Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2009-12-10 CVE-2009-3849 Buffer Errors vulnerability in HP Openview Network Node Manager 7.0.1/7.51/7.53
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe.
network
low complexity
hp CWE-119
critical
10.0
2009-12-10 CVE-2009-3848 Buffer Errors vulnerability in HP Openview Network Node Manager 7.0.1/7.51/7.53
Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Template parameter, related to the vsprintf function.
network
low complexity
hp CWE-119
critical
10.0
2009-12-10 CVE-2009-3847 Remote Code Execution vulnerability in HP Openview Network Node Manager 7.0.1/7.51/7.53
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via unknown vectors.
network
low complexity
hp
critical
10.0
2009-12-10 CVE-2009-3846 Buffer Errors vulnerability in HP Openview Network Node Manager 7.0.1/7.51/7.53
Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter.
network
low complexity
hp CWE-119
critical
10.0
2009-12-10 CVE-2009-3845 Remote Code Execution vulnerability in HP Openview Network Node Manager 7.0.1/7.51/7.53
The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts.
network
low complexity
hp
critical
10.0
2009-12-10 CVE-2009-3800 Remote vulnerability in Adobe AIR and Flash Player
Multiple unspecified vulnerabilities in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allow attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
network
adobe
critical
9.3
2009-12-10 CVE-2009-3799 Numeric Errors vulnerability in Adobe AIR and Flash Player
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."
network
adobe CWE-189
critical
9.3
2009-12-10 CVE-2009-3798 Resource Management Errors vulnerability in Adobe AIR and Flash Player
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
network
adobe CWE-399
critical
9.3
2009-12-10 CVE-2009-3797 Resource Management Errors vulnerability in Adobe AIR and Flash Player
Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
network
adobe CWE-399
critical
9.3
2009-12-10 CVE-2009-3796 Code Injection vulnerability in Adobe AIR and Flash Player
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors, related to a "data injection vulnerability."
network
adobe CWE-94
critical
9.3