VYPR

CVEs

345,868 total · page 6106 of 6,918

AllCriticalHighKEV
  • CVE-2010-0806HigKEVMar 10, 2010
    Microsoft
    Internet Explorer
    risk 0.79cvss 8.8epss 0.82

    Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the…

  • CVE-2010-0447Mar 10, 2010
    Microfocus
    Performance Insight
    risk 0.00cvss —epss 0.06

    The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.

  • CVE-2010-0265Mar 10, 2010
    Microsoft
    Windows
    risk 0.05cvss —epss 0.27

    Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability."

  • CVE-2010-0264Mar 10, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.21

    Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry…

  • CVE-2010-0263Mar 10, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.26

    Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Office SharePoint Server 2007 SP1 and SP2 do not…

  • CVE-2010-0262Mar 10, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.21

    Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel…

  • CVE-2010-0261Mar 10, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.23

    Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXSET record is broken up…

  • CVE-2010-0260Mar 10, 2010
    Microsoft
    Office
    risk 0.02cvss —epss 0.23

    Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in…

  • CVE-2010-0258HigMar 10, 2010
    Microsoft
    Office
    risk 0.56cvss 7.8epss 0.61

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly…

  • CVE-2010-0257Mar 10, 2010
    Microsoft
    Office
    risk 0.01cvss —epss 0.19

    Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel Record Memory Corruption Vulnerability."

  • CVE-2009-4697Mar 10, 2010
    RadNICS
    Gold
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter in a ulist action and the (2) fid parameter in a view_forum action.

  • CVE-2009-4696Mar 10, 2010
    RadNICS
    Gold
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a view_forum action.

  • CVE-2009-4695Mar 10, 2010
    Radscripts
    Radlance
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a view_forum action.

  • CVE-2009-4694Mar 10, 2010
    Radscripts
    Radlance
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the fid parameter in a view_forum action. NOTE: the provenance of this information is unknown; the details are obtained…

  • CVE-2009-4693Mar 10, 2010
    Grafxsoftware
    Minicwb
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to (1) en.inc.php, (2) hu.inc.php, (3) no.inc.php, (4) ro.inc.php, and (5) ru.inc.php in language/.

  • CVE-2009-4692Mar 10, 2010
    Radscripts
    Radlance
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the pr parameter in a ulist action.

  • CVE-2009-4691Mar 10, 2010
    Resalecode
    Classified Linktrader Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in addlink.php in Classified Linktrader Script allows remote attackers to execute arbitrary SQL commands via the slctCategories parameter.

  • CVE-2009-4690Mar 10, 2010
    Yourfreeworld
    Programs Rating Script
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rate.php and (2) postcomments.php.

  • CVE-2009-4689Mar 10, 2010
    Resalecode
    PHP Shopping Cart Selling Website Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

  • CVE-2009-4688Mar 10, 2010
    Resalecode
    PHP Shopping Cart Selling Website Script
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the (1) txtkeywords and (2) cid parameters.

  • CVE-2009-4687Mar 10, 2010
    Hypersilence
    Silentum Guestbook
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in silentum_guestbook.php in Silentum Guestbook 2.0.2 allows remote attackers to execute arbitrary SQL commands via the messageid parameter.

  • CVE-2009-4686Mar 10, 2010
    Phplemon
    Adquick
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in account.php in phplemon AdQuick 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the red_url parameter.

  • CVE-2009-4685Mar 10, 2010
    Phpscriptsnow
    Astrology
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in celebrities.php in PHP Scripts Now Astrology allows remote attackers to inject arbitrary web script or HTML via the day parameter.

  • CVE-2009-4684Mar 10, 2010
    Edgephp
    Ezodiak
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script or HTML via the sign parameter.

  • CVE-2009-4683Mar 10, 2010
    Scriptsez
    Good\/bad Vote
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. NOTE: some of these details are obtained from third party information.

  • CVE-2009-4682Mar 10, 2010
    Scriptsez
    Good\/bad Vote
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action.

  • CVE-2009-4681Mar 10, 2010
    Phpdirectorysource
    Phpdirectorysource
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbitrary web script or HTML via the st parameter.

  • CVE-2009-4680Mar 10, 2010
    Phpdirectorysource
    Phpdirectorysource
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL commands via the st parameter.

  • CVE-2010-0958Mar 10, 2010
    Tribisur
    Tribisur
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via directory traversal sequences in the theme parameter. NOTE: some of these…

  • CVE-2010-0957Mar 10, 2010
    Saskia
    Shopsystem
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter.

  • CVE-2010-0956Mar 10, 2010
    Opencart
    Opencart
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.

  • CVE-2010-0955Mar 10, 2010
    Bild Flirt Community
    Bild Flirt Community
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-0954Mar 10, 2010
    Preprojects
    Pre E Learning Portal
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in search_result.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the course_ID parameter.

  • CVE-2010-0953Mar 10, 2010
    Coinsoft Technologies
    Phpcoin
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the mod parameter.

  • CVE-2010-0952Mar 10, 2010
    Adaptcms
    Onecms
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an elite action.

  • CVE-2010-0951Mar 10, 2010
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via the kontent_id parameter.

  • CVE-2010-0950Mar 10, 2010
    Natychmiast CMS
    Natychmiast CMS
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Natychmiast CMS allow remote attackers to execute arbitrary SQL commands via the id_str parameter to (1) index.php and (2) a_index.php.

  • CVE-2010-0949Mar 10, 2010
    Natychmiast CMS
    Natychmiast CMS
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Natychmiast CMS allow remote attackers to inject arbitrary web script or HTML via the id_str parameter to (1) index.php and (2) a_index.php.

  • CVE-2010-0948Mar 10, 2010
    Bigforum
    Bigforum
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in profil.php in Bigforum 4.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-0947Mar 10, 2010
    Bbsmax
    Bbsmax
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in post.aspx in Max Network Technology BBSMAX 3.0, 4.1, and 4.2 allows remote attackers to inject arbitrary web script or HTML via the action parameter.

  • CVE-2010-0926Mar 10, 2010
    Samba (software)
    Samba
    risk 0.05cvss —epss 0.31

    The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in…

  • CVE-2010-0791Mar 10, 2010
    Ncpfs
    Ncpfs
    risk 0.00cvss —epss 0.00

    The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after the…

  • CVE-2010-0790Mar 10, 2010
    Ncpfs
    Ncpfs
    risk 0.00cvss —epss 0.00

    sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name.

  • CVE-2010-0728Mar 10, 2010
    Samba (software)
    Samba
    risk 0.00cvss —epss 0.04

    smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.

  • CVE-2010-0418Mar 10, 2010
    Chumby
    Chumby One
    risk 0.00cvss —epss 0.03

    The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a request.

  • CVE-2010-0103Mar 10, 2010
    Energizer
    Duo USB
    risk 0.05cvss —epss 0.27

    UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs,…

  • CVE-2010-0946Mar 8, 2010
    Keep It Simple Stupid (KISS) Software
    Advertiser
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Keep It Simple Stupid (KISS) Software Advertiser (com_ksadvertiser) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showcats action to index.php.

  • CVE-2010-0945Mar 8, 2010
    Joomla
    HotBrackets Tournament Brackets
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

  • CVE-2010-0944Mar 8, 2010
    Joomla
    JCollection
    risk 0.04cvss —epss 0.14

    Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-0943Mar 8, 2010
    JA
    JA Showcase
    risk 0.04cvss —epss 0.16

    Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a jashowcase action to index.php.