoS related to Server Partition (CPU April 2013)

Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.9 and earlier allows local users to affect availability via unknown vectors related to Server Partition.

CVSS 2.0 · 1.5 Low EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2009-5053

Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by injecting this code into a cache file.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Products
CVE-2013-1496

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1498.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Sun
Products
CVE-2009-5052

Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack vectors.

CVSS 2.0 · 10.0 Critical EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2013-2791

MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service (master-station daemon crash) via a malformed DNP3 TCP packet from the IP address of an outstation.

CVSS 2.0 · 7.1 High EPSS 1.3% KEV · Not listed
Vendors
CVE-2013-1495

asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack on a predictable filename in /tmp.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2013-0909

The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2012-1746

Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Windows, allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2012-1747.

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed
Vendors
CVE-2013-0908

Google Chrome before 25.0.1364.152 does not properly manage bindings of extension processes, which has unspecified impact and attack vectors.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2010-3936

Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 18.8% KEV · Not listed
Vendors
CVE-2013-0907

Race condition in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media threads.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2010-3928

Ruby Version Manager (RVM) before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted file, related to an "escape sequence injection vulnerability." NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
CVE-2012-1743

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0.x, 4.6.2, and 4.6.3 allows remote authenticated users to affect confidentiality, related to HTML Surround.

CVSS 2.0 · 2.8 Low EPSS 1.1% KEV · Not listed
Vendors
CVE-2013-0905

Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG animation.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2013-1485

OpenJDK: MethodHandles insufficient privilege checks (Libraries, 8006439)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0 · 5.0 Medium EPSS 4.0% KEV · Not listed
Vendors
Products
Jdk Jre Enterprise Linux and 1 more
CVE-2013-3113

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3112, CVE-2013-3121, CVE-2013-3139, and CVE-2013-3142.

CVSS 2.0 · 9.3 Critical EPSS 19.3% KEV · Not listed
Vendors
CVE-2013-1484

OpenJDK: MethodHandleProxies insufficient privilege checks (Libraries, 8004937)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0 · 10.0 Critical EPSS 6.2% KEV · Not listed
Vendors
Products
Jdk Jre Enterprise Linux and 1 more
CVE-2013-1482

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.

CVSS 2.0 · 10.0 Critical EPSS 5.0% KEV · Not listed
Vendors
Products