VYPR

CVEs

344,978 total · page 6269 of 6,900

AllCriticalHighKEV
  • CVE-2008-3206Jul 18, 2008
    Yuhhu
    Pubs Black Cat
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in browse.groups.php in Yuhhu Pubs Black Cat allows remote attackers to execute arbitrary SQL commands via the category parameter.

  • CVE-2008-3207Jul 18, 2008
    Pragyan CMS Project
    CMS
    risk 0.03cvss —epss 0.06

    PHP remote file inclusion vulnerability in cms/modules/form.lib.php in Pragyan CMS 2.6.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the (1) sourceFolder or (2) moduleFolder parameter.

  • CVE-2008-3208Jul 18, 2008
    Simple DNS Plus
    Simple DNS Plus
    risk 0.03cvss —epss 0.03

    Simple DNS Plus 4.1, 5.0, and possibly other versions before 5.1.101 allows remote attackers to cause a denial of service via multiple DNS reply packets.

  • CVE-2008-3209Jul 18, 2008
    Black Ice
    Black Ice Document Imaging SDK
    risk 0.03cvss —epss 0.06

    Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remote attackers to execute arbitrary code via a long string argument to the GetNumberOfImagesInGifFile method in the BIImgFrm Control ActiveX control in…

  • CVE-2008-3210Jul 18, 2008
    Resiprocate
    Resiprocate
    risk 0.03cvss —epss 0.03

    rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (daemon crash) via a SIP (1) INVITE or (2) OPTIONS message with a long domain name in a request URI, which triggers an assert error.

  • CVE-2008-3211Jul 18, 2008
    Scripteen
    Free Image Hosting Script
    risk 0.03cvss —epss 0.03

    Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.

  • CVE-2008-3212Jul 18, 2008
    Scripteen
    Free Image Hosting Script
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to admin/login.php, or the (3) uname or (4) pass parameter to login.php. NOTE: the…

  • CVE-2008-3213Jul 18, 2008
    Webcms
    Webcms Portal Edition
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information.

  • CVE-2008-1665Jul 17, 2008
    Microfocus
    Hpsi Active Directory Bidirectional LDAP Connector
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in HP Select Identity (HPSI) Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2008-1666Jul 17, 2008
    Microfocus
    Oracle for OpenView
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP Oracle for OpenView (OfO) 8.1.7, 9.1.01, 9.2, 9.2.0, 10g, and 10gR2 has unknown impact and attack vectors, possibly related to the July 2008 Oracle Critical Patch Update.

  • CVE-2008-2232Jul 17, 2008
    Afuse
    Afuse
    risk 0.00cvss —epss 0.00

    The expand_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname.

  • CVE-2008-2933Jul 17, 2008
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that…

  • CVE-2008-3198Jul 17, 2008
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933.

  • CVE-2008-3199Jul 17, 2008
    Resiprocate
    Resiprocate
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service (stack consumption) via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."

  • CVE-2008-3200Jul 17, 2008
    Avlc
    vlc_forum.php
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in vlc_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affich_message action.

  • CVE-2008-3201Jul 17, 2008
    Pagefusion
    Pagefusion
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) acct_fname and (2) acct_lname parameters in an edit action, and the (3) PID, (4) PGID, and (5) rez parameters. NOTE: the…

  • CVE-2008-3202Jul 17, 2008
    Xomol
    Xomol CMS
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the current_url parameter in a tellafriend action. NOTE: the provenance of this information is unknown; the details are obtained solely from…

  • CVE-2008-3203Jul 17, 2008
    Auracms
    Auracms
    risk 0.03cvss —epss 0.03

    js/pages/pages_data.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter.

  • CVE-2008-3204Jul 17, 2008
    E Topbiz
    Million Pixels
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in tops_top.php in E-topbiz Million Pixels 3 allows remote attackers to execute arbitrary SQL commands via the id_cat parameter.

  • CVE-2008-3205Jul 17, 2008
    Easy Script
    Wysi Wiki Wyg
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter.

  • CVE-2008-3145Jul 16, 2008
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read.

  • CVE-2008-3189Jul 16, 2008
    DreamNews
    DreamNews Manager
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2008-3190Jul 16, 2008
    1scripts
    Codedb
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

  • CVE-2008-3191Jul 16, 2008
    MForum
    mForum
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) City, (2) Interest, (3) Email, (4) Icq, (5) msn, or (6) Yahoo Messenger field in an edit_profile action.

  • CVE-2008-3192Jul 16, 2008
    JSite
    jSite
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter.

  • CVE-2008-3193Jul 16, 2008
    JSite
    jSite
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI.

  • CVE-2008-3194Jul 16, 2008
    Pluck
    Pluck
    risk 0.03cvss —epss 0.03

    Multiple directory traversal vulnerabilities in data/inc/themes/predefined_variables.php in pluck 4.5.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) langpref, (2) file, (3) blogpost, or (4) cat parameter.

  • CVE-2008-3196Jul 16, 2008
    Yacc
    Yacc
    risk 0.00cvss —epss 0.01

    skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to cause an out-of-bounds stack access when the yacc stack pointer points to the end of the stack.

  • CVE-2008-3197Jul 16, 2008
    PhpMyAdmin
    phpMyAdmin
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to (1) the db parameter in the "Creating a Database" functionality (db_create.php), and (2) the convcharset and…

  • CVE-2008-2576Jul 15, 2008
    Oracle Corporation
    Weblogic Server
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2, 9.1, 9.0, and 8.1 SP6 has unknown impact and local attack vectors.

  • CVE-2008-2577Jul 15, 2008
    Oracle Corporation
    Weblogic Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2 MP1 has unknown impact and remote authenticated attack vectors.

  • CVE-2008-2578Jul 15, 2008
    Oracle Corporation
    Weblogic Server
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 and 9.2 MP1 has unknown impact and local attack vectors.

  • CVE-2008-2579Jul 15, 2008
    Oracle Corporation
    Weblogic Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 has unknown impact and remote attack vectors.

  • CVE-2008-2580Jul 15, 2008
    Oracle Corporation
    Weblogic Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 has unknown impact and remote attack vectors.

  • CVE-2008-2581Jul 15, 2008
    Oracle Corporation
    Weblogic Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer.

  • CVE-2008-2582Jul 15, 2008
    Oracle Corporation
    Weblogic Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors.

  • CVE-2008-2583Jul 15, 2008
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown impact and remote attack vectors.

  • CVE-2008-2585Jul 15, 2008
    Oracle Corporation
    Report Manager
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.

  • CVE-2008-2586Jul 15, 2008
    Oracle Corporation
    Application Object Library
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2606.

  • CVE-2008-2587Jul 15, 2008
    Oracle Corporation
    Advanced Replication
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors.

  • CVE-2008-2589Jul 15, 2008
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable…

  • CVE-2008-2590Jul 15, 2008
    Oracle Corporation
    Instance Management Component
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Instance Management component in Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 has unknown impact and remote authenticated attack vectors.

  • CVE-2008-2591Jul 15, 2008
    Oracle Corporation
    Database Vault
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors.

  • CVE-2008-2592Jul 15, 2008
    Oracle Corporation
    Advanced Replication
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_DEFER_SYS. NOTE: the previous information was…

  • CVE-2008-2593Jul 15, 2008
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2594.

  • CVE-2008-2594Jul 15, 2008
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2593.

  • CVE-2008-2595Jul 15, 2008
    Oracle Corporation
    Internet Directory
    risk 0.04cvss —epss 0.11

    Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented…

  • CVE-2008-2596Jul 15, 2008
    Oracle Corporation
    Mobile Application Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Mobile Application Server component in Oracle E-Business Suite 12.0.3 has unknown impact and remote authenticated attack vectors.

  • CVE-2008-2597Jul 15, 2008
    Oracle Corporation
    Times Ten Client Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2598 and CVE-2008-2599.

  • CVE-2008-2598Jul 15, 2008
    Oracle Corporation
    Times Ten Client Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2597 and CVE-2008-2599.