VYPR

CVEs

345,196 total · page 6173 of 6,904

AllCriticalHighKEV
  • CVE-2009-1657May 18, 2009
    B2evolution
    B2evolution
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6811May 18, 2009
    WordPress
    e-Commerce Plugin
    risk 0.04cvss —epss 0.07

    Unrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin 3.4 and earlier for Wordpress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in…

  • CVE-2008-6810May 18, 2009
    Venalsur
    Booking Centre Booking System for Hotels Group
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in admin/checklogin.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allow remote attackers to execute arbitrary SQL commands via the (1) myusername (username) and (2) password parameters. NOTE: some of these details are…

  • CVE-2008-6809May 18, 2009
    Venalsur
    Booking Centre Booking System for Hotels Group
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in hotel_habitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allows remote attackers to execute arbitrary SQL commands via the HotelID parameter.

  • CVE-2009-1656May 16, 2009
    Xerox
    Workcentre
    risk 0.00cvss —epss 0.04

    Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."

  • CVE-2009-1655May 16, 2009
    Easy Scripts
    Answer And Question Script
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the (1) user name (userid parameter) and (2) password.

  • CVE-2009-1654May 16, 2009
    Easy Scripts
    Answer And Question Script
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote attackers to inject arbitrary web script or HTML via the questionid parameter.

  • CVE-2009-1653May 16, 2009
    Tinybutstrong
    Tinybutstrong
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in examples/tbs_us_examples_0view.php in TinyButStrong 3.4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the script parameter.

  • CVE-2009-1652May 16, 2009
    Business Community Script
    Business Community Script
    risk 0.03cvss —epss 0.06

    admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request.

  • CVE-2009-1651May 16, 2009
    2daybiz
    Business Community Script
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter.

  • CVE-2009-1650May 16, 2009
    Tenfourzero
    Shutter
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID, and (3) photoID parameters to index.html.

  • CVE-2009-1649May 16, 2009
    BeLive
    beLive
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in arch.php in beLive 0.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the arch parameter.

  • CVE-2009-1647May 15, 2009
    Ultrafunk
    Popcorn
    risk 0.03cvss —epss 0.03

    Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of service (application crash) via a long string in a +OK response. NOTE: some of these details are obtained from third party information.

  • CVE-2009-1646May 15, 2009
    Mini Stream
    Rm Downloader
    risk 0.03cvss —epss 0.05

    Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file.

  • CVE-2009-1645May 15, 2009
    Mini Stream
    Rm Mp3 Converter
    risk 0.04cvss —epss 0.07

    Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.

  • CVE-2009-1644May 15, 2009
    Sorinara
    Streaming Audio Player
    risk 0.03cvss —epss 0.06

    Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via a crafted .pla file.

  • CVE-2009-1643May 15, 2009
    Sorinara
    Soritong Mp3 Player
    risk 0.03cvss —epss 0.06

    Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a crafted .m3u file.

  • CVE-2009-1642May 15, 2009
    Mini Stream
    Asx To Mp3 Converter
    risk 0.04cvss —epss 0.07

    Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. NOTE: the latter was also…

  • CVE-2009-1641May 15, 2009
    Mini Stream
    Ripper
    risk 0.05cvss —epss 0.31

    Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.

  • CVE-2009-1640May 15, 2009
    Nucleus Data Recovery
    Kernel Recovery for Macintosh
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file.

  • CVE-2009-1639May 15, 2009
    Nucleus Data Recovery
    Kernel Recovery for Novell
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file.

  • CVE-2009-1638May 15, 2009
    Techno Dreams
    Job Career Package
    risk 0.03cvss —epss 0.03

    Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login.

  • CVE-2009-1637May 15, 2009
    Simplecustomer
    Simple Customer
    risk 0.03cvss —epss 0.02

    profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters.

  • CVE-2009-0688May 15, 2009
    Carnegie Mellon University
    Cyrus Sasl
    risk 0.01cvss —epss 0.08

    Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.

  • CVE-2009-1632May 14, 2009
    Ipsec Tools
    Ipsec Tools
    risk 0.00cvss —epss 0.02

    Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in…

  • CVE-2009-1631May 14, 2009
    GNOME Foundation
    Evolution
    risk 0.00cvss —epss 0.00

    The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.

  • CVE-2009-1630May 14, 2009
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files,…

  • CVE-2009-1629May 14, 2009
    Antony Lesuisse
    Ajaxterm
    risk 0.00cvss —epss 0.02

    ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force…

  • CVE-2009-1581May 14, 2009
    SquirrelMail
    Squirrelmail
    risk 0.00cvss —epss 0.02

    functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in HTML e-mail messages, which allows remote attackers to spoof the user interface, and conduct cross-site scripting (XSS) and phishing…

  • CVE-2009-1580May 14, 2009
    SquirrelMail
    Squirrelmail
    risk 0.00cvss —epss 0.02

    Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.

  • CVE-2009-1579May 14, 2009
    SquirrelMail
    Squirrelmail
    risk 0.00cvss —epss 0.03

    The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program.

  • CVE-2009-1578May 14, 2009
    SquirrelMail
    Squirrelmail
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php;…

  • CVE-2009-1466MedMay 14, 2009
    Klinzmann
    Application Access Server
    risk 0.36cvss 5.5epss 0.00

    Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file.

  • CVE-2009-1465May 14, 2009
    Klinzmann
    Application Access Server
    risk 0.00cvss —epss 0.01

    Application Access Server (A-A-S) 2.0.48 has "wildbat" as its default password for the admin account, which makes it easier for remote attackers to obtain access.

  • CVE-2009-1464May 14, 2009
    Klinzmann
    Application Access Server
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary programs via a command job, (2) stop services via a…

  • CVE-2009-0714May 14, 2009
    Microfocus
    Data Protector Express
    risk 0.07cvss —epss 0.52

    Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application…

  • CVE-2009-0945May 13, 2009
    Google
    Chrome
    risk 0.01cvss —epss 0.09

    Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote…

  • CVE-2009-0944May 13, 2009
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.04

    The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a file that…

  • CVE-2009-0943May 13, 2009
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.04

    Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files.

  • CVE-2009-0942May 13, 2009
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.04

    Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files.

  • CVE-2009-0162May 13, 2009
    Apple Inc.
    Safari
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL.

  • CVE-2009-0161May 13, 2009
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate.

  • CVE-2009-0160May 13, 2009
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.04

    QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image that triggers memory corruption.

  • CVE-2009-0158May 13, 2009
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long hostname for a telnet server.

  • CVE-2009-0157May 13, 2009
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a denial of service (application crash) via long HTTP headers.

  • CVE-2009-0156May 13, 2009
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service (persistent Finder crash) via a crafted Mach-O executable that triggers an out-of-bounds memory read.

  • CVE-2009-0155May 13, 2009
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.06

    Integer underflow in CoreGraphics in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file that…

  • CVE-2009-0154May 13, 2009
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format (CFF) font.

  • CVE-2009-0153May 13, 2009
    Unicode
    Icu
    risk 0.00cvss —epss 0.04

    International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle…

  • CVE-2009-0152HigMay 13, 2009
    Apple Inc.
    Mac OS X
    risk 0.49cvss 7.5epss 0.02

    iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network.