VYPR

CVEs

345,986 total · page 6076 of 6,920

AllCriticalHighKEV
  • CVE-2010-2339Jun 18, 2010
    Subdreamer
    Subdreamer
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.

  • CVE-2010-2338Jun 18, 2010
    Vu
    Web Visitor Analyst
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2010-2336Jun 18, 2010
    Yamamah
    Yamamah
    risk 0.03cvss —epss 0.02

    index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the web document root via the download parameter.

  • CVE-2010-2335Jun 18, 2010
    Yamamah
    Yamamah
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter.

  • CVE-2010-2334Jun 18, 2010
    Yamamah
    Yamamah
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to read arbitrary files via a .. (dot dot) in the download parameter.

  • CVE-2010-2333Jun 18, 2010
    Litespeedtech
    Web Server
    risk 0.08cvss —epss 0.60

    LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.

  • CVE-2010-2332Jun 18, 2010
    Impactfinancials
    Impact PDF Reader
    risk 0.03cvss —epss 0.06

    Impact Financials, Inc. Impact PDF Reader 2.0, 1.2, and other versions for iPhone and iPod touch allows remote attackers to cause a denial of service (server crash) via a "..." body in a POST request.

  • CVE-2010-2331Jun 18, 2010
    iSharer
    File Sharing Wizard
    risk 0.03cvss —epss 0.06

    Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to execute arbitrary code via a long HEAD request.

  • CVE-2010-2330Jun 18, 2010
    iSharer
    File Sharing Wizard
    risk 0.05cvss —epss 0.28

    Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Length header.

  • CVE-2010-2329Jun 18, 2010
    Rosoft
    Audio Converter
    risk 0.04cvss —epss 0.07

    Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist entry in a .m3u file.

  • CVE-2010-2328Jun 18, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses gzip compression.

  • CVE-2010-2327Jun 18, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a…

  • CVE-2010-2326Jun 18, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows attackers to obtain sensitive information about CIMMetadataCollectorImpl trace actions by reading the addNode.log file.

  • CVE-2010-2325Jun 18, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection."

  • CVE-2010-2324Jun 18, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform unspecified "link injection" actions via unknown vectors.

  • CVE-2010-2323Jun 18, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creation by the BBOWWPFx job and the zPMT.

  • CVE-2010-2322Jun 18, 2010
    Matthias Klose
    Fastjar
    risk 0.00cvss —epss 0.03

    Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists…

  • CVE-2010-0831Jun 18, 2010
    Matthias Klose
    Fastjar
    risk 0.00cvss —epss 0.04

    Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080.…

  • CVE-2010-2321Jun 18, 2010
    Adobe Inc.
    Indesign
    risk 0.05cvss —epss 0.21

    Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file.

  • CVE-2010-2192Jun 18, 2010
    Pmount
    pmount
    risk 0.00cvss —epss 0.00

    The make_lockdir_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/.

  • CVE-2010-2068Jun 18, 2010
    Apache
    HTTP Server
    risk 0.01cvss —epss 0.16

    mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a…

  • CVE-2010-1769Jun 18, 2010
    Apple Inc.
    iTunes
    risk 0.01cvss —epss 0.07

    WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the handling of tables, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted…

  • CVE-2010-1763Jun 18, 2010
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in WebKit in Apple iTunes before 9.2 on Windows has unknown impact and attack vectors, a different vulnerability than CVE-2010-1387 and CVE-2010-1769.

  • CVE-2010-1387Jun 18, 2010
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.06

    Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page…

  • CVE-2010-0407Jun 18, 2010
    Muscle
    Pcsc Lite
    risk 0.00cvss —epss 0.00

    Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.

  • CVE-2010-0284Jun 18, 2010
    Novell
    Access Manager
    risk 0.01cvss —epss 0.06

    Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create…

  • CVE-2009-4902Jun 18, 2010
    Muscle
    Pcsc Lite
    risk 0.00cvss —epss 0.00

    Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARD_CONTROL message data, which is improperly demarshalled. NOTE:…

  • CVE-2009-4901Jun 18, 2010
    Muscle
    Pcsc Lite
    risk 0.00cvss —epss 0.00

    The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service (daemon crash) via crafted SCARD_SET_ATTRIB message data, which is improperly demarshalled and…

  • CVE-2010-2319Jun 17, 2010
    Idevspot
    Textads
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter.

  • CVE-2010-2318Jun 17, 2010
    Phpcityportal
    Phpcityportal
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in cms_data.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

  • CVE-2010-2317Jun 17, 2010
    WmsCMS
    WmsCMS
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search, (2) sbr, (3) pid, (4) sbl, and (5) FilePath parameters to default.asp; and the (6) sbr, (7) pr, and (8) psPrice parameters to…

  • CVE-2010-2316Jun 17, 2010
    Wmsdesign
    Wmscms
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) sbl parameters, different vectors than CVE-2007-3137.

  • CVE-2010-2315Jun 17, 2010
    Smartisoft
    Phpbazar
    risk 0.03cvss —epss 0.06

    PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter.

  • CVE-2010-2314Jun 17, 2010
    Nucleus
    NP_Twitter
    risk 0.03cvss —epss 0.05

    PHP remote file inclusion vulnerability in nucleus/plugins/NP_Twitter.php in the NP_Twitter Plugin 0.8 and 0.9 for Nucleus, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DIR_PLUGINS parameter. NOTE: some of these details…

  • CVE-2010-2313Jun 17, 2010
    Anodyne Productions
    Simm Management System
    risk 0.03cvss —epss 0.05

    Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to index.php. NOTE: some of these details are…

  • CVE-2010-2063Jun 17, 2010
    Samba (software)
    Samba
    risk 0.09cvss —epss 0.79

    Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted…

  • CVE-2010-1964Jun 17, 2010
    Microfocus
    OpenView Network Node Manager
    risk 0.08cvss —epss 0.68

    Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified parameters to jovgraph.exe, aka ZDI-CAN-683.

  • CVE-2010-1748Jun 17, 2010
    Apple Inc.
    Cups
    risk 0.04cvss —epss 0.06

    The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent…

  • CVE-2010-1642Jun 17, 2010
    Samba (software)
    Samba
    risk 0.00cvss —epss 0.04

    The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX…

  • CVE-2010-1635Jun 17, 2010
    Samba (software)
    Samba
    risk 0.00cvss —epss 0.04

    The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session…

  • CVE-2010-1411Jun 17, 2010
    LibTIFF
    Libtiff
    risk 0.01cvss —epss 0.13

    Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service…

  • CVE-2010-1382Jun 17, 2010
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote authenticated users to inject arbitrary web script or HTML via crafted Wiki content, related to lack of a charset field.

  • CVE-2010-1381Jun 17, 2010
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    The default configuration of SMB File Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, enables support for wide links, which allows remote authenticated users to access arbitrary files via vectors involving symbolic links. NOTE: this might overlap CVE-2010-0926.

  • CVE-2010-1380Jun 17, 2010
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.04

    Integer overflow in the cgtexttops CUPS filter in Printing in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page sizes.

  • CVE-2010-1379Jun 17, 2010
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding, which allows remote attackers to cause a denial of service (printing failure) by deploying a printing device that has a Unicode character in its printing-service name.

  • CVE-2010-1377Jun 17, 2010
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Open Directory in Apple Mac OS X 10.6 before 10.6.4 creates an unencrypted connection upon certain SSL failures, which allows man-in-the-middle attackers to spoof arbitrary network account servers, and possibly execute arbitrary code, via unspecified vectors.

  • CVE-2010-1376Jun 17, 2010
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) afp, (2) cifs, or (3) smb URL.

  • CVE-2010-1375Jun 17, 2010
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    NetAuthSysAgent in Network Authorization in Apple Mac OS X 10.5.8 does not have the expected authorization requirements, which allows local users to gain privileges via unspecified vectors.

  • CVE-2010-1374Jun 17, 2010
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in iChat in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, when AIM is used, allows remote attackers to create arbitrary files via directory traversal sequences in an inline image-transfer operation.

  • CVE-2010-1373Jun 17, 2010
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted help: URL, related to "URL parameters in HTML content."