VYPR

CVEs

344,830 total · page 6334 of 6,897

AllCriticalHighKEV
  • CVE-2007-6345Dec 13, 2007
    Aurora
    Aurora Framework
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in aurora framework before 20071208 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the value parameter to the pack_var function in module/db.lib/db_mysql.lib. NOTE: some of these details are obtained from…

  • CVE-2007-6346Dec 13, 2007
    Rainboard
    Rainboard
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Rainboard before 2.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2007-6347Dec 13, 2007
    Viart
    CMS
    risk 0.04cvss —epss 0.07

    PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2, and (4) Shop Free 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the root_folder_path parameter. NOTE: some of…

  • CVE-2007-5989Dec 13, 2007
    Skype Technologies
    Skype
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corruption.

  • CVE-2007-6015Dec 13, 2007
    Samba (software)
    Samba
    risk 0.05cvss —epss 0.27

    Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset…

  • CVE-2007-6204Dec 13, 2007
    Microfocus
    OpenView Network Node Manager
    risk 0.09cvss —epss 0.70

    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as…

  • CVE-2007-6342Dec 13, 2007
    Apache
    AuthCAS
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (session ID) in a cookie.

  • CVE-2007-6322Dec 13, 2007
    risk 0.04cvss —epss 0.07

    Directory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

  • CVE-2007-6323Dec 13, 2007
    Mms Gallery
    Mms Gallery PHP
    risk 0.04cvss —epss 0.09

    Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) get_image.php or (2) get_file.php in mms_template/.

  • CVE-2007-6324Dec 13, 2007
    City Writer
    Citywriter
    risk 0.03cvss —epss 0.05

    PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.

  • CVE-2007-6325Dec 13, 2007
    Fastpublish
    CMS
    risk 0.04cvss —epss 0.11

    PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attackers to execute arbitrary PHP code via a URL in the config[fsBase] parameter, a different vector than CVE-2006-2726.

  • CVE-2007-6326Dec 13, 2007
    Sergey Lyubka
    Simple Httpd
    risk 0.04cvss —epss 0.07

    Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI.

  • CVE-2007-6327Dec 13, 2007
    Avs Media
    Avsmjpegfile.dll
    risk 0.04cvss —epss 0.11

    Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attackers to execute arbitrary code via a long first argument to the CreateStill method.

  • CVE-2007-6328Dec 13, 2007
    Dosbox
    Dosbox
    risk 0.00cvss —epss 0.00

    DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem

  • CVE-2007-6329Dec 13, 2007
    Microsoft
    Office
    risk 0.01cvss —epss 0.16

    Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in…

  • CVE-2007-6330Dec 13, 2007
    Meridian Software
    Prolog Manager
    risk 0.00cvss —epss 0.05

    Meridian Prolog Manager 2007, and 7.5 and earlier, sends all usernames and passwords to the client in a (1) cleartext or (2) weakly encrypted format to support client-side login authentication, which makes it easier for remote attackers to obtain database access by capturing…

  • CVE-2007-6331Dec 13, 2007
    Microfocus
    HP Quick Launch Button
    risk 0.05cvss —epss 0.30

    Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs…

  • CVE-2007-6332Dec 13, 2007
    Microfocus
    HP Quick Launch Button
    risk 0.04cvss —epss 0.08

    The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary…

  • CVE-2007-6333Dec 13, 2007
    Microfocus
    HP Quick Launch Button
    risk 0.04cvss —epss 0.09

    The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue…

  • CVE-2007-5000Dec 13, 2007
    Apache
    HTTP Server
    risk 0.04cvss —epss 0.47

    Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or…

  • CVE-2007-5964Dec 13, 2007
    Red Hat
    autofs
    risk 0.00cvss —epss 0.00

    The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.

  • CVE-2007-5007Dec 12, 2007
    Balsa
    Balsa
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.

  • CVE-2007-6320Dec 12, 2007
    Drupal
    Drupal
    risk 0.00cvss —epss 0.01

    Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks.

  • CVE-2007-6321Dec 12, 2007
    Roundcube
    Webmail
    risk 0.00cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via style sheets containing expression commands.

  • CVE-2007-0064Dec 12, 2007
    Microsoft
    Windows Media Services
    risk 0.03cvss —epss 0.36

    Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems…

  • CVE-2007-3039Dec 12, 2007
    Microsoft
    Message Queuing
    risk 0.09cvss —epss 0.69

    Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is…

  • CVE-2007-3895Dec 12, 2007
    Microsoft
    Directx
    risk 0.03cvss —epss 0.36

    Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file.

  • CVE-2007-3901Dec 12, 2007
    Microsoft
    Directx
    risk 0.07cvss —epss 0.46

    Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.

  • CVE-2007-3902Dec 12, 2007
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.36

    Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one…

  • CVE-2007-3903Dec 12, 2007
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.31

    Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of…

  • CVE-2007-5344Dec 12, 2007
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.27

    Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creates, modifies, deletes, and accesses document objects using the tags property, which triggers heap corruption, related to uninitialized or…

  • CVE-2007-5347Dec 12, 2007
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.28

    Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects," aka "DHTML Object Memory Corruption Vulnerability."

  • CVE-2007-5350Dec 12, 2007
    Microsoft
    Windows
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Windows Advanced Local Procedure Call (ALPC) in the kernel in Microsoft Windows Vista allows local users to gain privileges via unspecified vectors involving "legacy reply paths."

  • CVE-2007-5351Dec 12, 2007
    Microsoft
    Windows
    risk 0.03cvss —epss 0.41

    Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to force signature re-computation and execute arbitrary code via a crafted SMBv2 packet, aka "SMBv2 Signing Vulnerability."

  • CVE-2007-6314Dec 12, 2007
    Barracudadrive
    Barracudadrive
    risk 0.04cvss —epss 0.07

    BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in the URL.

  • CVE-2007-6315Dec 12, 2007
    Barracudadrive
    Barracudadrive
    risk 0.04cvss —epss 0.07

    Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request to /eh/chat.ehintf/C. that does not contain a Connection ID, which results in a NULL pointer dereference.

  • CVE-2007-6316Dec 12, 2007
    Barracudadrive
    Barracudadrive
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page.

  • CVE-2007-6317Dec 12, 2007
    Barracudadrive
    Barracudadrive
    risk 0.03cvss —epss 0.06

    Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain ..\ (dot dot backslash) sequences in the URL path, or (2) remote authenticated users to delete arbitrary files or create arbitrary…

  • CVE-2007-6318Dec 12, 2007
    WordPress
    WordPress
    risk 0.04cvss —epss 0.09

    SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "\" in a…

  • CVE-2007-6306Dec 11, 2007
    Jfree
    Jfreechart
    risk 0.00cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.

  • CVE-2007-6307Dec 11, 2007
    Jfree
    Jfreechart
    risk 0.03cvss —epss 0.04

    Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) the link parameter or (2) the User-Agent HTTP header.

  • CVE-2007-6308Dec 11, 2007
    Httplogger
    Httplogger
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HttpLogger 0.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2007-6309Dec 11, 2007
    Webspell
    Webspell
    risk 0.03cvss —epss 0.04

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in webSPELL 4.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the galleryID parameter in a usergallery upload action; or the (2) upID, (3) tag, (4) month, (5) userID, or (6) year parameter…

  • CVE-2007-6310Dec 11, 2007
    Falt4Extreme
    Falt4Extreme RC4
    risk 0.03cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbitrary web script or HTML via the handler parameter to (1) index.php and possibly (2) admin/index.php, and (3) the topic parameter to modules/feed/feed.php (aka…

  • CVE-2007-6311Dec 11, 2007
    Falt4Extreme
    Falt4Extreme RC4
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in (1) index.php, and possibly (2) admin/index.php, in Falt4Extreme RC4 10.9.2007 allows remote attackers to execute arbitrary SQL commands via the nav_ID parameter.

  • CVE-2007-6312Dec 11, 2007
    Websense
    Reporting Tools
    risk 0.01cvss —epss 0.16

    Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.

  • CVE-2007-6205Dec 11, 2007
    Serendipity
    Serendipity
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed.

  • CVE-2007-6303Dec 10, 2007
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW…

  • CVE-2007-6304Dec 10, 2007
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the…

  • CVE-2007-6305Dec 10, 2007
    IBM
    Hardware Management Console
    risk 0.00cvss —epss 0.00

    Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow attackers to gain privileges via "some HMC commands."