VYPR

CVEs

344,038 total · page 6475 of 6,881

AllCriticalHighKEV
  • CVE-2006-5210Oct 16, 2006
    Ciphertrust
    Ironmail
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded "../" sequences ("%252e%252e/").

  • CVE-2006-5295Oct 16, 2006
    ClamAV
    Clamav
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location."

  • CVE-2006-4154Oct 16, 2006
    Apache
    mod_tcl
    risk 0.01cvss —epss 0.16

    Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.

  • CVE-2006-5296Oct 16, 2006
    Microsoft
    Powerpoint
    risk 0.05cvss —epss 0.25

    PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as…

  • CVE-2006-5297Oct 16, 2006
    Mutt
    Mutt
    risk 0.00cvss —epss 0.00

    Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.

  • CVE-2006-5298Oct 16, 2006
    Mutt
    Mutt
    risk 0.00cvss —epss 0.00

    The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and…

  • CVE-2006-5291Oct 16, 2006
    Spaw
    spaw2
    risk 0.03cvss —epss 0.04

    PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: CVE analysis suggests that this issue is actually in a third party…

  • CVE-2006-5292Oct 16, 2006
    Exhibit Engine
    Exhibit Engine
    risk 0.03cvss —epss 0.06

    PHP remote file inclusion vulnerability in photo_comment.php in Exhibit Engine 1.5 RC 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter.

  • CVE-2006-5293Oct 16, 2006
    Phpoutsourcing
    Noahs Classifieds
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter.

  • CVE-2006-5294Oct 16, 2006
    Phplist
    Phplist
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscribeemail parameter.

  • CVE-2006-5287Oct 13, 2006
    Xeobook
    Xeobook
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL commands via (1) the User-Agent HTTP header, or the (2) gb_entry_text, (3) gb_location, (4) gb_fullname, or (5) gb_sex parameters.

  • CVE-2006-5288Oct 13, 2006
    Cisco Systems, Inc.
    2700 Wireless Location Appliance
    risk 0.00cvss —epss 0.03

    Cisco 2700 Series Wireless Location Appliances before 2.1.34.0 have a default administrator username "root" and password "password," which allows remote attackers to obtain administrative privileges, aka Bug ID CSCsb92893.

  • CVE-2006-5289Oct 13, 2006
    Vtiger
    CRM
    risk 0.04cvss —epss 0.08

    Multiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the calpath parameter to (1) modules/Calendar/admin/update.php, (2) modules/Calendar/admin/scheme.php, or (3)…

  • CVE-2006-5290Oct 13, 2006
    Xerox
    Workcentre
    risk 0.00cvss —epss 0.03

    The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."

  • CVE-2006-5280Oct 13, 2006
    Leicestershire
    Communityportals
    risk 0.00cvss —epss 0.02

    PHP remote file inclusion vulnerability in includes/import-archive.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cp_root_path parameter.

  • CVE-2006-5281Oct 13, 2006
    N@board
    n@board
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in naboard_pnr.php in n@board 3.1.9e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skin parameter.

  • CVE-2006-5282Oct 13, 2006
    Sh News
    Sh News
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to (1) report.php, (2) archive.php, (3) comments.php, (4) init.php, or (5) news.php.

  • CVE-2006-5283Oct 13, 2006
    Minichat
    Minichat
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter.

  • CVE-2006-5284Oct 13, 2006
    PHP News Reader
    PHP News Reader
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in auth/phpbb.inc.php in Shen Cheng-Da PHP News Reader (aka pnews) 2.6.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CFG[auth_phpbb_path] parameter.

  • CVE-2006-5285Oct 13, 2006
    Xeoport
    Xeoport
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in index.php in XeoPort 0.81, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the xp_body_text parameter.

  • CVE-2006-5286Oct 13, 2006
    Novell
    Bordermanager
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in IKE.NLM in Novell BorderManager 3.8 allows attackers to cause a denial of service (crash) via unknown attack vectors related to "VPN issues" for certain "IKE and IPsec settings."

  • CVE-2006-5251Oct 12, 2006
    Deep CMS
    Deep CMS
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP code via a URL in the ConfigDir parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

  • CVE-2006-5252Oct 12, 2006
    Webmedia Explorer
    Webmedia Explorer
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHP code via a URL in the path_include parameter.

  • CVE-2006-5253Oct 12, 2006
    Dayana Networks
    Phponline
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in strload.php in Dayana Networks phpOnline (aka PHP-Online) 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the LangFile parameter.

  • CVE-2006-5254Oct 12, 2006
    Mark Van Bellen
    Detailed User Registration (com_registration_detailed)
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in registration_detailed.inc.php in Mark Van Bellen Detailed User Registration (com_registration_detailed), aka regdetailed, 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path…

  • CVE-2006-5255Oct 12, 2006
    Greg Neustaetter
    Gcards
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in addnews.php in Greg Neustaetter gCards 1.13 allows remote attackers to execute arbitrary PHP code via a URL in the languagefile parameter. NOTE: another researcher has observed that languageFile is defined before use. CVE analysis as…

  • CVE-2006-5256Oct 12, 2006
    Claroline
    Claroline
    risk 0.03cvss —epss 0.04

    PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.

  • CVE-2006-5257Oct 12, 2006
    Bpg Infotech
    Content Management System
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System (CMS) 0.9.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_cache_path parameter.

  • CVE-2006-5258Oct 12, 2006
    Asbru Web Content Editor
    Asbru Website Manager
    risk 0.00cvss —epss 0.02

    The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before…

  • CVE-2006-5259Oct 12, 2006
    Compteur
    Compteur
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary PHP code via a URL in the folder parameter.

  • CVE-2006-5260Oct 12, 2006
    Compteur
    Compteur
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in compteur.php in Compteur 2 allows remote attackers to execute arbitrary PHP code via a URL in the cp parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

  • CVE-2006-5261Oct 12, 2006
    Phpmynews
    Phpmynews
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cfg_include_dir parameter in (1) disp_form.php3, (2) disp_smileys.php3, (3) little_news.php3, and (4) index.php3 in include/.

  • CVE-2006-5262Oct 12, 2006
    Hastymail
    Hastymail2
    risk 0.03cvss —epss 0.03

    CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary IMAP commands via a CRLF sequence in a mailbox name. NOTE: the attack crosses privilege boundaries if the IMAP server configuration…

  • CVE-2006-5263Oct 12, 2006
    Phpmyagenda
    Phpmyagenda
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter, as demonstrated by a parameter value naming an Apache HTTP Server log file…

  • CVE-2006-5264Oct 12, 2006
    Mysqldumper
    Mysqldumper
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary web script or HTML via the db parameter.

  • CVE-2006-4813Oct 12, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked.

  • CVE-2006-4516Oct 12, 2006
    FreeBSD
    FreeBSD
    risk 0.03cvss —epss 0.01

    Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout…

  • CVE-2006-4842Oct 12, 2006
    Sun Corporation
    Solaris
    risk 0.04cvss —epss 0.08

    The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.

  • CVE-2006-5237Oct 12, 2006
    Blue Smiley Organizer
    Blue Smiley Organizer
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2006-5238Oct 12, 2006
    Blue Smiley Organizer
    Blue Smiley Organizer
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors.

  • CVE-2006-5239Oct 12, 2006
    Expblog
    Expblog
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in eXpBlog 0.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the query string (PHP_SELF) in kalender.php or (2) the captcha_session_code parameter in pre_details.php.

  • CVE-2006-5240Oct 12, 2006
    Docmint
    Docmint
    risk 0.03cvss —epss 0.04

    PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the MY_ENV[BASE_ENGINE_LOC] parameter.

  • CVE-2006-5241Oct 12, 2006
    Opendock
    Easy Gallery
    risk 0.03cvss —epss 0.04

    Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) file.php; (2) find_user.php, (3) lib_user.php, (4)…

  • CVE-2006-5242Oct 12, 2006
    Etomite
    Etomite
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2006-5243Oct 12, 2006
    Opendock
    Easy Doc
    risk 0.03cvss —epss 0.04

    Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) down_stat.php, (2) file.php, (3) find_file.php, (4)…

  • CVE-2006-5244Oct 12, 2006
    Opendock
    Easy Blog
    risk 0.03cvss —epss 0.04

    Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) down_stat.php, (2) file.php, (3) find_file.php, (4)…

  • CVE-2006-5245Oct 12, 2006
    Eazy Cart
    Eazy Cart
    risk 0.00cvss —epss 0.02

    Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a direct request for admin/home/index.php, and possibly other PHP scripts under admin/.

  • CVE-2006-5246Oct 12, 2006
    Eazy Cart
    Eazy Cart
    risk 0.00cvss —epss 0.01

    Eazy Cart allows remote attackers to change prices and other critical fields via unspecified vectors to easycart.php, probably including the price parameter. NOTE: some details are obtained from third party information.

  • CVE-2006-5247Oct 12, 2006
    Eazy Cart
    Eazy Cart
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Eazy Cart allow remote attackers to inject arbitrary web script or HTML via easycart.php, possibly related to the (1) des and (2) qty parameters in an add action, and via other unspecified vectors. NOTE: some details are…

  • CVE-2006-5248Oct 12, 2006
    Eazy Cart
    Eazy Cart
    risk 0.00cvss —epss 0.02

    Eazy Cart stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a customer database via a direct request for admin/config/customer.dat. NOTE: the provenance of this information is unknown; the details are…