VYPR

CVEs

344,040 total · page 6471 of 6,881

AllCriticalHighKEV
  • CVE-2006-5509Oct 25, 2006
    Woltlab
    Burning Book
    risk 0.03cvss —epss 0.01

    Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requests that store PHP code in a database that is later processed by eval, as demonstrated using SQL injection via the n parameter.

  • CVE-2006-5510Oct 25, 2006
    PH Pexplorer
    PH Pexplorer
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files via ".." sequences in the Language cookie, as demonstrated by uploading a .gif file that contains PHP code.

  • CVE-2006-5511Oct 25, 2006
    Jaxultrabb
    Jaxultrabb
    risk 0.03cvss —epss 0.02

    Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum…

  • CVE-2006-5512Oct 25, 2006
    Zwahlen
    Online Shop
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

  • CVE-2006-5488Oct 25, 2006
    Xchangeboard
    Xchangeboard
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the loginNick parameter during login. NOTE: the provenance of this information is unknown; the details are…

  • CVE-2006-5489Oct 25, 2006
    Rim
    Blackberry Enterprise Server
    risk 0.00cvss —epss 0.01

    Research in Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service (application hang) via a deleted recurrent meeting instance when changing the attendee's…

  • CVE-2006-5490Oct 25, 2006
    Segue CMS
    CMS
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Segue Content Management System (CMS) before 1.5.8 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2006-5491Oct 25, 2006
    UltraCMS
    UltraCMS
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.

  • CVE-2006-5492Oct 25, 2006
    Maarch
    Maarch
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Maerys Archive (Maarch) before 2.0.1 allows remote authenticated users to obtain sensitive information (document contents) via unspecified attack vectors related to "grants."

  • CVE-2006-5493Oct 25, 2006
    Digitalhive
    Digitalhive
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

  • CVE-2006-5494Oct 25, 2006
    PHP-Nuke
    pandaBB module
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the (1) adminpath or (2) basepath parameters. NOTE: this issue might overlap…

  • CVE-2006-5495Oct 25, 2006
    Trawler
    Trawler Web CMS
    risk 0.03cvss —epss 0.04

    Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_red2 parameter to (a) _msdazu_pdata/redaktion/artikel/up/index.php; (b) addtort.php, (c) colorpik2.php, (d)…

  • CVE-2006-5496Oct 25, 2006
    Timothy Claason
    Knowledgebank
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) index.php, (2) addknowledge.php, and (3) addscreenshot.php.

  • CVE-2006-5497Oct 25, 2006
    Segue CMS
    CMS
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter.

  • CVE-2006-5498Oct 25, 2006
    Segue CMS
    CMS
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter.

  • CVE-2006-5499Oct 25, 2006
    Serendipity
    Serendipity
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.

  • CVE-2006-5500Oct 25, 2006
    Xchangeboard
    Xchangeboard
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) userNick or (2) password parameters. NOTE: the…

  • CVE-2006-5482Oct 24, 2006
    FreeBSD
    FreeBSD
    risk 0.03cvss —epss 0.01

    ufs_vnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type that is not VREG, VLNK or VDIR, which is not defined in POSIX.

  • CVE-2006-5483Oct 24, 2006
    FreeBSD
    FreeBSD
    risk 0.03cvss —epss 0.01

    p1003_1b.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by setting a scheduler policy, which should only be settable by root.

  • CVE-2006-5484Oct 24, 2006
    SSH
    Tectia Client
    risk 0.00cvss —epss 0.01

    SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA…

  • CVE-2006-5485Oct 24, 2006
    Speedberg
    Speedberg
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in SpeedBerg 1.2beta1 allow remote attackers to execute arbitrary PHP code via a URL in the SPEEDBERG_PATH parameter to (1) entrancePage.tpl.php, (2) generalToolBox.tlb.php, (3) myToolBox.tlb.php, (4) scriplet.inc.php, (5)…

  • CVE-2006-5486Oct 24, 2006
    Sun Corporation
    iPlanet Messaging Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages.

  • CVE-2006-4177Oct 24, 2006
    Novell
    Edirectory
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended.

  • CVE-2006-5471Oct 24, 2006
    Softerra
    PHP Developer Library
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in example/lib/grid3.lib.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the (1) cfg_dir and (2) lib_dir parameters.

  • CVE-2006-5472Oct 24, 2006
    Softerra
    PHP Developer Library
    risk 0.04cvss —epss 0.09

    PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_dir parameter in (1) lib/registry.lib.php, (2) lib/sqlcompose.lib.php, and (3) lib/sqlsearch.lib.php.

  • CVE-2006-5473Oct 24, 2006
    Softerra
    PHP Developer Library
    risk 0.00cvss —epss 0.02

    PHP remote file inclusion vulnerability in Description.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via the lib_dir parameter. NOTE: this issue is disputed by CVE as of 20061023, since there is no Description.php…

  • CVE-2006-5474Oct 24, 2006
    Oneorzero
    Helpdesk
    risk 0.00cvss —epss 0.02

    The "forgot password" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current timestamp with the username, which allows remote attackers to gain access as an arbitrary user by requesting a password reset.

  • CVE-2006-5475Oct 24, 2006
    Drupal
    Drupal
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the XML parser in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allow remote attackers to inject arbitrary web script or HTML via a crafted RSS feed.

  • CVE-2006-5476Oct 24, 2006
    Drupal
    Drupal
    risk 0.00cvss —epss 0.02

    Cross-site request forgery (CSRF) vulnerability in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows remote attackers to perform unauthorized actions as an arbitrary user via unspecified vectors.

  • CVE-2006-5477Oct 24, 2006
    Drupal
    Drupal
    risk 0.00cvss —epss 0.01

    Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows form submissions to be redirected, which allows remote attackers to obtain arbitrary form information via a crafted URL.

  • CVE-2006-5478Oct 24, 2006
    Novell
    Edirectory
    risk 0.10cvss —epss 0.84

    Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL…

  • CVE-2006-5479Oct 24, 2006
    Novell
    Edirectory
    risk 0.00cvss —epss 0.01

    The NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allows remote attackers to cause an unspecified denial of service via a certain "NCP Fragment."

  • CVE-2006-5480Oct 24, 2006
    2le.net
    Castor PHP Web Builder
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to execute arbitrary PHP code via the rootpath parameter.

  • CVE-2006-5481Oct 24, 2006
    2le.net
    Castor PHP Web Builder
    risk 0.00cvss —epss 0.01

    Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP code via the rootpath parameter in (1) lib/code.php, (2) lib/dbconnect.php, (3) lib/error.php, (4) lib/menu.php, and other unspecified…

  • CVE-2006-4509Oct 24, 2006
    Novell
    Edirectory
    risk 0.01cvss —epss 0.07

    Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request.

  • CVE-2006-4510Oct 24, 2006
    Novell
    Edirectory
    risk 0.01cvss —epss 0.06

    The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid…

  • CVE-2006-4573Oct 24, 2006
    GNU
    Screen
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences.

  • CVE-2006-3455Oct 23, 2006
    Symantec
    Client Security
    risk 0.00cvss —epss 0.00

    The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the…

  • CVE-2006-5443Oct 23, 2006
    XIAO Gang
    Www Interactive Mathematics Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in XIAO Gang WWW Interactive Mathematics Server (WIMS) before 3.60 allows remote attackers to modify unspecified data via unspecified vectors involving "variable rights."

  • CVE-2006-5444Oct 23, 2006
    Digium
    Asterisk
    risk 0.10cvss —epss 0.85

    Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer…

  • CVE-2006-5445Oct 23, 2006
    Asterisk
    Asterisk
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors that result in the creation of "a real pvt…

  • CVE-2006-5446Oct 23, 2006
    Casinosoft
    Casino Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter.

  • CVE-2006-5447Oct 23, 2006
    Dev
    Dev Web Management System
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in DEV Web Management System (WMS) 1.5 allows remote attackers to inject arbitrary web script or HTML via the action parameter.

  • CVE-2006-5448Oct 23, 2006
    Microsoft
    Windows Digital Rights Management
    risk 0.01cvss —epss 0.12

    The drmstor.dll ActiveX object in Microsoft Windows Digital Rights Management System (DRM) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long parameter to the StoreLicense function, which triggers "memory corruption" and…

  • CVE-2006-5449Oct 23, 2006
    Horde (software)
    Ingo H3
    risk 0.00cvss —epss 0.02

    procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule.

  • CVE-2006-5450Oct 23, 2006
    Kinesis
    Kinesis Interactive Cinema System
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.asp in Kinesis Interactive Cinema System (KICS) CMS allows remote attackers to execute arbitrary SQL commands via the (1) txtUsername (user) or (2) txtPassword (pass) parameters.

  • CVE-2006-5451Oct 23, 2006
    Torrentflux
    Torrentflux
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) file, and (3) users array variables in (a) admin.php, which are not properly handled when the administrator views the…

  • CVE-2006-5452Oct 23, 2006
    Microfocus
    Tru64
    risk 0.00cvss —epss 0.01

    Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a (aka attachment) argument.

  • CVE-2006-5453Oct 23, 2006
    Mozilla Corporation
    Bugzilla
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1, H2, and H3 HTML…

  • CVE-2006-5454Oct 23, 2006
    Mozilla Corporation
    Bugzilla
    risk 0.00cvss —epss 0.02

    Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote attackers to obtain (1) the description of arbitrary attachments by viewing the attachment in "diff" mode in attachment.cgi, and (2) the deadline field by viewing the…