VYPR

CVEs

344,070 total · page 6459 of 6,882

AllCriticalHighKEV
  • CVE-2006-4514Nov 30, 2006
    Libgsf
    Libgsf
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE document, which causes the…

  • CVE-2006-6178Nov 30, 2006
    Trend Micro
    Officescan
    risk 0.00cvss —epss 0.03

    Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\Wizard.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1087 allows remote attackers to execute arbitrary code via unknown attack vectors.

  • CVE-2006-6179Nov 30, 2006
    Trend Micro
    Officescan
    risk 0.00cvss —epss 0.03

    Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1089 allows remote attackers to execute arbitrary code via unknown attack vectors.

  • CVE-2006-4396Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create and modify arbitrary files via unspecified vectors, possibly relating to a symlink attack.

  • CVE-2006-4398Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 through 10.4.8 allow local users to execute arbitrary code via crafted service requests.

  • CVE-2006-4400Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and earlier allow user-assisted attackers to execute arbitrary code via crafted font files.

  • CVE-2006-4401Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in CFNetwork in Mac OS 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary FTP commands via a crafted FTP URI.

  • CVE-2006-4402Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary code by browsing directories containing crafted .DS_Store files.

  • CVE-2006-4403Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.04

    The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will crash when a login failure occurs with a valid user name, which allows remote attackers to cause a denial of service (crash) and enumerate valid usernames.

  • CVE-2006-4404Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    The Installer application in Apple Mac OS X 10.4.8 and earlier, when used by a user with Admin credentials, does not authenticate the user before installing certain software requiring system privileges.

  • CVE-2006-4406Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.01cvss —epss 0.07

    Buffer overflow in PPP on Apple Mac OS X 10.4.x up to 10.4.8 and 10.3.x up to 10.3.9, when PPPoE is enabled, allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2006-4407Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize encryption ciphers when negotiating the strongest shared cipher, which causes Secure Transport to user a weaker cipher that makes it easier for remote attackers to decrypt traffic.

  • CVE-2006-4408Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    The Security Framework in Apple Mac OS X 10.4 through 10.4.8 allows remote attackers to cause a denial of service (resource consumption) via certain public key values in an X.509 certificate that requires extra resources during signature verification. NOTE: this issue may be…

  • CVE-2006-4409Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple Mac OS X 10.4 through 10.4.8 retrieve certificate revocation lists (CRL) when an HTTP proxy is in use, which could cause the system to accept certificates that have been revoked.

  • CVE-2006-4410Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    The Security Framework in Apple Mac OS X 10.3.9, and 10.4.x before 10.4.7, does not properly search certificate revocation lists (CRL), which allows remote attackers to access systems by using revoked certificates.

  • CVE-2006-4411Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    The VPN service in Apple Mac OS X 10.3.x through 10.3.9 and 10.4.x through 10.4.8 does not properly clean the environment when executing commands, which allows local users to gain privileges via unspecified vectors.

  • CVE-2006-4412Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.05

    WebKit in Apple Mac OS X 10.3.x through 10.3.9 and 10.4 through 10.4.8 allows remote attackers to execute arbitrary code via a crafted HTML file, which accesses previously deallocated objects.

  • CVE-2006-6173Nov 30, 2006
    Apple Inc.
    Mac OS X
    risk 0.03cvss —epss 0.01

    Buffer overflow in the shared_region_make_private_np function in vm/vm_unix.c in Mac OS X 10.4.6 and earlier allows local users to execute arbitrary code via (1) a small range count, which causes insufficient memory allocation, or (2) a large number of ranges in the…

  • CVE-2006-6174Nov 30, 2006
    Tdiary
    Tdiary
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary web script or HTML via the conf parameter in (1) tdiary.rb and (2) skel/conf.rhtml.

  • CVE-2006-6175Nov 30, 2006
    Horde (software)
    Kronolith H4
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to include arbitrary files and execute PHP code via a .. (dot dot) sequence in the view parameter.

  • CVE-2006-6176Nov 30, 2006
    Blogn
    Blogn
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in admin.php in Blogn before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

  • CVE-2006-6177Nov 30, 2006
    Neocrome
    Seditio
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in system/core/users/users.profile.inc.php in Neocrome Seditio 1.10 and earlier allows remote authenticated users to execute arbitrary SQL commands via a double-url-encoded id parameter to users.php that begins with a valid filename, as demonstrated…

  • CVE-2006-6170Nov 30, 2006
    Proftpd
    Proftpd
    risk 0.01cvss —epss 0.17

    Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.

  • CVE-2006-6171Nov 30, 2006
    Proftpd
    Proftpd
    risk 0.01cvss —epss 0.10

    ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in the configuration file, which leads to an off-by-two buffer underflow. NOTE: in November 2006, the role of CommandBufferSize was originally associated with…

  • CVE-2006-6172Nov 30, 2006
    MPlayer
    Mplayer
    risk 0.00cvss —epss 0.05

    Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/xine-lib, (2) MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute…

  • CVE-2006-6169Nov 29, 2006
    Gnupg
    Gnupg
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the make_printable_string function to return a…

  • CVE-2006-4099Nov 29, 2006
    Businessobjects
    Crystal Enterprise
    risk 0.00cvss —epss 0.02

    Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of other users via WCSID cookie values.

  • CVE-2006-6166Nov 29, 2006
    Ryan Demmer
    Joomla Content Editor
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.0.4 for Joomla! (com_jce), without the 20060821 jce_patch, allows remote attackers to inject arbitrary web script or HTML via the mosConfig_live_site…

  • CVE-2006-6167Nov 29, 2006
    Active PHP Bookmarks
    Active PHP Bookmarks
    risk 0.00cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks (APB) 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APB_SETTINGS['apb_path'] parameter in (1) apb_common.php or (2) apb.php. NOTE:…

  • CVE-2006-6168Nov 29, 2006
    Tiki
    Tiki
    risk 0.00cvss —epss 0.03

    tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email field, related to lack of "a minimal check on email."

  • CVE-2006-6162Nov 29, 2006
    Tiki
    Tiki
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in tiki-edit_structures.php in TikiWiki 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the pageAlias parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third…

  • CVE-2006-6163Nov 29, 2006
    Tiki
    Tiki
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in tiki-setup_base.php in TikiWiki before 1.9.7 allows remote attackers to inject arbitrary JavaScript via unspecified parameters.

  • CVE-2006-6164Nov 29, 2006
    OpenBSD
    OpenBSD
    risk 0.00cvss —epss 0.00

    The _dl_unsetenv function in loader.c in the ELF ld.so in OpenBSD 3.9 and 4.0 does not properly remove duplicate environment variables, which allows local users to pass dangerous variables such as LD_PRELOAD to loading processes, which might be leveraged to gain privileges.

  • CVE-2006-6165HigNov 29, 2006
    FreeBSD
    FreeBSD
    risk 0.51cvss 7.8epss 0.00

    ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing certain environment variables to loading processes. NOTE: this issue has been disputed by a third party,…

  • CVE-2006-4518Nov 28, 2006
    Qbik
    Wingate
    risk 0.00cvss —epss 0.02

    Qbik WinGate 6.1.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a DNS request with a self-referencing compressed name pointer, which triggers an infinite loop.

  • CVE-2006-6113Nov 28, 2006
    Monkey Boards
    Monkey Boards
    risk 0.00cvss —epss 0.02

    Monkey Boards 0.3.5 allows remote attackers to obtain sensitive information via direct requests to (1) include/admin_auth.inc.php and (2) include/engine/class.compiler.php, which reveals the full path in an error message. NOTE: this issue is only an exposure if the…

  • CVE-2006-6145Nov 28, 2006
    Cryptocard
    Crypto Server
    risk 0.00cvss —epss 0.00

    CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials in plaintext in UninstallerData\installvariables.properties, which has insecure permissions and allows local users to obtain the credentials. NOTE: The provenance of this information is unknown; the details are…

  • CVE-2006-6146Nov 28, 2006
    Takeshi Kanno
    Haru Free PDF Library
    risk 0.00cvss —epss 0.01

    Buffer overflow in the HPDF_Page_Circle function in hpdf_page_operator.c in Takeshi Kanno Haru Free PDF Library (libharu2, aka libharu) 2.0.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via certain arguments that yield a large…

  • CVE-2006-6147Nov 28, 2006
    Jiros
    Links Manager
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to openlink.asp or the (2) CategoryID parameter to viewlinks.asp.

  • CVE-2006-6148Nov 28, 2006
    Jiros
    Links Manager
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the (1) lName, (2) lURL, (3) lImage, and (4) lDescription parameters. NOTE: some of these details are obtained from…

  • CVE-2006-6149Nov 28, 2006
    Jiros
    Faq Manager
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID parameter.

  • CVE-2006-6150Nov 28, 2006
    Owllib
    Owllib
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the OWLLIB_ROOT parameter.

  • CVE-2006-6151Nov 28, 2006
    Messagerie Locale
    Messagerie Locale
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in centre.php in Messagerie Locale as of 20061127 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2006-6152Nov 28, 2006
    Vspin.net
    Classified System
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to (a) cat.asp, or the (2) keyword, (3) order, (4) sort, (5) menuSelect, or (6) state parameter to (b) search.asp.

  • CVE-2006-6153Nov 28, 2006
    Vspin.net
    Classified System
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp.

  • CVE-2006-6154Nov 28, 2006
    Hscripts
    Hiox Star Rating System Script
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.

  • CVE-2006-6155Nov 28, 2006
    Hscripts
    Hiox Star Rating System Script
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in addrating.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ipadd or (2) url parameter. NOTE: The provenance of this information is unknown; the details are…

  • CVE-2006-6156Nov 28, 2006
    Hscripts
    Hiox Star Rating System Script
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in auth/message.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF). NOTE: The provenance of this information is unknown; the details…

  • CVE-2006-6157Nov 28, 2006
    Michaelis Freunde
    Contentnow
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in index.php in ContentNow 1.39 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter. NOTE: this issue can be leveraged for path disclosure with an invalid pageid parameter.

  • CVE-2006-6158Nov 28, 2006
    Inverseflow
    Help Desk
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the (1) id or email parameter to ticketview.php, or…