VYPR

CVEs

344,694 total · page 6362 of 6,894

AllCriticalHighKEV
  • CVE-2007-4658Sep 4, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.02

    The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.

  • CVE-2007-4659Sep 4, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.03

    The zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution triggered by a memory_limit violation, which has unknown impact and attack vectors.

  • CVE-2007-4660Sep 4, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and attack vectors, related to an incorrect size calculation.

  • CVE-2007-4661Sep 4, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.02

    The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer…

  • CVE-2007-4662Sep 4, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.03

    Buffer overflow in the php_openssl_make_REQ function in PHP before 5.2.4 has unknown impact and attack vectors.

  • CVE-2007-4663Sep 4, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in PHP before 5.2.4 allows attackers to bypass open_basedir restrictions via unspecified vectors involving the glob function.

  • CVE-2007-4664Sep 4, 2007
    Firebirdsql
    Firebird
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, when a filename exceeds MAX_PATH_LEN, has unknown impact and attack vectors, aka CORE-1405.

  • CVE-2007-4665Sep 4, 2007
    Firebirdsql
    Firebird
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403.

  • CVE-2007-4666Sep 4, 2007
    Firebirdsql
    Firebird
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service (CPU and memory consumption) via "large network packets with garbage", aka CORE-1397.

  • CVE-2007-4667Sep 4, 2007
    Firebirdsql
    Firebird
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149.

  • CVE-2007-4668Sep 4, 2007
    Firebirdsql
    Firebird
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312.

  • CVE-2007-4669Sep 4, 2007
    Firebirdsql
    Firebird
    risk 0.00cvss —epss 0.01

    The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.

  • CVE-2007-4652Sep 4, 2007
    PHP
    PHP
    risk 0.03cvss —epss 0.01

    The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.

  • CVE-2007-3996Sep 4, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.04

    Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx…

  • CVE-2007-3997Sep 4, 2007
    PHP
    PHP
    risk 0.04cvss —epss 0.14

    The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_basedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE.

  • CVE-2007-3998Sep 4, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.03

    The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash, or infinite loop) via certain arguments, as demonstrated…

  • CVE-2007-4650Sep 4, 2007
    Bharat Mediratta
    Gallery
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using "linked items" in WebDAV…

  • CVE-2007-4632Aug 31, 2007
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line into the VTY configuration when an administrator makes certain changes to a (1) VTY/AUX or (2) CONSOLE setting on a device without AAA enabled, which allows remote attackers to bypass authentication and obtain a terminal…

  • CVE-2007-4633Aug 31, 2007
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to inject arbitrary web script or HTML via the lang…

  • CVE-2007-4634Aug 31, 2007
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.03cvss —epss 0.04

    Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1)…

  • CVE-2007-4635Aug 31, 2007
    Yahoo
    Messenger
    risk 0.03cvss —epss 0.02

    Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, possibly involving a buffer overflow, as demonstrated by ym8bug.exe. NOTE: this might be related to CVE-2007-4515. NOTE: the…

  • CVE-2007-4636Aug 31, 2007
    Phpbg
    Phpbg
    risk 0.09cvss —epss 0.71

    Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to (1) intern/admin/other/backup.php, (2) intern/admin/, (3) intern/clan/member_add.php, (4) intern/config/key_2.php, or (5)…

  • CVE-2007-4637Aug 31, 2007
    Xgb
    Xgb
    risk 0.03cvss —epss 0.02

    xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspecified changes via an unknown series of steps.

  • CVE-2007-4638Aug 31, 2007
    Blizzard
    StarCraft Brood War
    risk 0.03cvss —epss 0.06

    Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed map, which triggers an out-of-bounds read during a minimap preview.

  • CVE-2007-4639Aug 31, 2007
    Enterprisedb
    Postgres Advanced Server
    risk 0.03cvss —epss 0.05

    EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT…

  • CVE-2007-4640Aug 31, 2007
    Pakupaku
    Pakupaku CMS
    risk 0.03cvss —epss 0.02

    Unrestricted file upload vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to upload and execute arbitrary PHP files in uploads/ via an Uploads action.

  • CVE-2007-4641Aug 31, 2007
    Pakupaku
    Pakupaku CMS
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter, as demonstrated by injecting code into an Apache log file.

  • CVE-2007-4642Aug 31, 2007
    Doomsday
    Doomsday
    risk 0.04cvss —epss 0.16

    Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary code via a long chat (PKT_CHAT) message that is not properly handled by the (1) D_NetPlayerEvent function in d_net.c or the (2) Msg_Write function in net_msg.c,…

  • CVE-2007-4643Aug 31, 2007
    Doomsday
    Doomsday
    risk 0.00cvss —epss 0.02

    Integer underflow in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a PKT_CHAT packet with a data length less than 3, which triggers an erroneous malloc, possibly related to the Sv_HandlePacket function in…

  • CVE-2007-4644Aug 31, 2007
    Doomsday
    Doomsday
    risk 0.00cvss —epss 0.04

    Format string vulnerability in the Cl_GetPackets function in cl_main.c in the client in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote Doomsday servers to execute arbitrary code via format string specifiers in a PSV_CONSOLE_TEXT message.

  • CVE-2007-4645Aug 31, 2007
    Nmdeluxe
    Nmdeluxe
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in NMDeluxe 2.0.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a newspost do action, a different vulnerability than CVE-2006-1108.

  • CVE-2007-4646Aug 31, 2007
    Hexamail
    Hexamail Server
    risk 0.04cvss —epss 0.16

    Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER command.

  • CVE-2007-4647Aug 31, 2007
    2coolcode
    Our Space
    risk 0.03cvss —epss 0.02

    newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi.

  • CVE-2007-4648Aug 31, 2007
    Norman
    Norman Virus Control
    risk 0.03cvss —epss 0.01

    The nvcoaft51 driver in Norman Virus Control (NVC) 5.82 uses weak permissions (unrestricted write access) for the NvcOa device, which allows local users to gain privileges by (1) triggering a buffer overflow in a kernel pool via a string argument to ioctl 0xBF67201C; or by (2)…

  • CVE-2007-4649Aug 31, 2007
    MicroWorld Technologies
    eScan Virus Control
    risk 0.03cvss —epss 0.01

    MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (Everyone:Full Control) for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by…

  • CVE-2007-2931Aug 31, 2007
    Microsoft
    Msn Messenger
    risk 0.07cvss —epss 0.55

    Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions.

  • CVE-2007-2954Aug 31, 2007
    Novell
    Client
    risk 0.02cvss —epss 0.24

    Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDriverDirectory, and other…

  • CVE-2007-4515Aug 31, 2007
    Yahoo
    Messenger
    risk 0.06cvss —epss 0.33

    Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods.…

  • CVE-2007-4631Aug 31, 2007
    Qgit
    Qgit
    risk 0.00cvss —epss 0.00

    The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on temporary files with predictable filenames.

  • CVE-2007-4624Aug 31, 2007
    Abledesign
    Dynamic Picture Frame
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the img_url parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2007-4625Aug 31, 2007
    Polipo
    Polipo
    risk 0.00cvss —epss 0.01

    Polipo before 1.0.2 allows remote HTTP servers to cause a denial of service (daemon crash) by aborting the response to a POST request.

  • CVE-2007-4626Aug 31, 2007
    Polipo
    Polipo
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service (daemon crash) via certain network traffic associated with entities larger than 2 Gb.

  • CVE-2007-4627Aug 31, 2007
    ABC
    eStore
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

  • CVE-2007-4628Aug 31, 2007
    Phpns
    Phpns
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2007-4629Aug 31, 2007
    MapServer
    Mapserver
    risk 0.00cvss —epss 0.03

    Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.

  • CVE-2007-4630Aug 31, 2007
    Absolute Poll Manager
    Absolute Poll Manager XE
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

  • CVE-2007-4467Aug 31, 2007
    Oracle Corporation
    Jinitiator
    risk 0.02cvss —epss 0.21

    Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified "initialization parameters."…

  • CVE-2007-4602Aug 31, 2007
    Impliedbydesign
    Micro CMS
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS (Micro-CMS) 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2007-4603Aug 31, 2007
    ACG
    News
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the aid parameter in a showarticle action or (2) the catid parameter in a showcat action.

  • CVE-2007-4604Aug 31, 2007
    DL PayCart
    DL PayCart
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.