VYPR

CVEs

345,967 total · page 6085 of 6,920

AllCriticalHighKEV
  • CVE-2010-1628May 19, 2010
    Artifex
    Ghostscript
    risk 0.00cvss —epss 0.04

    Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.

  • CVE-2010-1627May 19, 2010
    PhpBB
    phpBB
    risk 0.00cvss —epss 0.01

    feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended access restrictions via unspecified attack vectors related to permission settings on a private forum.

  • CVE-2010-1984May 19, 2010
    Drupal
    Taxonomy Breadcrumb
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Taxonomy Breadcrumb module 5.x before 5.x-1.5 and 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via the taxonomy term name in a…

  • CVE-2010-1983May 19, 2010
    Joomla
    redTWITTER
    risk 0.05cvss —epss 0.19

    Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. NOTE: some of these details are obtained from third party…

  • CVE-2010-1982May 19, 2010
    Joomlart
    Com Javoice
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in the JA Voice (com_javoice) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php.

  • CVE-2010-1981May 19, 2010
    Joomla
    Fabrik
    risk 0.04cvss —epss 0.12

    Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1980May 19, 2010
    Joomla
    Joomla Flickr
    risk 0.05cvss —epss 0.19

    Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1979May 19, 2010
    Joomla
    Affiliate Datafeeds
    risk 0.04cvss —epss 0.11

    Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1978May 19, 2010
    Freephpblogsoftware
    Freephpblogsoftware
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in default_theme.php in FreePHPBlogSoftware 1.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpincdir parameter. NOTE: some of these details are obtained from third party…

  • CVE-2010-1977May 19, 2010
    Gohigheris
    Com Jwhmcs
    risk 0.04cvss —epss 0.07

    Directory traversal vulnerability in the J!WHMCS Integrator (com_jwhmcs) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1976May 19, 2010
    Drupal
    Taxonomy Breadcrumb
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Taxonomy Breadcrumb module 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via the node title in a Breadcrumb display.

  • CVE-2010-1975May 19, 2010
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.03

    PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings…

  • CVE-2010-1454May 19, 2010
    VMware
    Tc Server
    risk 0.00cvss —epss 0.02

    com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25.A before 6.0.25.A-SR01, does not properly enforce the requirement for an encrypted (aka s2enc) password, which allows remote…

  • CVE-2010-1447May 19, 2010
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.03

    The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers…

  • CVE-2010-1321May 19, 2010
    Mit
    Kerberos 5
    risk 0.01cvss —epss 0.07

    The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users…

  • CVE-2010-1170May 19, 2010
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.03

    The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and…

  • CVE-2010-1169May 19, 2010
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.04

    PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges,…

  • CVE-2010-1584May 19, 2010
    Drupal
    Context
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Context module before 6.x-2.0-rc4 for Drupal allows remote authenticated users, with Administer Blocks privileges, to inject arbitrary web script or HTML via a block description.

  • CVE-2010-0404May 19, 2010
    PhpGroupWare
    Phpgroupware
    risk 0.00cvss —epss 0.02

    Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) class.sessions_db.inc.php, (2) class.translation_sql.inc.php, or (3) class.auth_sql.inc.php in…

  • CVE-2010-0403May 19, 2010
    PhpGroupWare
    Phpgroupware
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter.

  • CVE-2010-1943May 19, 2010
    NEC
    Capsuite Patchmeister
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in NEC CapsSuite Small Edition PatchMeister 2.0 Update2 and earlier allows remote attackers to cause a denial of service (OS shutdown or restart) via vectors related to Client Service for PTM and crafted packets to port 56015.

  • CVE-2010-1942May 19, 2010
    Fujitsu
    Interstage Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive…

  • CVE-2010-1941May 19, 2010
    NEC
    Bladesystemcenter
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in NEC WebSAM DeploymentManager 5.13 and earlier, as used in SigmaSystemCenter 2.1 Update2 and earlier, BladeSystemCenter, ExpressSystemCenter, and VirtualPCCenter 2.2 and earlier, allows remote attackers to cause a denial of service (OS shutdown or…

  • CVE-2010-1948May 19, 2010
    Openmairie
    Openfoncier
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in scr/soustab.php in openMairie Openfoncier 2.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to…

  • CVE-2010-1947May 19, 2010
    Openmairie
    Openregistrecil
    risk 0.03cvss —epss 0.05

    Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter. NOTE: this may be…

  • CVE-2010-1946May 19, 2010
    Openmairie
    Openregistrecil
    risk 0.03cvss —epss 0.06

    Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autorisation_normale.class.php, (2) collectivite.class.php, (3)…

  • CVE-2010-1945May 19, 2010
    Openmairie
    Openfoncier
    risk 0.03cvss —epss 0.05

    Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) action.class.php, (2) architecte.class.php, (3) avis.class.php, (4)…

  • CVE-2010-1944May 19, 2010
    Openmairie
    Opencimetiere
    risk 0.03cvss —epss 0.06

    Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autorisation.class.php, (2) courrierautorisation.class.php, (3)…

  • CVE-2010-1957May 19, 2010
    Joomla
    Love Factory
    risk 0.04cvss —epss 0.15

    Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1956May 19, 2010
    Thefactory
    Com Gadgetfactory
    risk 0.04cvss —epss 0.17

    Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third…

  • CVE-2010-1955May 19, 2010
    Joomla
    Deluxe Blog Factory
    risk 0.04cvss —epss 0.18

    Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1954May 19, 2010
    Joomlacomponent.inetlanka
    Com Multiroot
    risk 0.04cvss —epss 0.16

    Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third…

  • CVE-2010-1953May 19, 2010
    INetLanka
    Multiple Map
    risk 0.04cvss —epss 0.16

    Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1952May 19, 2010
    Joomla
    BeeHeard
    risk 0.04cvss —epss 0.13

    Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1951May 19, 2010
    60cyclecms Project
    60cyclecms
    risk 0.04cvss —epss 0.07

    Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the DOCUMENT_ROOT parameter to (1) news.php, (2) submitComment.php, and (3) sqlConnect.php.

  • CVE-2010-1950May 19, 2010
    Joomla
    com_jnewspaper
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the date_info parameter to index.php. NOTE: the provenance of this…

  • CVE-2010-1949May 19, 2010
    Joomla
    Online News Paper Manager
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php. NOTE: some of these details are obtained from third party information.

  • CVE-2010-0777May 17, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote attackers to obtain sensitive…

  • CVE-2010-0776May 17, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle chunked transfer encoding during a call to response.sendRedirect, which allows remote attackers to cause a denial of service via…

  • CVE-2010-0775May 17, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a crafted request, related to the nodeagent and…

  • CVE-2010-0774May 17, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    The (1) JAX-RPC WS-Security 1.0 and (2) JAX-WS runtime implementations in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 do not properly handle WebServices PKCS#7 and PKIPath tokens, which allows remote attackers to…

  • CVE-2010-1512May 17, 2010
    Aria
    Aria
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

  • CVE-2010-1511May 17, 2010
    KDE
    Kde
    risk 0.00cvss —epss 0.03

    KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.

  • CVE-2010-1000May 17, 2010
    KDE
    Kde
    risk 0.00cvss —epss 0.04

    Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

  • CVE-2010-0999May 17, 2010
    Free Download Manager
    Free Download Manager
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Free Download Manager (FDM) before 3.0.852 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

  • CVE-2010-0998May 17, 2010
    Free Download Manager
    Free Download Manager
    risk 0.01cvss —epss 0.06

    Multiple stack-based buffer overflows in Free Download Manager (FDM) before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving (1) the folders feature in Site Explorer, (2) the websites feature in Site Explorer, (3) an FTP URI, or (4) a redirect.

  • CVE-2010-1940May 14, 2010
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    Apple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web site to a different web site named in a Location header received from the first site, which allows remote web servers to obtain sensitive information by logging HTTP requests. NOTE: the…

  • CVE-2010-1568May 14, 2010
    Cisco Systems, Inc.
    Ironport Desktop Flag Plugin For Outlook
    risk 0.00cvss —epss 0.01

    The Send Secure functionality in the Cisco IronPort Desktop Flag Plug-in for Outlook before 6.5.0-006 does not properly handle simultaneously composed messages, which might allow remote attackers to obtain cleartext contents of e-mail messages that were intended to be encrypted,…

  • CVE-2010-1567May 14, 2010
    Cisco Systems, Inc.
    Pgw 2200 Softswitch
    risk 0.00cvss —epss 0.02

    The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.8(1)S5 allows remote attackers to cause a denial of service (device crash) via a malformed header, aka Bug ID CSCsz13590.

  • CVE-2010-1565May 14, 2010
    Cisco Systems, Inc.
    Pgw 2200 Softswitch
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of service (TCP socket exhaustion) via unknown vectors, aka Bug ID CSCsk13561.