VYPR

CVEs

344,038 total · page 6474 of 6,881

AllCriticalHighKEV
  • CVE-2006-5364Oct 18, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.1 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote authenticated attack vectors, aka Vuln# OC4J05.

  • CVE-2006-5365Oct 18, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors, aka Vuln# FORM02.

  • CVE-2006-5366Oct 18, 2006
    Oracle Corporation
    Collaboration Suite
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and remote attack vectors related to (1) Oracle Containers for J2EE, aka Vuln# OC4J01, and (2) Oracle Process Mgmt & Notification, aka OPMN01.

  • CVE-2006-5367Oct 18, 2006
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS03 in Oracle Applications Framework, (2) APPS04 in Oracle Applications Technology Stack, and (3) APPS05 in…

  • CVE-2006-5368Oct 18, 2006
    Oracle Corporation
    Exchange
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Exchange component in Oracle E-Business Suite 6.2.4 has unknown impact and remote attack vectors, aka Vuln# APPS01.

  • CVE-2006-5369Oct 18, 2006
    Oracle Corporation
    Application Object Library
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Application Object Library in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS02.

  • CVE-2006-5370Oct 18, 2006
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS06 for Oracle CRM Gateway for Mobile Devices and (2) APPS08 for Oracle iStore.

  • CVE-2006-5371Oct 18, 2006
    Oracle Corporation
    Email Center
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Email Center component in Oracle E-Business Suite 11.5.9 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS07.

  • CVE-2006-5372Oct 18, 2006
    Oracle Corporation
    Application Object Library
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS11 for Oracle Universal Work Queue and (2) APPS12 for Oracle Application Object Library.

  • CVE-2006-5373Oct 18, 2006
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Install Base component in Oracle E-Business Suite 11.5.10CU1 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS13.

  • CVE-2006-5374Oct 18, 2006
    Oracle Corporation
    Pharmaceutical
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Pharmaceutical Applications 4.5.1 has unknown impact and remote authenticated attack vectors, aka Vuln# PHAR01.

  • CVE-2006-5375Oct 18, 2006
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.46 GA, 8.47 GA, 8.48 GA, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote attack vectors, aka Vuln# (1) PSE01, (2) PSE02, and (3) PSE03.

  • CVE-2006-5376Oct 18, 2006
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA, 8.22.11, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) PSE04, (2) PSE06, (3) PSE07, and…

  • CVE-2006-5377Oct 18, 2006
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in PeopleSoft component in Oracle PeopleSoft Enterprise 8.80 GA, 8.90 GA, 8.8 Bundle 11, and 8.9 Bundle 4 has unknown impact and remote authenticated attack vectors, aka Vuln# PSE05.

  • CVE-2006-5378Oct 18, 2006
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote authenticated attack vectors, aka Vuln# JDE01.

  • CVE-2006-5173Oct 17, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS…

  • CVE-2006-4819Oct 17, 2006
    Opera
    Opera
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address).

  • CVE-2006-5327Oct 17, 2006
    Apple Inc.
    Xcode
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar…

  • CVE-2006-5328Oct 17, 2006
    Apple Inc.
    Xcode
    risk 0.00cvss —epss 0.00

    OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.

  • CVE-2006-5330Oct 17, 2006
    Adobe Inc.
    Flashplayer
    risk 0.02cvss —epss 0.23

    CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request…

  • CVE-2006-4342MedOct 17, 2006
    Red Hat
    Enterprise Linux Server
    risk 0.36cvss 5.5epss 0.00

    The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running the shmat function on an shm at the same time that shmctl is removing that shm (IPC_RMID), which prevents a spinlock from being unlocked.

  • CVE-2006-5313Oct 17, 2006
    Hastymail
    Hastymail2
    risk 0.00cvss —epss 0.01

    Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtp_message parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from…

  • CVE-2006-5314Oct 17, 2006
    TribunaLibre
    TribunaLibre
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter.

  • CVE-2006-5315Oct 17, 2006
    Phplibre
    Registrotl
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter.

  • CVE-2006-5316Oct 17, 2006
    Phplibre
    Registrotl
    risk 0.03cvss —epss 0.03

    registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat.

  • CVE-2006-5317Oct 17, 2006
    Eboli
    eboli
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via a URL in the contentSpecial parameter.

  • CVE-2006-5318Oct 17, 2006
    Nayco
    Jasmine
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in index.php in Nayco JASmine (aka Jasmine-Web) allows remote attackers to execute arbitrary PHP code via an FTP URL in the section parameter.

  • CVE-2006-5319Oct 17, 2006
    Toxi
    Foafgen
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in redir.php in Foafgen 0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the foaf parameter.

  • CVE-2006-5320Oct 17, 2006
    Album Photo Sans Nom
    Album Photo Sans Nom
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary files via the img parameter.

  • CVE-2006-5321Oct 17, 2006
    Tincan
    Phplist
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2006-5322Oct 17, 2006
    Phplist
    Phplist
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2006-5323Oct 17, 2006
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors, related to a "possible security exposure," aka PK29360.

  • CVE-2006-5324Oct 17, 2006
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374.

  • CVE-2006-5325Oct 17, 2006
    Dimitri Seitz
    Security Suite IP Logger
    risk 0.00cvss —epss 0.01

    Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) mkb.php, (2) iplogger.php, (3) admin_board2.php, or (4)…

  • CVE-2006-5326Oct 17, 2006
    Prillian
    Prillian French
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in language/lang/lang_contact_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: the provenance of this information is…

  • CVE-2006-5309Oct 17, 2006
    PhpBB
    Prillian French
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-5310Oct 17, 2006
    Phpmyconferences
    Phpmyconferences
    risk 0.03cvss —epss 0.06

    PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the…

  • CVE-2006-5311Oct 17, 2006
    Buzlas
    Buzlas
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Buzlas 2006-1 Full allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-5312Oct 17, 2006
    PhpBB
    Ajax Shoutbox
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-5299Oct 17, 2006
    Gcontact
    Gcontact
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Gcontact 0.6.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2006-5300Oct 17, 2006
    Microfocus
    Version Control Agent
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP Version Control Agent before 2.1.5 allows remote authenticated users to obtain "unauthorized access" to a remote Repository Manager account and potentially gain privileges via unspecified vectors.

  • CVE-2006-5301Oct 17, 2006
    PhpBB
    Spamblockermod
    risk 0.03cvss —epss 0.05

    PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-5302Oct 17, 2006
    Redaction System
    Redaction System
    risk 0.04cvss —epss 0.09

    Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang_prefix parameter to (a) conn.php, (b) sesscheck.php, (c) wap/conn.php, or (d) wap/sesscheck.php, or the (2) lang parameter…

  • CVE-2006-5303Oct 17, 2006
    Securecomputing
    Safeword Remoteaccess
    risk 0.00cvss —epss 0.00

    Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading (1) base-64 encoded data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and (2) plaintext data in…

  • CVE-2006-5304Oct 17, 2006
    IncCMS
    Core
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter.

  • CVE-2006-5305Oct 17, 2006
    PhpBB
    Lat2cyr
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-5306Oct 17, 2006
    PhpBB
    Journals System Module
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/journals_delete.php, (2) includes/journals_post.php,…

  • CVE-2006-5307Oct 17, 2006
    Afgb
    Afgb Guestbook
    risk 0.04cvss —epss 0.09

    Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the Htmls parameter in (1) add.php, (2) admin.php, (3) look.php, or (4) re.php.

  • CVE-2006-5308Oct 17, 2006
    Open Conference Systems
    Open Conference Systems
    risk 0.03cvss —epss 0.04

    Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter in (1) include/theme.inc.php or (2) include/footer.inc.php.

  • CVE-2006-4182Oct 16, 2006
    ClamAV
    Clamav
    risk 0.05cvss —epss 0.20

    Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when…