VYPR

CVEs

344,989 total · page 6227 of 6,900

AllCriticalHighKEV
  • CVE-2008-5396Dec 9, 2008
    Zaptel
    Zaptel
    risk 0.00cvss —epss 0.00

    Array index error in the (1) torisa.c and (2) dahdi/tor2.c drivers in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to missing validation of the sync field…

  • CVE-2008-5395Dec 9, 2008
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The parisc_show_stack function in arch/parisc/kernel/traps.c in the Linux kernel before 2.6.28-rc7 on PA-RISC allows local users to cause a denial of service (system crash) via vectors associated with an attempt to unwind a stack that contains userspace addresses.

  • CVE-2008-5394Dec 9, 2008
    Debian
    Shadow
    risk 0.03cvss —epss 0.01

    /bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.

  • CVE-2008-5393Dec 9, 2008
    Ubuntu Privacy Remix
    UPR-Kernel
    risk 0.00cvss —epss 0.02

    UPR-Kernel in Ubuntu Privacy Remix (UPR) before 8.04_r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by (1) reading from or (2) writing to these arrays.

  • CVE-2008-5387Dec 9, 2008
    IBM
    Aix
    risk 0.00cvss —epss 0.00

    Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain privileges via unspecified vectors.

  • CVE-2008-5386Dec 9, 2008
    IBM
    Aix
    risk 0.00cvss —epss 0.00

    Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain privileges via unspecified vectors.

  • CVE-2008-5385Dec 9, 2008
    IBM
    Aix
    risk 0.00cvss —epss 0.00

    enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local users to delete arbitrary files via unspecified vectors.

  • CVE-2008-5384Dec 9, 2008
    IBM
    Aix
    risk 0.00cvss —epss 0.00

    crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor.

  • CVE-2008-5383Dec 9, 2008
    Ni
    Electronics Workbench
    risk 0.03cvss —epss 0.05

    Stack-based buffer overflow in National Instruments Electronics Workbench allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .ewb file.

  • CVE-2008-5382Dec 9, 2008
    I-O DATA
    HDL-F160
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to (1) change a configuration or (2) delete files as an authenticated user via unknown vectors. NOTE: the provenance of…

  • CVE-2008-5381Dec 9, 2008
    Ffdshow Tryout
    Ffdshow
    risk 0.00cvss —epss 0.05

    Buffer overflow in the URL processing in ffdshow (aka ffdshow-tryout) before SVN revision 2347 allows remote attackers to execute arbitrary code via a long URL.

  • CVE-2008-5277Dec 9, 2008
    PowerDNS
    Powerdns
    risk 0.00cvss —epss 0.03

    PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via a CH HINFO query.

  • CVE-2008-5079Dec 9, 2008
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc…

  • CVE-2008-4917Dec 9, 2008
    VMware
    Workstation
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and earlier 2.x versions; VMware Server 1.0.9 and earlier; VMware ESXi 3.5; and VMware ESX 3.0.2 through 3.5 allows guest OS users to…

  • CVE-2008-4391Dec 9, 2008
    Cisco Systems, Inc.
    Linksys WVC54GC
    risk 0.00cvss —epss 0.06

    Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments.

  • CVE-2008-4390HigDec 9, 2008
    Linksys
    WVC54GC
    risk 0.49cvss 7.5epss 0.03

    The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network.

  • CVE-2008-4310Dec 9, 2008
    Ruby Lang
    Ruby
    risk 0.00cvss —epss 0.14

    httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE: this issue exists because of an incomplete fix for CVE-2008-3656.

  • CVE-2008-5380Dec 8, 2008
    Gpsdrive
    Gpsdrive
    risk 0.00cvss —epss 0.00

    gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to overwrite arbitrary files via a symlink attack on an (a) /tmp/geo#####, a (b) /tmp/geocaching.loc, a (c) /tmp/geo#####.*, or a (d) /tmp/geo.* temporary file, related to the (1) geo-code and (2) geo-nearest scripts,…

  • CVE-2008-5379Dec 8, 2008
    Oliver Gorwits
    Netdisco Mibs Installer
    risk 0.00cvss —epss 0.00

    netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the (1) netdisco-mibs-install and (2) netdisco-mibs-download scripts.

  • CVE-2008-5378Dec 8, 2008
    Lehrstuhl Fur Mikrobiologie
    Arb
    risk 0.00cvss —epss 0.00

    arb-kill in arb 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arb_pids_*_* temporary file.

  • CVE-2008-5377Dec 8, 2008
    Apple Inc.
    Cups
    risk 0.03cvss —epss 0.01

    pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pstopdf.log temporary file, a different vulnerability than CVE-2001-1333.

  • CVE-2008-5376Dec 8, 2008
    Crip
    Crip
    risk 0.00cvss —epss 0.00

    editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.tag.tmp temporary file.

  • CVE-2008-5375Dec 8, 2008
    Cmus
    Cmus
    risk 0.00cvss —epss 0.00

    cmus-status-display in cmus 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cmus-status temporary file.

  • CVE-2008-5374Dec 8, 2008
    Matthias Klose
    Bash Doc
    risk 0.00cvss —epss 0.00

    bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? temporary file, related to the (1) aliasconv.sh, (2) aliasconv.bash, and (3) cshtobash scripts.

  • CVE-2008-5373Dec 8, 2008
    Bacula
    Bacula
    risk 0.00cvss —epss 0.00

    mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx.##### temporary file, probably a related issue to CVE-2005-2995.

  • CVE-2008-5372Dec 8, 2008
    sdm-terminal
    sdm-terminal
    risk 0.00cvss —epss 0.00

    sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file.

  • CVE-2008-5371Dec 8, 2008
    Marc Gloor
    Screenie
    risk 0.00cvss —epss 0.00

    screenie in screenie 1.30.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.screenie.##### temporary file.

  • CVE-2008-5370Dec 8, 2008
    Pvpgn
    Pvpgn
    risk 0.00cvss —epss 0.00

    pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pvpgn-support-1.0.tar.gz temporary file.

  • CVE-2008-5369Dec 8, 2008
    noip2
    noip2
    risk 0.00cvss —epss 0.00

    noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file.

  • CVE-2008-5368Dec 8, 2008
    Lukas Ruf
    Muttprint
    risk 0.00cvss —epss 0.00

    muttprint in muttprint 0.72d allows local users to overwrite arbitrary files via a symlink attack on the /tmp/muttprint.log temporary file.

  • CVE-2008-5367Dec 8, 2008
    Marco D\'itri
    Ppp Udeb
    risk 0.00cvss —epss 0.00

    ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file.

  • CVE-2008-5366Dec 8, 2008
    Marco D\'itri
    Ppp
    risk 0.00cvss —epss 0.00

    The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/probe-finished or (2) /tmp/ppp-errors temporary file.

  • CVE-2008-5365Dec 8, 2008
    Activewebsoftwares
    Activevotes
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter.

  • CVE-2008-5364Dec 8, 2008
    NOS Microsystems
    getPlus Download Manager
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the getPlus ActiveX control in gp.ocx 1.2.2.50 in NOS Microsystems getPlus Download Manager, as used for the Adobe Reader 8.1 installation process and other downloads, allows remote attackers to execute arbitrary code via unspecified vectors, a…

  • CVE-2008-5363Dec 8, 2008
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of…

  • CVE-2008-5362Dec 8, 2008
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from…

  • CVE-2008-5361Dec 8, 2008
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing (1) DefineConstantPool, (2) ActionJump, (3) ActionPush, (4) ActionTry, and unspecified…

  • CVE-2008-5360Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write…

  • CVE-2008-5359Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.11

    Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a…

  • CVE-2008-5358Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.

  • CVE-2008-5357Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.10

    Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted…

  • CVE-2008-5356Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.09

    Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.

  • CVE-2008-5355Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.08

    The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to…

  • CVE-2008-5354Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary…

  • CVE-2008-5353Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.10cvss —epss 0.85

    The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run…

  • CVE-2008-5352Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via…

  • CVE-2008-5351Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms…

  • CVE-2008-5350Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user's directory…

  • CVE-2008-5349Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key.

  • CVE-2008-5348Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS…