VYPR

CVEs

345,196 total · page 6170 of 6,904

AllCriticalHighKEV
  • CVE-2009-1831May 29, 2009
    Nullsoft
    Winamp
    risk 0.06cvss —epss 0.36

    The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.

  • CVE-2009-1830May 29, 2009
    Soulseek
    Soulseek
    risk 0.04cvss —epss 0.09

    Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long search query.

  • CVE-2009-1829May 29, 2009
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote attackers to cause a denial of service (crash) via crafted PCNFSD packets.

  • CVE-2009-1828May 29, 2009
    Mozilla Corporation
    Firefox
    risk 0.04cvss —epss 0.09

    Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop, application hang, and memory consumption) via a KEYGEN element in conjunction with (1) a META element specifying automatic page refresh or (2) a JavaScript onLoad event handler for a BODY…

  • CVE-2009-1827May 29, 2009
    Mozilla Corporation
    Firefox
    risk 0.03cvss —epss 0.04

    The SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service (application hang) via a large value in the r (aka Radius) attribute of a circle element, related to an "unclamped loop."

  • CVE-2009-1826May 29, 2009
    Collector
    Mygesuad
    risk 0.03cvss —epss 0.02

    modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action.

  • CVE-2009-1825May 29, 2009
    Collector
    Mycolex
    risk 0.03cvss —epss 0.02

    modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action.

  • CVE-2009-1824May 29, 2009
    Arcabit
    Arcavir 2009 Antivirus Protection
    risk 0.03cvss —epss 0.01

    The ps_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier, ArcaVir 2009 Internet Security 9.4.3202.9 and earlier, ArcaVir 2009 System Protection 9.4.3203.9 and earlier, and ArcaBit 2009 Home Protection 9.4.3204.9 and earlier, allows local…

  • CVE-2009-1792May 29, 2009
    Stonetrip
    S3dplayer Standalone
    risk 0.00cvss —epss 0.04

    The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument).

  • CVE-2009-1537HigKEVMay 29, 2009
    Microsoft
    Windows 2000
    risk 0.73cvss 8.8epss 0.51

    Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime…

  • CVE-2009-1823May 29, 2009
    Drupal
    Print
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.7 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML by modifying a document head, before the…

  • CVE-2009-1822May 29, 2009
    InterJoomla
    ArtForms
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) imgcaptcha.php or (2) mp3captcha.php in…

  • CVE-2009-1821May 29, 2009
    Dmxready
    Registration Manager
    risk 0.03cvss —epss 0.03

    DMXReady Registration Manager 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for databases/webblogmanager.mdb.

  • CVE-2009-1820May 29, 2009
    2daybiz
    Custom T Shirt Design Script
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to inject arbitrary web script or HTML via the id parameter.

  • CVE-2009-1819May 29, 2009
    2daybiz
    Custom T Shirt Design Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2009-1818May 29, 2009
    Maxcms
    Maxcms
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in admin/admin_manager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an m_username cookie in an add action.

  • CVE-2009-1817May 29, 2009
    DigiMode
    Maya
    risk 0.03cvss —epss 0.06

    Multiple buffer overflows in DigiMode Maya 1.0.2 allow remote attackers to execute arbitrary code via a long string in a malformed (1) .m3u or (2) .m3l playlist file.

  • CVE-2009-1816May 29, 2009
    Mygamescript
    My Game Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the username field). NOTE: some of these details are obtained from third party information.

  • CVE-2009-1815May 29, 2009
    Sonicspot
    Audioactive Player
    risk 0.03cvss —epss 0.06

    Stack-based buffer overflow in Sonic Spot Audioactive Player 1.93b allows remote attackers to execute arbitrary code via a long string in a playlist file, as demonstrated by a long .mp3 URL in a .m3u file.

  • CVE-2009-1814May 29, 2009
    Jevontech
    Phpenpals
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the profile.php vector is already covered by CVE-2006-0074.

  • CVE-2009-1813May 29, 2009
    Submitterscript
    Submitterscript
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via (1) the uNev parameter (aka the username field) or (2) the uJelszo parameter (aka the Password field).

  • CVE-2009-1812May 29, 2009
    Collector
    Mygesuad
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID…

  • CVE-2009-1811May 29, 2009
    Collector
    Mygesuad
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitrary web script or HTML via (1) the Page parameter in a List action to modules/ereignis.php, (2) the Kontext parameter in a Search action to…

  • CVE-2009-1810May 29, 2009
    Collector
    Mycolex
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter…

  • CVE-2009-1809May 29, 2009
    Collector
    Mycolex
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the year parameter to modules/kalender.php, (2) the Page parameter in a List action to modules/ereignis.php, (3) the Kontext parameter in a…

  • CVE-2009-1808May 28, 2009
    Microsoft
    Windows Xp
    risk 0.03cvss —epss 0.03

    Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI_SETDESKWALLPAPER SystemParametersInfo call with an improperly terminated pvParam argument, followed by an SPI_GETDESKWALLPAPER SystemParametersInfo call.

  • CVE-2009-1807May 28, 2009
    Baofeng
    Storm
    risk 0.04cvss —epss 0.08

    Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009.

  • CVE-2009-1806May 28, 2009
    IBM
    Hardware Management Console
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server (VIOS)…

  • CVE-2009-1633May 28, 2009
    Linux
    Kernel
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment…

  • CVE-2009-1384May 28, 2009
    Krb5
    Krb5
    risk 0.00cvss —epss 0.03

    pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

  • CVE-2009-1195May 28, 2009
    Apache
    HTTP Server
    risk 0.00cvss —epss 0.02

    The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a…

  • CVE-2009-1804May 28, 2009
    Videoscript
    Youtube Video Script
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

  • CVE-2009-1803May 28, 2009
    Freepbx
    Freepbx
    risk 0.00cvss —epss 0.01

    FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error messages for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

  • CVE-2009-1802May 28, 2009
    Freepbx
    Freepbx
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to hijack the authentication of admins for requests that create a new admin account or have unspecified other impact.

  • CVE-2009-1801May 28, 2009
    Freepbx
    Freepbx
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to inject arbitrary web script or HTML via the (1) display parameter to reports.php, the (2) order and (3) extdisplay parameters…

  • CVE-2009-1800May 28, 2009
    Chinagames
    Igame
    risk 0.04cvss —epss 0.11

    Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames iGame 2009, allows remote attackers to execute arbitrary code via a long argument to the CreateChinagames method, as exploited in the wild in April and May…

  • CVE-2009-1799May 28, 2009
    Sebastian Thiele
    St Gallery
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1 alpha, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) gallery_category or (2) gallery_show parameter…

  • CVE-2008-6816May 28, 2009
    Eaton
    Network Shutdown Module
    risk 0.00cvss —epss 0.04

    Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.

  • CVE-2008-6815May 28, 2009
    Easy Script
    Myktools
    risk 0.03cvss —epss 0.03

    mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by making a direct request, and then sending an unspecified request to the download page for the backup.

  • CVE-2008-6814May 28, 2009
    Mambo (software)
    Simpleboard
    risk 0.03cvss —epss 0.03

    Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earlier for Mambo allows remote attackers to execute arbitrary code by uploading a file with an executable extension and an image/jpeg content type, then accessing…

  • CVE-2009-1477May 27, 2009
    Aten
    Kh1516i IP Kvm Switch
    risk 0.00cvss —epss 0.02

    The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, and the PN9108 power-control unit have a hardcoded SSL private key, which makes it easier for remote attackers to decrypt https sessions by…

  • CVE-2009-1474May 27, 2009
    Aten
    Kh1516i IP Kvm Switch
    risk 0.00cvss —epss 0.02

    The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not (1) encrypt mouse events, which makes it easier for man-in-the-middle attackers to perform mouse operations on machines connected to the switch by injecting network…

  • CVE-2009-1473May 27, 2009
    Aten
    Kh1516i IP Kvm Switch
    risk 0.00cvss —epss 0.03

    The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not properly use RSA cryptography for a symmetric session-key negotiation, which makes it easier for remote attackers to…

  • CVE-2009-1472May 27, 2009
    Aten
    Kh1516i IP Kvm Switch
    risk 0.00cvss —epss 0.01

    The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key, which makes it easier for man-in-the-middle attackers to (1) execute arbitrary Java code, or (2) gain access to…

  • CVE-2009-0588May 27, 2009
    Red Hat
    Certificate System
    risk 0.00cvss —epss 0.01

    agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.

  • CVE-2009-1796May 26, 2009
    Sun Corporation
    Java System Portal Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to an error page.

  • CVE-2008-3870May 26, 2009
    Sun Corporation
    Solaris
    risk 0.01cvss —epss 0.08

    Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation.

  • CVE-2008-3869May 26, 2009
    Sun Corporation
    Solaris
    risk 0.01cvss —epss 0.08

    Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters.

  • CVE-2009-1791May 26, 2009
    Nullsoft
    Winamp
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an…

  • CVE-2009-1790May 26, 2009
    Cgi Rescue
    Rescue
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees before 2.11 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.