VYPR

CVEs

344,930 total · page 6316 of 6,899

AllCriticalHighKEV
  • CVE-2008-0010Feb 12, 2008
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations.

  • CVE-2008-0074Feb 12, 2008
    Microsoft
    Internet Information Server
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.

  • CVE-2008-0075Feb 12, 2008
    Microsoft
    Internet Information Server
    risk 0.05cvss —epss 0.57

    Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs to ASP pages.

  • CVE-2008-0084Feb 12, 2008
    Microsoft
    Windows
    risk 0.06cvss —epss 0.78

    Unspecified vulnerability in the TCP/IP support in Microsoft Windows Vista allows remote DHCP servers to cause a denial of service (hang and restart) via a crafted DHCP packet.

  • CVE-2008-0088Feb 12, 2008
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.29

    Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request.

  • CVE-2008-0163Feb 12, 2008
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc.

  • CVE-2008-0600Feb 12, 2008
    Linux
    Kernel
    risk 0.03cvss —epss 0.04

    The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009…

  • CVE-2008-0729Feb 12, 2008
    Apple Inc.
    MobileSafari
    risk 0.04cvss —epss 0.08

    Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to…

  • CVE-2008-0730Feb 12, 2008
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read…

  • CVE-2008-0731Feb 12, 2008
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor change_hat system call, which might allow attackers to trigger the unconfining of an apparmored task.

  • CVE-2008-0732Feb 12, 2008
    Apache
    Geronimo
    risk 0.00cvss —epss 0.01

    The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.

  • CVE-2008-0037Feb 12, 2008
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    X11 in Apple Mac OS X 10.5 through 10.5.1 does not properly handle when the "Allow connections from network client" preference is disabled, which allows remote attackers to bypass intended access restrictions and connect to the X server.

  • CVE-2008-0038Feb 12, 2008
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit vulnerabilities in the application.

  • CVE-2008-0039Feb 12, 2008
    Apple Inc.
    Mail
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Mail in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary commands via a crafted file:// URL.

  • CVE-2008-0040Feb 12, 2008
    Apple Inc.
    Mac OS X
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in NFS in Apple Mac OS X 10.5 through 10.5.1 allows remote attackers to cause a denial of service (system shutdown) or execute arbitrary code via unknown vectors related to mbuf chains that trigger memory corruption.

  • CVE-2008-0041Feb 12, 2008
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is unblocked," which allows remote attackers to determine when a system is running Parental Controls.

  • CVE-2008-0042Feb 12, 2008
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.04

    Argument injection vulnerability in Terminal.app in Terminal in Apple Mac OS X 10.4.11 and 10.5 through 10.5.1 allows remote attackers to execute arbitrary code via unspecified URL schemes.

  • CVE-2008-0318Feb 12, 2008
    ClamAV
    Clamav
    risk 0.01cvss —epss 0.08

    Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow.

  • CVE-2008-0636Feb 12, 2008
    Level Platforms
    Managed Workplace Service Center
    risk 0.03cvss —epss 0.03

    Level Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SC_About.htm, which provides version and patch information.

  • CVE-2008-0726Feb 12, 2008
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.15

    Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.

  • CVE-2008-0728Feb 12, 2008
    ClamAV
    Clamav
    risk 0.00cvss —epss 0.03

    The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."

  • CVE-2007-5659HigKEVFeb 12, 2008
    Adobe Inc.
    Acrobat
    risk 0.73cvss 7.8epss 0.94

    Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.

  • CVE-2007-5663Feb 12, 2008
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.13

    Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in. NOTE: this issue might be subsumed by CVE-2008-0655.

  • CVE-2007-5666Feb 12, 2008
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory. NOTE: this issue might be subsumed by CVE-2008-0655.

  • CVE-2008-0416Feb 12, 2008
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character…

  • CVE-2008-0420Feb 12, 2008
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory…

  • CVE-2008-0215Feb 12, 2008
    Microfocus
    Storage Essentials
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in HP Storage Essentials Storage Resource Management (SRM) before 6.0.0 allow remote attackers to obtain unspecified access to a managed device via unknown attack vectors.

  • CVE-2008-0714Feb 12, 2008
    Mihalism
    Multi Host
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lost_password_go action.

  • CVE-2008-0715Feb 12, 2008
    Acdsee
    Photo Manager
    risk 0.00cvss —epss 0.04

    Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009.

  • CVE-2008-0716Feb 12, 2008
    Symantec
    Notification Server
    risk 0.00cvss —epss 0.00

    The agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain privileges via a "Shatter" style attack.

  • CVE-2008-0717Feb 12, 2008
    IBM
    Websphere Edge Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Caching Proxy (CP) 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response.

  • CVE-2008-0718Feb 12, 2008
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the USB Mouse STREAMS module (usbms) in Sun Solaris 9 and 10, when 64-bit mode is enabled, allows local users to cause a denial of service (panic) via unspecified vectors.

  • CVE-2008-0719Feb 12, 2008
    OsCommerce
    Oscommerce
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonial_id parameter.

  • CVE-2008-0720Feb 12, 2008
    Webmin
    Webmin
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webmin_search.cgi (aka the search section), and possibly other components accessed through a…

  • CVE-2008-0721Feb 12, 2008
    Mambo (software)
    Sermon component
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo allows remote attackers to execute arbitrary SQL commands via the gid parameter.

  • CVE-2008-0722Feb 12, 2008
    Pagetool
    Pagetool
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the search_term parameter in a pagetool_search action. NOTE: the provenance of this information is unknown; the details are obtained solely…

  • CVE-2008-0723Feb 12, 2008
    Mynews
    Mynews
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows remote attackers to inject arbitrary web script or HTML via the hash parameter in an admin action to index.php, a different vulnerability than CVE-2006-2208.1.

  • CVE-2008-0724Feb 12, 2008
    The Everything Development Company
    The Everything Development Engine
    risk 0.03cvss —epss 0.02

    The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext in a database, which makes it easier for context-dependent attackers to obtain access to user accounts.

  • CVE-2008-0725Feb 12, 2008
    Titan
    FTP Server
    risk 0.00cvss —epss 0.03

    Multiple heap-based buffer overflows in the (1) FTP service and (2) administration service in Titan FTP Server 6.0.5.549 allow remote attackers to cause a denial of service (daemon hang) and possibly execute arbitrary code via a long command. NOTE: the USER and PASS commands…

  • CVE-2007-5333Feb 12, 2008
    Apache
    Tomcat
    risk 0.08cvss —epss 0.63

    Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to…

  • CVE-2007-6286Feb 12, 2008
    Apache
    Tomcat
    risk 0.00cvss —epss 0.05

    Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as demonstrated…

  • CVE-2008-0002Feb 12, 2008
    Apache
    Tomcat
    risk 0.00cvss —epss 0.05

    Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order…

  • CVE-2008-0669Feb 12, 2008
    Sift
    Unity
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.cgi in Sift Unity allows remote attackers to inject arbitrary web script or HTML via the qt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2008-0670Feb 12, 2008
    Joomla
    Noticias
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detalhe action.

  • CVE-2008-0671Feb 12, 2008
    Tintin
    Tintin\+\+
    risk 0.04cvss —epss 0.16

    Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF.

  • CVE-2008-0672Feb 12, 2008
    Tintin
    Tintin\+\+
    risk 0.00cvss —epss 0.02

    The process_chat_input function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service (application crash) via a YES message without a newline character, which triggers a NULL dereference.

  • CVE-2008-0673Feb 12, 2008
    Tintin
    Tintin\+\+
    risk 0.00cvss —epss 0.03

    TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory.

  • CVE-2008-0675Feb 12, 2008
    The Everything Development Company
    The Everything Development Engine
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System Pre-1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the node_id parameter.

  • CVE-2008-0676Feb 12, 2008
    A Blog
    A Blog
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the words parameter.

  • CVE-2008-0677Feb 12, 2008
    A Blog
    A Blog
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a news action.