VYPR

CVEs

344,072 total · page 6456 of 6,882

AllCriticalHighKEV
  • CVE-2006-6349Dec 7, 2006
    Pwp Technologies
    The Classified AD System
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via (1) the main parameter in a view action (includes/mainpage/view.asp) in default.asp or (2) a query in the search engine.

  • CVE-2006-6350Dec 7, 2006
    Listpics
    listpics
    risk 0.00cvss —epss 0.02

    listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb.

  • CVE-2006-6351Dec 7, 2006
    Khaledmuratlist
    Khaledmuratlist
    risk 0.00cvss —epss 0.02

    KhaledMuratList stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) CL2F9R1A2C1N.mdb or (2) Data2F9R1A2C1N.mdb.

  • CVE-2006-6352Dec 7, 2006
    FRISK Software
    F-Prot Antivirus
    risk 0.04cvss —epss 0.09

    FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service (infinite loop) via a crafted ACE file. NOTE: this issue has at least a partial overlap with CVE-2006-6294.

  • CVE-2006-6353Dec 7, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Multiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote attackers to cause a denial of service (application crash) via unspecified vectors related to (1) certain KERN_PROTECTION_FAILURE thread crashes and (2) certain KERN_INVALID_ADDRESS…

  • CVE-2006-6354Dec 7, 2006
    Duware
    Dunews
    risk 0.00cvss —epss 0.02

    Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1) iNews, (2) iType, or (3) Action parameter. NOTE: the iType parameter in type.asp is covered by CVE-2005-3976.

  • CVE-2006-6355Dec 7, 2006
    Duware
    Duclassmate
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL commands via the iCity parameter. NOTE: the iState parameter is already covered by CVE-2005-2049.

  • CVE-2006-6356Dec 7, 2006
    Phpnews
    Phpnews
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) id, (3) subject, (4) username, or (5) time parameter.

  • CVE-2006-6357Dec 7, 2006
    Phpnews
    Phpnews
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in templates/cat_temp.php in PHPNews 1.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from…

  • CVE-2006-6112Dec 6, 2006
    Lifetype
    Lifetype
    risk 0.00cvss —epss 0.02

    LifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1) class/ and (2) plugins/, which allows remote attackers to obtain the installation path via a direct request to any of the scripts, as demonstrated by (a) bayesianfilter.class.php and…

  • CVE-2006-6305Dec 6, 2006
    Net SNMP
    Net SNMP
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity or rouser snmpd.conf tokens, causes Net-SNMP to grant write access to users or communities that only have read-only access.

  • CVE-2006-6333Dec 6, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.03

    The tr_rx function in ibmtr.c for Linux kernel 2.6.19 assigns the wrong flag to the ip_summed field, which allows remote attackers to cause a denial of service (memory corruption) via crafted packets that cause the kernel to interpret another field as an offset.

  • CVE-2006-6328Dec 6, 2006
    Torrentflux
    Torrentflux
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the alias_file parameter.

  • CVE-2006-6329Dec 6, 2006
    Torrentflux
    Torrentflux
    risk 0.03cvss —epss 0.02

    index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter.

  • CVE-2006-6330Dec 6, 2006
    Torrentflux
    Torrentflux
    risk 0.03cvss —epss 0.03

    index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter.

  • CVE-2006-6331Dec 6, 2006
    Torrentflux
    Torrentflux
    risk 0.00cvss —epss 0.01

    metaInfo.php in TorrentFlux 2.2, when $cfg["enable_file_priority"] is false, allows remote attackers to execute arbitrary commands via shell metacharacters (backticks) in the torrent parameter to (1) details.php and (2) startpop.php.

  • CVE-2006-5994Dec 6, 2006
    Microsoft
    Word
    risk 0.02cvss —epss 0.31

    Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X for Mac, and Works 2004, 2005, and 2006 allows remote attackers to execute arbitrary code via a Word document with a malformed string that triggers memory…

  • CVE-2006-6308Dec 6, 2006
    Symantec
    LiveState
    risk 0.00cvss —epss 0.00

    Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers…

  • CVE-2006-6309Dec 6, 2006
    IBM
    Tivoli Storage Manager
    risk 0.00cvss —epss 0.01

    Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations and cause a denial of service (crash) via a large index value in unspecified messages, a different issue than…

  • CVE-2006-6310Dec 6, 2006
    Microsoft
    Internet Explorer
    risk 0.04cvss —epss 0.15

    Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute value ("?") in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown;…

  • CVE-2006-6311Dec 6, 2006
    Microsoft
    Internet Explorer
    risk 0.05cvss —epss 0.26

    Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in an HTML table tag with a width value that is dynamically calculated using JavaScript.

  • CVE-2006-5855Dec 6, 2006
    IBM
    Tivoli Storage Manager
    risk 0.02cvss —epss 0.26

    Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte,…

  • CVE-2006-5856Dec 6, 2006
    Adobe Inc.
    Download Manager
    risk 0.01cvss —epss 0.14

    Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section name in the dm.ini file, which is populated via an AOM file.

  • CVE-2006-6301Dec 6, 2006
    Denyhosts
    Denyhosts
    risk 0.00cvss —epss 0.02

    DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name…

  • CVE-2006-6302Dec 6, 2006
    Fail2ban
    Fail2ban
    risk 0.00cvss —epss 0.02

    fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a…

  • CVE-2006-6303Dec 6, 2006
    Yukihiro Matsumoto
    Ruby
    risk 0.00cvss —epss 0.04

    The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.

  • CVE-2006-6142Dec 5, 2006
    SquirrelMail
    Squirrelmail
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) mailto parameter in (a) webmail.php, the (2) session and (3) delete_draft parameters in (b) compose.php, and (4)…

  • CVE-2006-6289Dec 5, 2006
    Woltlab
    Burning Board Lite
    risk 0.03cvss —epss 0.02

    Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbb_userid parameter to…

  • CVE-2006-6290Dec 5, 2006
    MailEnable
    Mailenable
    risk 0.00cvss —epss 0.03

    Multiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.30 and 2.0 through 2.33 allow remote authenticated users to cause a denial of service (crash) or…

  • CVE-2006-6291Dec 5, 2006
    MailEnable
    Mailenable
    risk 0.00cvss —epss 0.03

    Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service (crash) via a long argument…

  • CVE-2006-6292Dec 5, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Apple Airport Extreme firmware 0.1.27 in Mac OS X 10.4.8 on Mac mini, MacBook, and MacBook Pro with Core Duo hardware allows remote attackers to cause a denial of service (out-of-bounds memory access and kernel panic) and have possibly other security-related impact via certain…

  • CVE-2006-6293Dec 5, 2006
    FRISK Software
    F-Prot Antivirus
    risk 0.04cvss —epss 0.16

    Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294.

  • CVE-2006-6294Dec 5, 2006
    FRISK Software
    F-Prot Antivirus
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in FRISK Software F-Prot Antivirus before 4.6.7 have unspecified impact and attack vectors. NOTE: this might be related to CVE-2006-6293, but it is not clear due to the vagueness of the report.

  • CVE-2006-6295Dec 5, 2006
    Mxbb
    Mx Tinies
    risk 0.04cvss —epss 0.06

    PHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0 Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.

  • CVE-2006-6296Dec 5, 2006
    Microsoft
    Windows 2000
    risk 0.05cvss —epss 0.23

    The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via an RPC request that specifies a large…

  • CVE-2006-6297Dec 5, 2006
    KDE
    Kdegraphics
    risk 0.00cvss —epss 0.02

    Stack consumption vulnerability in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service (stack consumption) via a crafted EXIF section in a JPEG file, which results…

  • CVE-2006-6298Dec 5, 2006
    Metyus
    Okul Yonetim Sistemi
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) kullanici_ismi and (2) sifre parameters.

  • CVE-2006-6299Dec 5, 2006
    Novell
    Zenworks Asset Management
    risk 0.01cvss —epss 0.10

    Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted packets, which trigger a heap-based buffer overflow.

  • CVE-2006-6300Dec 5, 2006
    Cutephp
    Cutenews
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the result parameter.

  • CVE-2006-6306Dec 5, 2006
    Novell
    Client
    risk 0.00cvss —epss 0.00

    Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window.

  • CVE-2006-6307Dec 5, 2006
    Novell
    Client
    risk 0.00cvss —epss 0.02

    srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of service via a crafted packet to port 427 that triggers an access of pageable or invalid addresses using a higher interrupt request level (IRQL) than necessary.

  • CVE-2006-3893Dec 4, 2006
    Casio
    Photo Loader
    risk 0.01cvss —epss 0.06

    Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document.

  • CVE-2006-6243Dec 4, 2006
    Fipsasp
    Fipsshop
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) did parameter.

  • CVE-2006-6244Dec 4, 2006
    Freepbx
    Freepbx
    risk 0.00cvss —epss 0.02

    Coalescent Systems freePBX (formerly Asterisk Management Portal) before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in (1) CALLERID(name) or (2) CALLERID(number).

  • CVE-2006-6245Dec 4, 2006
    Photo Organizer
    Photo Organizer
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Photo Organizer (PO) 2.32b and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2006-6246Dec 4, 2006
    Photo Organizer
    Photo Organizer
    risk 0.00cvss —epss 0.02

    Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to (1) camera del, (2) camera edit, (3) folder/album deletion, (4) photo.move, (5) content.indexer, (6)…

  • CVE-2006-6247Dec 4, 2006
    Uapplication
    Uphotogallery
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL commands via the ci parameter to (1) slideshow.asp or (2) thumbnails.asp.

  • CVE-2006-6248Dec 4, 2006
    Gphotos
    Gphotos
    risk 0.00cvss —epss 0.01

    index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid rep parameter, which reveals the full path in an error message.

  • CVE-2006-6249Dec 4, 2006
    Chama Cargo
    Chama Cargo
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2006-6250Dec 4, 2006
    Songbird
    Songbird Media Player
    risk 0.03cvss —epss 0.03

    Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service (crash) via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked.