VYPR

CVEs

344,756 total · page 6352 of 6,896

AllCriticalHighKEV
  • CVE-2007-5308Oct 9, 2007
    PHP Homepage M
    PHP Homepage M
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in galerie.php in PHP Homepage M (phpHPm) 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.

  • CVE-2007-5279Oct 9, 2007
    Conexware
    Powerarchiver
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in ConeXware PowerArchiver before 10.20.21 might allow remote attackers to execute arbitrary code via a long filename in a BlackHole archive.

  • CVE-2007-5280Oct 9, 2007
    Appfuse
    Appfuse
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in (1) success or (2) error messages.

  • CVE-2007-5281Oct 9, 2007
    Hitachi
    Cosminexus Developer's Kit for Java
    risk 0.00cvss —epss 0.02

    The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake…

  • CVE-2007-5282Oct 9, 2007
    Hitachi
    Cosminexus Agent
    risk 0.00cvss —epss 0.01

    Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might allow remote attackers to cause a denial of service (agent process crash) via invalid data from clients other than Cosminexus Manager.

  • CVE-2007-5283Oct 9, 2007
    Hitachi
    Tpbroker Object Transaction Monitor
    risk 0.00cvss —epss 0.01

    The TSC Domain Manager in Hitachi TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor 01-00 through 03-00 might allow attackers to cause a denial of service (crash) via invalid messages.

  • CVE-2007-5270Oct 8, 2007
    Drupal
    Boost
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for Drupal allows remote attackers to create or overwrite arbitrary files, and conduct cross-site scripting attacks (XSS) via unspecified vectors.

  • CVE-2007-5271Oct 8, 2007
    Trionic
    Cite CMS
    risk 0.05cvss —epss 0.29

    Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the bField[bf_data] parameter to (1) interface/editors/-custom.php or (2) interface/editors/custom.php.

  • CVE-2007-5272Oct 8, 2007
    Furkan Tastan Blog
    Furkan Tastan Blog
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL commands via the id parameter in a goster kat action.

  • CVE-2007-5273Oct 8, 2007
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for…

  • CVE-2007-5274Oct 8, 2007
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for…

  • CVE-2007-5275Oct 8, 2007
    Adobe Inc.
    Flash
    risk 0.00cvss —epss 0.06

    The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a…

  • CVE-2007-5276Oct 8, 2007
    Opera
    Opera
    risk 0.00cvss —epss 0.01

    Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80.

  • CVE-2007-5277Oct 8, 2007
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.10

    Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on…

  • CVE-2007-5278Oct 8, 2007
    Zomplog
    Zomplog
    risk 0.03cvss —epss 0.02

    Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to download files that were uploaded by users, as demonstrated by obtaining a directory listing via a direct request to /upload…

  • CVE-2007-4924Oct 8, 2007
    Ekiga
    Ekiga
    risk 0.04cvss —epss 0.11

    The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0…

  • CVE-2007-5262Oct 8, 2007
    Battlefront
    Dropteam
    risk 0.00cvss —epss 0.04

    Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a "0x01" packet.

  • CVE-2007-5263Oct 8, 2007
    Battlefront
    Dropteam
    risk 0.00cvss —epss 0.04

    Multiple buffer overflows in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via (1) a crafted "0x5c" packet or (2) many 32-bit numbers in a "0x18" packet, or cause a denial of service (crash) via (3) a large "0x4b" packet.

  • CVE-2007-5264Oct 8, 2007
    Battlefront
    Dropteam
    risk 0.03cvss —epss 0.03

    Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information.

  • CVE-2007-5265Oct 8, 2007
    Dawnoftime
    Dawn Of Time
    risk 0.03cvss —epss 0.05

    Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) password fields when accessing certain "restricted zones", which are not properly…

  • CVE-2007-5266Oct 8, 2007
    Libpng
    Libpng
    risk 0.00cvss —epss 0.03

    Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.0.29 beta1 and 1.2.x before 1.2.21 beta1 allows remote attackers to cause a denial of service (crash) via a crafted PNG image that prevents a name field from being NULL…

  • CVE-2007-5267Oct 8, 2007
    Libpng
    Libpng
    risk 0.00cvss —epss 0.02

    Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service (crash) via a crafted PNG image, due to an incorrect fix for CVE-2007-5266.

  • CVE-2007-5268Oct 8, 2007
    Libpng
    Libpng
    risk 0.00cvss —epss 0.03

    pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.

  • CVE-2007-5269Oct 8, 2007
    Libpng
    Libpng
    risk 0.00cvss —epss 0.05

    Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT…

  • CVE-2007-5243Oct 6, 2007
    Borland Software
    Interbase
    risk 0.06cvss —epss 0.40

    Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect…

  • CVE-2007-5244Oct 6, 2007
    Borland Software
    Interbase
    risk 0.06cvss —epss 0.38

    Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.

  • CVE-2007-5245Oct 6, 2007
    Firebirdsql
    Firebird
    risk 0.01cvss —epss 0.09

    Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the SVC_attach function or (2) unspecified vectors…

  • CVE-2007-5246Oct 6, 2007
    Firebirdsql
    Firebird
    risk 0.01cvss —epss 0.07

    Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote attackers to execute arbitrary code via (1) a long attach request on TCP port 3050 to the isc_attach_database function or (2) a long create request…

  • CVE-2007-5247Oct 6, 2007
    Monolith Productions
    First Encounter Assault Recon
    risk 0.00cvss —epss 0.05

    Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format…

  • CVE-2007-5248Oct 6, 2007
    ID Software
    Doom 3
    risk 0.04cvss —epss 0.07

    Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service…

  • CVE-2007-5249Oct 6, 2007
    Unreal Engine
    Unreal Engine
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in the logging function in the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to cause a denial of service (daemon crash) via a long (1) PB_Y packet…

  • CVE-2007-5250Oct 6, 2007
    Punkbuster
    Punkbuster
    risk 0.00cvss —epss 0.01

    The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allows remote attackers to cause a denial of service (server hang) via packets containing 0x07 characters or other…

  • CVE-2007-5251Oct 6, 2007
    Helm
    Helm
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16 allow remote attackers to inject arbitrary web script or HTML via (1) the showOption parameter to domain.asp, or the (2) Folder or (3) StartPath parameter to FileManager.asp.

  • CVE-2007-5252Oct 6, 2007
    Netsupport
    Netsupport School Student
    risk 0.00cvss —epss 0.04

    Buffer overflow in NetSupport Manager (NSM) Client 10.00 and 10.20, and NetSupport School Student (NSS) 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection…

  • CVE-2007-5253Oct 6, 2007
    Cart32
    Cart32
    risk 0.04cvss —epss 0.09

    c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName parameter in a GetImage action, by appending a NULL byte (%00) sequence followed by an image file extension, as demonstrated by a request for a ".txt%00.gif"…

  • CVE-2007-5254Oct 6, 2007
    Virusblokada
    Vba32 Antivirus
    risk 0.00cvss —epss 0.00

    VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrated by replacing vba32ldr.exe.

  • CVE-2007-5255Oct 6, 2007
    Google
    Mini Search Appliance
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance 3.4.14 allows remote attackers to inject arbitrary web script or HTML via the ie parameter to the /search URI.

  • CVE-2007-5256Oct 6, 2007
    FSFDT
    FSD
    risk 0.04cvss —epss 0.07

    Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote attackers to execute arbitrary code via a long HELP command on TCP port 3010 to the sysuser::exechelp function in sysuser.cc and (2) remote authenticated users…

  • CVE-2007-5257Oct 6, 2007
    Edraw
    Office Viewer Component
    risk 0.04cvss —epss 0.15

    Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a…

  • CVE-2007-5258Oct 6, 2007
    Phpfreelog
    Phpfreelog
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in log.php in phpFreeLog alpha 0.2.0 allows remote attackers to include and execute arbitrary files via unspecified vectors. NOTE: the original disclosure is likely erroneous.

  • CVE-2007-5259Oct 6, 2007
    Ilient
    Sysaid
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Ilient SysAid 4.5.03 and 4.5.04 allows remote attackers to perform some actions as administrators, as demonstrated by changing the administrator password. NOTE: the provenance of this information is unknown; the details are…

  • CVE-2007-5260Oct 6, 2007
    Asp CMS
    Asp CMS
    risk 0.00cvss —epss 0.01

    ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request for mdb-database/ASP-CMS_v100.mdb.

  • CVE-2007-5261Oct 6, 2007
    Iscripts
    Multicart
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to search.php.

  • CVE-2007-5241Oct 6, 2007
    Microfocus
    Openvms
    risk 0.00cvss —epss 0.02

    Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service (machine crash) via the "MCR MCL SHOW CSMA-CD Port * All" command, which overwrites a Non-Paged Pool Packet.

  • CVE-2007-5242Oct 6, 2007
    Microfocus
    Openvms
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service (machine crash) via an "oversize" packet, which is not properly discarded if "the device has no remaining buffers after…

  • CVE-2007-5235Oct 6, 2007
    Uebimiau
    Uebimiau
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject arbitrary web script or HTML via the f_email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2007-5236Oct 6, 2007
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application.

  • CVE-2007-5237Oct 6, 2007
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read and modify local files via an untrusted application, aka "two vulnerabilities."

  • CVE-2007-5238Oct 6, 2007
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive…

  • CVE-2007-5239Oct 6, 2007
    Sun Corporation
    Jdk
    risk 0.00cvss —epss 0.03

    Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows…