VYPR

CVEs

344,672 total · page 6400 of 6,894

AllCriticalHighKEV
  • CVE-2007-2694May 16, 2007
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0 GA, and 9.1 GA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2007-2695May 16, 2007
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.03

    The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to…

  • CVE-2007-2696May 16, 2007
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access policies on the front end, which allows remote attackers to access protected queues via direct requests to the JMS back-end server.

  • CVE-2007-2697May 16, 2007
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, when in certain configurations, does not limit or audit failed authentication attempts, which allows remote attackers to more easily conduct brute-force attacks…

  • CVE-2007-2698May 16, 2007
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information.

  • CVE-2007-2699May 16, 2007
    Bea
    WebLogic Server
    risk 0.02cvss —epss 0.31

    The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer role to upload arbitrary files.

  • CVE-2007-2700May 16, 2007
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in configuration files when creating a new domain, which allows remote authenticated users to obtain sensitive information.

  • CVE-2007-2701May 16, 2007
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    The JMS Message Bridge in BEA WebLogic Server 7.0 through SP7 and 8.1 through Service Pack 6, when configured without a username and password, or when the connection URL is not defined, allows remote attackers to bypass the security access policy and "send unauthorized messages…

  • CVE-2007-2702May 16, 2007
    Bea
    WebLogic Portal
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2 GA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the rich text editor.

  • CVE-2007-2703May 16, 2007
    Bea
    WebLogic Portal
    risk 0.00cvss —epss 0.02

    BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a long role description, which might allow remote authenticated users to access privileged resources.

  • CVE-2007-2704May 16, 2007
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    BEA WebLogic Server 9.0 through 9.2 allows remote attackers to cause a denial of service (SSL port unavailability) by accessing a half-closed SSL socket.

  • CVE-2007-2705May 16, 2007
    Bea
    Weblogic Integration
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a WebLogic Workshop Directory (wlwdir) parent directory via…

  • CVE-2007-2683May 15, 2007
    Mutt
    Mutt
    risk 0.03cvss —epss 0.01

    Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion.

  • CVE-2007-2678May 15, 2007
    Netsprint
    Netsprint Toolbar
    risk 0.03cvss —epss 0.04

    Buffer overflow in the isChecked function in toolbar.dll in Netsprint Toolbar 1.1 might allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2007-2679May 15, 2007
    Simplephpscripts
    Gallery
    risk 0.00cvss —epss 0.01

    PHP file inclusion vulnerability in index.php in Ivan Peevski gallery 0.3 in Simple PHP Scripts (sphp) allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the gallery parameter, which is accessed by the file_exists function.…

  • CVE-2007-2680May 15, 2007
    Canon
    Network Camera Server Vb100
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the management interface in Canon Network Camera Server VB100 and VB101 with firmware 3.0 R69 and earlier, and VB150 with firmware 1.1 R39 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified…

  • CVE-2007-2681May 15, 2007
    B2evolution
    B2evolution
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in blogs/index.php in b2evolution 1.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the core_subdir parameter.

  • CVE-2007-2656May 14, 2007
    Hewlett-Packard
    Magview ActiveX Control
    risk 0.03cvss —epss 0.04

    Stack-based buffer overflow in the Hewlett-Packard (HP) Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause a denial of service (application crash) and possibly have other impact via a long argument to the DeleteProfile method.

  • CVE-2007-2657May 14, 2007
    Precisionid Barcode
    Precisionid Barcode
    risk 0.03cvss —epss 0.04

    Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID_DataMatrix.DLL allows remote attackers to cause a denial of service via a long argument to the SaveBarCode method.

  • CVE-2007-2658May 14, 2007
    ID Automation
    Linear Barcode
    risk 0.03cvss —epss 0.04

    Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows remote attackers to cause a denial of service via a long argument to the SaveEnhWMF method.

  • CVE-2007-2659May 14, 2007
    phpATM
    phpATM
    risk 0.04cvss —epss 0.07

    Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers to read arbitrary files and obtain script source code via a .. (dot dot) in the directory parameter in a downloadfile action.

  • CVE-2007-2660May 14, 2007
    Cjg Explorer Pro
    Cjg Explorer Pro
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir…

  • CVE-2007-2661May 14, 2007
    BlogMe
    BlogMe
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976.

  • CVE-2007-2662May 14, 2007
    Efestech
    Efestech Haber
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to the top-level URI.

  • CVE-2007-2663May 14, 2007
    Beacon
    Beacon
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the languagePath parameter.

  • CVE-2007-2664May 14, 2007
    Yaap
    Yaap
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter, possibly related to the __autoload function.

  • CVE-2007-2665May 14, 2007
    PHP Firstpost
    PHP Firstpost
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in block.php in PhpFirstPost 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the Include parameter.

  • CVE-2007-2666May 14, 2007
    Scintilla
    Scintilla
    risk 0.04cvss —epss 0.15

    Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted remote attackers to execute arbitrary code via certain Ruby (.rb) files with long lines. NOTE: this was originally reported as a…

  • CVE-2007-2667May 14, 2007
    Db Soft Lab
    Vimpx
    risk 0.03cvss —epss 0.06

    Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter.

  • CVE-2007-2668May 14, 2007
    Webdesproxy
    Webdesproxy
    risk 0.03cvss —epss 0.04

    Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involving the process_connection_request function in webdesproxy.c.

  • CVE-2007-2669May 14, 2007
    PHPChain
    PHPChain
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the catid parameter to (1) settings.php or (2) cat.php. NOTE: certain parameter values also trigger path disclosure.

  • CVE-2007-2670May 14, 2007
    PHPChain
    PHPChain
    risk 0.00cvss —epss 0.01

    PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.php or (2) cat.php, as demonstrated by XSS manipulations.

  • CVE-2007-2671May 14, 2007
    Mozilla Corporation
    Firefox
    risk 0.03cvss —epss 0.03

    Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute in an A element, which triggers an out-of-bounds memory access.

  • CVE-2007-2672May 14, 2007
    Thinc4orce Marketing Group
    PHP Coupon Script
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in index.php in PHP Coupon Script 3.0 allows remote attackers to execute arbitrary SQL commands via the bus parameter in a viewbus page.

  • CVE-2007-2673May 14, 2007
    Censura
    Censura
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in includes/funcs_vendors.php in Censura 1.15.04, and other versions before 1.16.04, allows remote attackers to execute arbitrary SQL commands via the vendorid parameter in a vendor_info cmd action to censura.php.

  • CVE-2007-2674May 14, 2007
    Preprojects
    Pre Shopping Mall
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter.

  • CVE-2007-2675May 14, 2007
    Preprojects
    Pre Classifieds Listings
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter.

  • CVE-2007-2676May 14, 2007
    Open Translation Engine
    Open Translation Engine
    risk 0.09cvss —epss 0.70

    PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the ote_home parameter.

  • CVE-2007-2677May 14, 2007
    Phpchess
    Phpchess
    risk 0.04cvss —epss 0.09

    Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute arbitrary PHP code via a URL in (1) the config parameter to includes/language.php, or the Root_Path parameter to (2) layout_admin_cfg.php, (3) layout_cfg.php,…

  • CVE-2007-0689May 14, 2007
    MyBB
    Mybb
    risk 0.00cvss —epss 0.02

    MyBB 1.2.4 allows remote attackers to obtain sensitive information via the (1) action[] parameter to member.php, (2) imagehash[] parameter to captcha.php, and (3) a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message.

  • CVE-2007-0754May 14, 2007
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor (STSD) atom size in a QuickTime movie.

  • CVE-2007-1901May 14, 2007
    Sonicbb
    Sonicbb
    risk 0.00cvss —epss 0.02

    SonicBB 1.0 allows remote attackers to obtain sensitive information via the (1) by[] parameter to search.php, (2) p[] parameter to viewforum.php, and the (3) id parameter to (a) viewforum.php or (b) members.php, which reveal the installation path in the resulting error message.

  • CVE-2007-1902May 14, 2007
    Sonicbb
    Sonicbb
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b) viewforum.php.

  • CVE-2007-1903May 14, 2007
    Sonicbb
    Sonicbb
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter.

  • CVE-2007-2444May 14, 2007
    Samba (software)
    Samba
    risk 0.00cvss —epss 0.01

    Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.

  • CVE-2007-2446May 14, 2007
    Samba (software)
    Samba
    risk 0.09cvss —epss 0.78

    Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3)…

  • CVE-2007-2447May 14, 2007
    Samba (software)
    Samba
    risk 0.00cvss —epss 0.50

    The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote…

  • CVE-2007-2645May 14, 2007
    Libexif Project
    Libexif
    risk 0.04cvss —epss 0.13

    Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable.

  • CVE-2007-2646May 14, 2007
    Yenc32
    Yenc32
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a long filename in an NTX file.

  • CVE-2007-2647May 14, 2007
    3dsrc
    Monalbum
    risk 0.03cvss —epss 0.03

    Static code injection vulnerability in admin/admin_configuration.php in Monalbum 0.8.7 allows remote authenticated users to inject arbitrary PHP code into the conf/config.inc.php file via the (1) gadm_pass, (2) gadm_user, (3) gcfgHote, (4) gcfgPass, (5) gcfgUser, (6)…