VYPR

CVEs

346,414 total · page 5980 of 6,929

AllCriticalHighKEV
  • CVE-2011-3689Sep 27, 2011
    Wibu
    CodeMeter WebAdmin
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Licenses.html in Wibu-Systems CodeMeter WebAdmin 3.30 and 4.30 allows remote attackers to inject arbitrary web script or HTML via the BoxSerial parameter.

  • CVE-2011-3688Sep 27, 2011
    Sonexis
    Conferencemanager
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via (1) the g parameter to Conference/Audio/AudioResourceContainer.asp or (2) the txtConferenceID parameter to Login/HostLogin.asp.

  • CVE-2011-3687Sep 27, 2011
    Sonexis
    Conferencemanager
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Sonexis ConferenceManager 9.2.11.0 allow remote attackers to inject arbitrary web script or HTML via (1) the txtConferenceID parameter to HostLogin.asp, (2) the txtConferenceID parameter to ParticipantLogin.asp, (3) the acp…

  • CVE-2011-3686Sep 27, 2011
    Sonexis
    Conferencemanager
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in myAddressBook.asp in Sonexis ConferenceManager 9.2.11.0 and 9.3.14.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fname, (2) lname, (3) email_edit, (4) email, (5) email2, (6) email3, (7) sms, (8)…

  • CVE-2011-3685Sep 27, 2011
    Tembria
    Server Monitor
    risk 0.00cvss —epss 0.00

    Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to (1) authentication.dat or (2) XML files in the Exports directory.

  • CVE-2011-3684Sep 27, 2011
    Tembria
    Server Monitor
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via (1) the siteid parameter to logbook.asp, (2) the siteid parameter to monitor-events.asp, (3) the siteid…

  • CVE-2011-3645Sep 27, 2011
    Newgensoft
    Omnidocs
    risk 0.03cvss —epss 0.03

    Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects…

  • CVE-2010-4841Sep 27, 2011
    Manageengine
    EventLog Analyzer
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HOST_ID, (2) OS, (3) GROUP, (4) exportFile, (5) load, (6) type, or (7) tab parameter to INDEX.do, the (8) reported…

  • CVE-2010-4840Sep 27, 2011
    Manageengine
    EventLog Analyzer
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a denial of service (SysEvttCol.exe process crash) or possibly execute arbitrary code via a long Syslog PRI message header to UDP port (1) 513 or (2) 514. Fixed…

  • CVE-2010-4852Sep 27, 2011
    Eclime
    Eclime
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web script or HTML via the reason parameter in a fail action.

  • CVE-2010-4851Sep 27, 2011
    Eclime
    Eclime
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the (1) ref or (2) poll_id parameter to index.php, or the (3) country parameter to create_account.php.

  • CVE-2010-4850Sep 27, 2011
    Diferior
    Diferior
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web script or HTML via the (1) post_content parameter to post/edit/2/p1.html, related to views/post.php; the (2) slogan parameter to admin/site/2.html, related to…

  • CVE-2010-4849Sep 27, 2011
    Alibabaclone
    Alibaba Clone
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the es_id parameter.

  • CVE-2010-4848Sep 27, 2011
    Axscripts
    Axslinks
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) title parameter.

  • CVE-2010-4847Sep 27, 2011
    Mhproducts
    Mhp Downloadshop
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.

  • CVE-2010-4846Sep 27, 2011
    Mhproducts
    Pay Pal Shop Digital
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in view_item.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.

  • CVE-2010-4845Sep 27, 2011
    Mhproducts
    Projekt Shop
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the (1) ts parameter to details.php and possibly the (2) ilceler parameter to index.php.

  • CVE-2010-4844Sep 27, 2011
    Mhproducts
    Easy Online Shop
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter.

  • CVE-2010-4843Sep 27, 2011
    PHP Web Scripts
    AD Manager Pro
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter.

  • CVE-2010-4842Sep 27, 2011
    MHP
    DownloadScript
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in admin/login.php in MHP DownloadScript (aka MH Products Download Center) 2.2 allows remote attackers to execute arbitrary SQL commands via the Name parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2011-3826Sep 24, 2011
    Zikula
    Zikula
    risk 0.00cvss —epss 0.01

    Zikula 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/voodoodolly/version.php and certain other files.

  • CVE-2011-3825Sep 24, 2011
    Zend
    Framework
    risk 0.00cvss —epss 0.01

    Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files.

  • CVE-2011-3824Sep 24, 2011
    Yourls
    Yourls
    risk 0.00cvss —epss 0.01

    Your Own URL Shortener (YOURLS) 1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/auth.php and certain other files.

  • CVE-2011-3823Sep 24, 2011
    Yamamah
    Yamamah
    risk 0.00cvss —epss 0.01

    Yamamah 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/index.php and certain other files.

  • CVE-2011-3822Sep 24, 2011
    XOOPS
    Xoops
    risk 0.00cvss —epss 0.01

    XOOPS 2.5.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/system/xoops_version.php and certain other files.

  • CVE-2011-3821Sep 24, 2011
    Xajax
    Xajax
    risk 0.00cvss —epss 0.01

    xajax 0.6 beta1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xajax_core/plugin_layer/xajaxScriptPlugin.inc.php and certain other files.

  • CVE-2011-3820Sep 24, 2011
    WSN Software
    WSN Software
    risk 0.00cvss —epss 0.01

    WSN Software 6.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/prestart.php and certain other files.

  • CVE-2011-3819Sep 24, 2011
    53x11
    Wow Server Status
    risk 0.00cvss —epss 0.01

    WoW Server Status 4.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by status.php and certain other files.

  • CVE-2011-3818Sep 24, 2011
    WordPress
    WordPress
    risk 0.00cvss —epss 0.02

    WordPress 2.9.2 and 3.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by wp-admin/includes/user.php and certain other files.

  • CVE-2011-3817Sep 24, 2011
    Website Baker
    Websitebaker
    risk 0.00cvss —epss 0.01

    Website Baker 2.8.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/media/parameters.php and certain other files. NOTE: this might overlap…

  • CVE-2011-3816Sep 24, 2011
    Webinsta
    Mailing List Manager
    risk 0.00cvss —epss 0.01

    WEBinsta mailing list manager 1.3e allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/install3.php and certain other files.

  • CVE-2011-3815Sep 24, 2011
    Webidsupport
    Webid
    risk 0.00cvss —epss 0.02

    WeBid 1.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by js/calendar.php and certain other files.

  • CVE-2011-3814Sep 24, 2011
    Webcalendar
    Webcalendar
    risk 0.00cvss —epss 0.01

    WebCalendar 1.2.3, and other versions before 1.2.5, allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ws/user_mod.php and certain other files.

  • CVE-2011-3813Sep 24, 2011
    Vwar
    Virtual War
    risk 0.00cvss —epss 0.01

    Virtual War (aka VWar) 1.5.0r15 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/language/dutch.inc.php and certain other files.

  • CVE-2011-3812Sep 24, 2011
    Lussumo
    Vanilla
    risk 0.00cvss —epss 0.01

    Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Minify/min/utils.php and certain other files.

  • CVE-2011-3811Sep 24, 2011
    Tomatocart
    Tomatocart
    risk 0.00cvss —epss 0.01

    TomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/system/offline.php and certain other files.

  • CVE-2011-3810Sep 24, 2011
    Tinywebgallery
    Tinywebgallery
    risk 0.00cvss —epss 0.01

    TinyWebGallery (TWG) 1.8.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by i_frames/i_register.php.

  • CVE-2011-3809Sep 24, 2011
    Thehostingtool
    Thehostingtool
    risk 0.00cvss —epss 0.01

    TheHostingTool (THT) 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/pear/Mail/smtp.php and certain other files.

  • CVE-2011-3808Sep 24, 2011
    Bug Genie
    Bug Genie
    risk 0.00cvss —epss 0.01

    The Bug Genie 2.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/svn_integration/config.inc.php and certain other files.

  • CVE-2011-3807Sep 24, 2011
    Textpattern
    Textpattern
    risk 0.00cvss —epss 0.01

    Textpattern 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/txplib_db.php and certain other files.

  • CVE-2011-3806Sep 24, 2011
    Tecnick
    Tcexam
    risk 0.00cvss —epss 0.01

    TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/code/tce_page_footer.php and certain other files.

  • CVE-2011-3805Sep 24, 2011
    Taskfreak
    Taskfreak\! Multi Mysql
    risk 0.00cvss —epss 0.01

    TaskFreak! multi-mysql-0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/language/zh/register_info.php and certain other files.

  • CVE-2011-3804Sep 24, 2011
    Basic CMS
    Sweetrice
    risk 0.00cvss —epss 0.01

    SweetRice 0.7.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by _plugin/tiny_mce/plugins/advimage/images.php.

  • CVE-2011-3803Sep 24, 2011
    Sugarcrm
    Sugarcrm
    risk 0.00cvss —epss 0.01

    SugarCRM 6.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Sugar5/layout_utils.php and certain other files.

  • CVE-2011-3802Sep 24, 2011
    Status
    Statusnet
    risk 0.00cvss —epss 0.01

    StatusNet 0.9.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tpl/index.php and certain other files.

  • CVE-2011-3801Sep 24, 2011
    Simpletest
    Simpletest
    risk 0.00cvss —epss 0.01

    SimpleTest 1.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by test/visual_test.php and certain other files.

  • CVE-2011-3800Sep 24, 2011
    Serendipity
    Serendipity
    risk 0.00cvss —epss 0.01

    Serendipity 1.5.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/newspaper/layout.php and certain other files.

  • CVE-2011-3799Sep 24, 2011
    ReOS
    ReOS
    risk 0.00cvss —epss 0.01

    ReOS 2.0.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by padmin/blocks/vergal.php and certain other files.

  • CVE-2011-3798Sep 24, 2011
    Rapidleech
    Rapidleech
    risk 0.00cvss —epss 0.01

    Rapid Leech 2.3-v42-svn322 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by classes/pear.php and certain other files.

  • CVE-2011-3797Sep 24, 2011
    Projectpier
    Projectpier
    risk 0.00cvss —epss 0.01

    ProjectPier 0.8.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/upgrade/templates/layout.php and certain other files.