VYPR

CVEs

345,196 total · page 6164 of 6,904

AllCriticalHighKEV
  • CVE-2009-2110Jun 18, 2009
    DB Top Sites
    DB Top Sites
    risk 0.04cvss —epss 0.08

    Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the u parameter to (1) full.php, (2) index.php, and (3) contact.php.

  • CVE-2009-2109Jun 18, 2009
    Fretsweb Project
    Fretsweb
    risk 0.04cvss —epss 0.09

    Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) language parameter to charts.php and the (2) fretsweb_language cookie parameter to unspecified vectors, possibly related to…

  • CVE-2009-2108Jun 18, 2009
    Git
    Git
    risk 0.03cvss —epss 0.06

    git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments.

  • CVE-2009-1935Jun 18, 2009
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    Integer overflow in the pipe_build_write_buffer function (sys/kern/sys_pipe.c) in the direct write optimization feature in the pipe implementation in FreeBSD 7.1 through 7.2 and 6.3 through 6.4 allows local users to bypass virtual-to-physical address lookups and read sensitive…

  • CVE-2009-2107Jun 17, 2009
    Webmedia Explorer
    Webmedia Explorer
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the (1) search or (2) tag parameters; (3) arbitrary invalid…

  • CVE-2009-2106Jun 17, 2009
    TYPO3
    civserv
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Virtual Civil Services (civserv) extension 4.3.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-2105Jun 17, 2009
    TYPO3
    t3references
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the References database (t3references) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-2104Jun 17, 2009
    TYPO3
    ve_guestbook
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension 2.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-2103Jun 17, 2009
    TYPO3
    Frontend MP3 Player
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Frontend MP3 Player (fe_mp3player) 0.2.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-2102Jun 17, 2009
    Joomla
    Jumi
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions for Joomla allows remote attackers to execute arbitrary SQL commands via the fileid parameter to index.php.

  • CVE-2009-2101Jun 17, 2009
    Castro Xl
    Torrentvolve
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote attackers to delete arbitrary files via a .. (dot dot) in the deleteTorrent parameter.

  • CVE-2009-2100Jun 17, 2009
    Joomlapraise
    Com Projectfork
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in the JoomlaPraise Projectfork (com_projectfork) component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php.

  • CVE-2009-2099Jun 17, 2009
    Joomla
    iJoomla RSS Feeder
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the iJoomla RSS Feeder (com_ijoomla_rss) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php.

  • CVE-2009-2098Jun 17, 2009
    Phportal
    Phportal
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2009-2097Jun 17, 2009
    Zokisoft
    Zoki Catalog
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in system/application/controllers/catalog.php in Zoki Soft Zoki Catalog (aka Smart Catalog) allows remote attackers to execute arbitrary SQL commands via the search_text parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2009-2096Jun 17, 2009
    PhpCollegeExchange
    phpCollegeExchange
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote attackers to execute arbitrary SQL commands via the itemnr parameter.

  • CVE-2009-2095Jun 17, 2009
    Mundi Mail
    Mundi Mail
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in template/simpledefault/admin/_masterlayout.php in Mundi Mail 0.8.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allow_url_fopen is disabled,…

  • CVE-2009-2084Jun 16, 2009
    SLURM
    SLURM
    risk 0.00cvss —epss 0.00

    Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain…

  • CVE-2009-1761Jun 16, 2009
    Ca
    ARCserve Backup
    risk 0.00cvss —epss 0.02

    The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers…

  • CVE-2009-1719Jun 16, 2009
    Apple Inc.
    Java 1.5
    risk 0.00cvss —epss 0.05

    The Aqua Look and Feel for Java implementation in Java 1.5 on Mac OS X 10.5 allows remote attackers to execute arbitrary code via a call to the undocumented apple.laf.CColourUIResource constructor with a crafted value in the first argument, which is dereferenced as a pointer.

  • CVE-2009-1391Jun 16, 2009
    Compress::Raw::Zlib
    Compress::Raw::Zlib
    risk 0.04cvss —epss 0.07

    Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream…

  • CVE-2009-1389Jun 16, 2009
    Linux
    Kernel
    risk 0.00cvss —epss 0.05

    Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.

  • CVE-2009-2083Jun 16, 2009
    Drupal
    Taxonomy Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the term data detail page in Taxonomy manager 5.x before 5.x-1.2, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary…

  • CVE-2009-2082Jun 16, 2009
    Creative Web Solutions
    Multi Level CMS
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2009-2011Jun 16, 2009
    Dxstudio
    Dx Studio Player
    risk 0.06cvss —epss 0.40

    Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a…

  • CVE-2009-1390Jun 16, 2009
    Mutt
    Mutt
    risk 0.00cvss —epss 0.02

    Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a…

  • CVE-2008-5515Jun 16, 2009
    Apache
    Tomcat
    risk 0.00cvss —epss 0.19

    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access…

  • CVE-2009-2081Jun 16, 2009
    Phpwebthings
    Phpwebthings
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter.

  • CVE-2009-2080Jun 16, 2009
    Mrcgiguy
    The Ticket System
    risk 0.03cvss —epss 0.03

    admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's password via the id parameter in an editop action.

  • CVE-2009-2079Jun 16, 2009
    Drupal
    Taxonomy Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add…

  • CVE-2009-2078Jun 16, 2009
    Drupal
    Booktree
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) node title and (2) node body in a tree root page.

  • CVE-2009-2077Jun 16, 2009
    Angrydonuts
    Views
    risk 0.00cvss —epss 0.01

    Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and (1) read unpublished content from anonymous users when a view is already configured to display the content, and (2) read private content in generated queries.

  • CVE-2009-2076Jun 16, 2009
    Drupal
    Views
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view name parameter in the define…

  • CVE-2009-2075Jun 16, 2009
    Drupal
    Nodequeue
    risk 0.00cvss —epss 0.01

    Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict access when displaying node titles, which has unknown impact and attack vectors.

  • CVE-2009-2074Jun 16, 2009
    Drupal
    Nodequeue
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via vocabulary names.

  • CVE-2009-2073Jun 15, 2009
    Linksys
    WRT160N
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to hijack the authentication of other users for unspecified requests via unknown vectors, as demonstrated using administrator privileges and…

  • CVE-2009-2072Jun 15, 2009
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.00

    Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request sent…

  • CVE-2009-2071Jun 15, 2009
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site…

  • CVE-2009-2070Jun 15, 2009
    Opera
    Opera
    risk 0.00cvss —epss 0.01

    Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then…

  • CVE-2009-2069Jun 15, 2009
    Microsoft
    Internet Explorer
    risk 0.00cvss —epss 0.02

    Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site…

  • CVE-2009-2068Jun 15, 2009
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script…

  • CVE-2009-2067Jun 15, 2009
    Opera
    Opera
    risk 0.00cvss —epss 0.01

    Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an…

  • CVE-2009-2066Jun 15, 2009
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file…

  • CVE-2009-2065Jun 15, 2009
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an…

  • CVE-2009-2064Jun 15, 2009
    Microsoft
    Internet Explorer
    risk 0.00cvss —epss 0.04

    Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to…

  • CVE-2009-2063Jun 15, 2009
    Opera
    Opera Browser
    risk 0.00cvss —epss 0.01

    Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an…

  • CVE-2009-2062Jun 15, 2009
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary…

  • CVE-2009-2061Jun 15, 2009
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an…

  • CVE-2009-2060Jun 15, 2009
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    src/net/http/http_transaction_winhttp.cc in Google Chrome before 1.0.154.53 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web…

  • CVE-2009-2059Jun 15, 2009
    Opera
    Opera
    risk 0.00cvss —epss 0.01

    Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka…