VYPR

CVEs

344,705 total · page 6357 of 6,895

AllCriticalHighKEV
  • CVE-2007-4976Sep 19, 2007
    Coppermine
    Coppermine Photo Gallery
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the log parameter.

  • CVE-2007-4977Sep 19, 2007
    Coppermine
    Coppermine Photo Gallery
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter.

  • CVE-2007-4978Sep 19, 2007
    Phpsyncml
    Phpsyncml
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter to (1) Decoder.php and (2) Encoder.php in WBXML/.

  • CVE-2007-4979Sep 19, 2007
    Kwsphp
    Kwsphp
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a results action, a different module than CVE-2007-4956.2.

  • CVE-2007-4980Sep 19, 2007
    Gcaldaemon
    Gcaldaemon
    risk 0.03cvss —epss 0.05

    The readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13 allows remote attackers to cause a denial of service via a large integer value in the Content-Length HTTP header, which triggers a fatal Java OutOfMemoryError.

  • CVE-2007-4981Sep 19, 2007
    Oblius
    Obedit
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the save function in Obedit 3.03 allows user-assisted remote attackers to inject arbitrary web script or HTML via unknown vectors, as demonstrated by a SCRIPT element in an unspecified context when saving a document. NOTE: because the…

  • CVE-2007-4982Sep 19, 2007
    MW6 Technologies
    Qrcode Activex
    risk 0.04cvss —epss 0.10

    Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Technologies QRCode ActiveX 3.0.0.1 and earlier allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1)…

  • CVE-2007-4974Sep 19, 2007
    Libsndfile Project
    Libsndfile
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size.

  • CVE-2007-4967Sep 19, 2007
    Online Armor
    Personal Firewall
    risk 0.00cvss —epss 0.00

    Online Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for…

  • CVE-2007-4968Sep 19, 2007
    Privatefirewall
    Privatefirewall
    risk 0.00cvss —epss 0.00

    Privatefirewall 5.0.14.2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for (1) NtOpenProcess and (2)…

  • CVE-2007-4969Sep 19, 2007
    Sysinternals
    Process Monitor
    risk 0.00cvss —epss 0.00

    Process Monitor 1.22 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API…

  • CVE-2007-4970Sep 19, 2007
    ProcessGuard
    ProcessGuard
    risk 0.00cvss —epss 0.00

    ProcessGuard 3.410 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for Windows Native API functions…

  • CVE-2007-4971Sep 19, 2007
    ProSecurity
    ProSecurity
    risk 0.00cvss —epss 0.00

    ProSecurity 1.40 Beta 2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for Windows Native API functions…

  • CVE-2007-4972Sep 19, 2007
    RegMon
    RegMon
    risk 0.00cvss —epss 0.00

    RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks to the (1) NtCreateKey and (2) NtOpenKey…

  • CVE-2007-4958Sep 18, 2007
    Tinywebgallery
    Tinywebgallery
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote attackers to inject arbitrary web script or HTML via the URI for (1) index.php, (2) i_frames/i_login.php, and (3) i_frames/i_top_tags.php. NOTE: the provenance of this information…

  • CVE-2007-4959Sep 18, 2007
    Oscmax
    Oscmax
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in catalog_products_with_images.php in osCMax 2.0.0-RC3-0-1 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2007-4960Sep 18, 2007
    Linden Lab
    Second Life
    risk 0.00cvss —epss 0.01

    Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Explorer and possibly Firefox, allows remote attackers to obtain sensitive information via a '" ' (double-quote space) sequence followed by the -autologin and…

  • CVE-2007-4961HigSep 18, 2007
    Linden Lab
    Second Life
    risk 0.49cvss 7.5epss 0.01

    The login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the…

  • CVE-2007-4962Sep 18, 2007
    Winimage
    Winimage
    risk 0.03cvss —epss 0.06

    Directory traversal vulnerability in WinImage 8.10 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged for code execution by writing to a Startup…

  • CVE-2007-4963Sep 18, 2007
    Winimage
    Winimage
    risk 0.00cvss —epss 0.02

    Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename via a long sequence of space characters in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged with a separate directory traversal…

  • CVE-2007-4964Sep 18, 2007
    Winimage
    Winimage
    risk 0.03cvss —epss 0.03

    WinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via an invalid BPB_BytsPerSec field in the header of a .IMG file.

  • CVE-2007-4965Sep 18, 2007
    Python (programming language)
    Python
    risk 0.04cvss —epss 0.12

    Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and…

  • CVE-2007-4966Sep 18, 2007
    GForge
    Gforge
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skill_delete[] parameter.

  • CVE-2007-2834Sep 18, 2007
    Openoffice
    Openoffice
    risk 0.01cvss —epss 0.11

    Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an…

  • CVE-2007-3010CriKEVSep 18, 2007
    Al Enterprise
    Omnipcx Enterprise Communication Server
    risk 0.87cvss 9.8epss 0.98

    masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

  • CVE-2007-4750Sep 18, 2007
    RemoteDocs
    R-Viewer
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote attackers to execute arbitrary code via a crafted RDZ archive in which the first file has an executable extension.

  • CVE-2007-4751Sep 18, 2007
    RemoteDocs
    R-Viewer
    risk 0.00cvss —epss 0.00

    RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files.

  • CVE-2007-0326Sep 18, 2007
    Photochannel
    Pni Digital Media Upload Plugin Activex Control
    risk 0.01cvss —epss 0.07

    Multiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload Plugin ActiveX control before 2.0.0.10, as used by multiple retailers, allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2007-4947Sep 18, 2007
    Sebastian Bunka
    Myphppagetool
    risk 0.00cvss —epss 0.04

    Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the ptinclude parameter to (1) help1.php, (2) help2.php, (3) help3.php, (4) help4.php, (5) help5.php, (6) help6.php, (7) help7.php, (7)…

  • CVE-2007-4948Sep 18, 2007
    Webmedia Explorer
    Webmedia Explorer
    risk 0.00cvss —epss 0.01

    Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer (webmex) 3.2.2 allow remote attackers to execute arbitrary PHP code via (1) a URL in the path_include parameter to includes/rss.class.php, (2) a URL in the path_template parameter to (a)…

  • CVE-2007-4949Sep 18, 2007
    Phpreactor
    Phpreactor
    risk 0.00cvss —epss 0.01

    Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7pl1 allow remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter to (1) ekilat.com-int.tpl.php, (2) phpreactor.org-top.tpl.php, or (3) ekilat.com-top.tpl.php in examples/. …

  • CVE-2007-4950Sep 18, 2007
    Phportal
    Phportal
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in form/db_form/employee.php in PHPortal 0.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. NOTE: this issue is disputed by CVE, since DOCUMENT_ROOT cannot be modified by an attacker

  • CVE-2007-4951Sep 18, 2007
    Yapig
    Yapig
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the YAPIG_PATH parameter. NOTE: this issue has been disputed by CVE, since YAPIG_PATH is defined before use

  • CVE-2007-4952Sep 18, 2007
    Omnistar
    Article Manager
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the page_id parameter in a favorite op action, a different vector than CVE-2006-5917.

  • CVE-2007-4953Sep 18, 2007
    Simpcms
    Simpcms
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the keyword parameter in a search site action.

  • CVE-2007-4954Sep 18, 2007
    Joomla
    com_joom12pic
    risk 0.05cvss —epss 0.29

    PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.

  • CVE-2007-4955Sep 18, 2007
    Joomla
    Flash Fun! (com_joomlaflashfun)
    risk 0.05cvss —epss 0.30

    PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.

  • CVE-2007-4956Sep 18, 2007
    Kwsphp
    Kwsphp
    risk 0.03cvss —epss 0.04

    Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to login.php, (2) the id parameter to index.php in a carnet editer action in the Member_Space (espace_membre) module, or (3) the typenav…

  • CVE-2007-4957Sep 18, 2007
    Chupix
    Chupix CMS
    risk 0.04cvss —epss 0.07

    Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. (dot dot) in the (1) fichier or (2) repertoire parameter, or create arbitrary directories via a .. (dot dot) in the (3)…

  • CVE-2007-0004Sep 18, 2007
    Red Hat
    Kernel
    risk 0.00cvss —epss 0.00

    The NFS client implementation in the kernel in Red Hat Enterprise Linux (RHEL) 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfs_permission (mode bits) data rather than an NFS ACCESS call to the server, which allows local…

  • CVE-2007-0997Sep 18, 2007
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Race condition in the tee (sys_tee) system call in the Linux kernel 2.6.17 through 2.6.17.6 might allow local users to cause a denial of service (system crash), obtain sensitive information (kernel memory contents), or gain privileges via unspecified vectors related to a…

  • CVE-2007-1865Sep 18, 2007
    Red Hat
    RHEL
    risk 0.00cvss —epss 0.00

    The ipv6_getsockopt_sticky function in the kernel in Red Hat Enterprise Linux (RHEL) Beta 5.1.0 allows local users to obtain sensitive information (kernel memory contents) via a negative value of the len parameter. NOTE: this issue has been disputed in a bug comment, stating…

  • CVE-2007-4137Sep 18, 2007
    Trolltech
    Qt
    risk 0.00cvss —epss 0.02

    Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the…

  • CVE-2007-4936Sep 18, 2007
    Office Efficiencies
    Safesquid
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Office Efficiencies SafeSquid 4.1.x has unknown impact and attack vectors, related to a "serious security flaw," possibly specific to Linux.

  • CVE-2007-4937Sep 18, 2007
    AnnonceV
    Cs Guestbook
    risk 0.03cvss —epss 0.03

    CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php.

  • CVE-2007-4938Sep 18, 2007
    MPlayer
    Mplayer
    risk 0.04cvss —epss 0.16

    Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a…

  • CVE-2007-4939Sep 18, 2007
    Media Player Classic
    Media Player Classic
    risk 0.04cvss —epss 0.12

    Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service (application crash) or…

  • CVE-2007-4940Sep 18, 2007
    Media Player Classic
    Media Player Classic
    risk 0.00cvss —epss 0.04

    Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allow remote attackers to cause a denial of service (application crash) or possibly execute…

  • CVE-2007-4941Sep 18, 2007
    Kmplayer
    Kmplayer
    risk 0.03cvss —epss 0.03

    KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file with certain large "indx truck size" and nEntriesInuse values.

  • CVE-2007-4942Sep 18, 2007
    Focus
    SIS
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information…