VYPR

CVEs

344,038 total · page 6477 of 6,881

AllCriticalHighKEV
  • CVE-2006-5170Oct 10, 2006
    Fedoraproject
    Fedora
    risk 0.00cvss —epss 0.04

    pam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pam_authenticate function to…

  • CVE-2006-5174Oct 10, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which…

  • CVE-2006-5175Oct 10, 2006
    Buffalo Technology
    HD-HTGL
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete arbitrary data via unspecified vectors.

  • CVE-2006-5176Oct 10, 2006
    MailEnable
    Mailenable
    risk 0.00cvss —epss 0.05

    Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via "the signature field of NTLM Type 1 messages".

  • CVE-2006-5177Oct 10, 2006
    MailEnable
    Mailenable
    risk 0.04cvss —epss 0.07

    The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or (2) cause a denial of service via crafted base64 encoded NTLM Type 1…

  • CVE-2006-5178Oct 10, 2006
    PHP
    PHP
    risk 0.03cvss —epss 0.01

    Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the open_basedir check and before the file is opened by the…

  • CVE-2006-5179Oct 10, 2006
    Intoto
    Igateway VPN
    risk 0.00cvss —epss 0.01

    Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using…

  • CVE-2006-5180Oct 10, 2006
    Newswriter
    Newswriter SW
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONF_SYSTEM[server_path] parameter, a different vector than…

  • CVE-2006-5181Oct 10, 2006
    Joshua Muheim
    Phpmywebmin
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the target parameter in (1) change_preferences2.php, (2) create_file.php, (3) upload_local.php, and (4) upload_multi.php,…

  • CVE-2006-5182Oct 10, 2006
    Dan Jensen
    Travelsized CMS
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setup_folder parameter.

  • CVE-2006-5183Oct 10, 2006
    Dayfox Designs
    Blog
    risk 0.00cvss —epss 0.01

    Multiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the slogin parameter in the (1) adminlog.php, (2) postblog.php, (3) index.php, or (4) index2.php script in /edit.

  • CVE-2006-5184Oct 10, 2006
    Pkr Internet
    Taskjitsu
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid.

  • CVE-2006-5185Oct 10, 2006
    Hamweather
    Hamweather
    risk 0.00cvss —epss 0.04

    Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string, which is supplied to an eval function call within the do_parse_code function.

  • CVE-2006-5186Oct 10, 2006
    Phpmyprofiler
    Phpmyprofiler
    risk 0.03cvss —epss 0.04

    PHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pmp_rel_path parameter.

  • CVE-2006-5187Oct 10, 2006
    Bulletin Board Ace
    Bulletin Board Ace
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace (BBaCE) 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-5188Oct 10, 2006
    Webgeneius
    Goop Gallery
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain files or directories via unspecified vectors.

  • CVE-2006-5189Oct 10, 2006
    Klinza
    Klinza Professional CMS
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in funzioni/lib/show_hlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appl[APPL] parameter.

  • CVE-2006-5190Oct 10, 2006
    OsCommerce
    Oscommerce
    risk 0.04cvss —epss 0.06

    Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d)…

  • CVE-2006-5191Oct 10, 2006
    PhpBB
    phpBB
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-5192Oct 10, 2006
    Phpgreetz
    Phpgreetz
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPGREETZ_INCLUDE_DIR parameter.

  • CVE-2006-5193Oct 10, 2006
    Wikyblog
    Wikyblog
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includeDir parameter.

  • CVE-2006-5194Oct 10, 2006
    WordPress
    Net2ftp
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in net2ftp 0.93 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2006-5195Oct 10, 2006
    Wheatblog
    Wheatblog
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Wheatblog 1.0 and 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

  • CVE-2006-5196Oct 10, 2006
    Motorola
    Surfboard
    risk 0.04cvss —epss 0.07

    The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (device crash) via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter.

  • CVE-2006-5197Oct 10, 2006
    Pdshoppro
    Pdshoppro
    risk 0.00cvss —epss 0.01

    PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) /pdshoppro.mdb, (2) /data/pdshoppro.mdb, or (3) /shoppro/data/pdshoppro.mdb.

  • CVE-2006-5201Oct 10, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.03

    Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and earlier; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice, when using an…

  • CVE-2006-5202Oct 10, 2006
    Linksys
    Wrt54g
    risk 0.03cvss —epss 0.04

    Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue…

  • CVE-2006-5203Oct 10, 2006
    Invision Power Services
    Power Board
    risk 0.00cvss —epss 0.01

    Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage…

  • CVE-2006-5204Oct 10, 2006
    Invision Power Services
    Power Board
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in action_admin/member.php in Invision Power Board (IPB) 2.1.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a reference to a script in the avatar setting, which can be leveraged for a cross-site…

  • CVE-2006-5205Oct 10, 2006
    Invision Power Services
    Gallery
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is used.

  • CVE-2006-5206Oct 10, 2006
    Invision Power Services
    Gallery
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command in the gallery automodule is used.

  • CVE-2006-5207Oct 10, 2006
    Phpmyteam
    Phpmyteam
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in images/smileys/smileys_packs.php in phpMyTeam 2.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the smileys_dir parameter.

  • CVE-2006-5208Oct 10, 2006
    Deltascripts
    PHP Classifieds
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via (1) the catid_search parameter in search.php and (2) the catid parameter in index.php.

  • CVE-2006-5209Oct 10, 2006
    PhpBB
    phpBB
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-5211Oct 10, 2006
    Trend Micro
    Officescan Corporate Edition
    risk 0.00cvss —epss 0.03

    Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP…

  • CVE-2006-5212Oct 10, 2006
    Trend Micro
    Officescan
    risk 0.00cvss —epss 0.02

    Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename…

  • CVE-2006-5213Oct 10, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Sun Solaris 10 before 20061006 uses "incorrect and insufficient permission checks" that allow local users to intercept or spoof packets by creating a raw socket on a link aggregation (network device aggregation).

  • CVE-2006-5214Oct 10, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local…

  • CVE-2006-5215Oct 10, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a…

  • CVE-2006-5216Oct 10, 2006
    Sergey Lyubka
    Simple Httpd
    risk 0.08cvss —epss 0.63

    Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI.

  • CVE-2006-5217Oct 10, 2006
    Emek
    Emek Portal
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in giris_yap.asp in Emek Portal 2.1 allows remote attackers to execute arbitrary SQL commands by simultaneously injecting into the user name and pass fields in uyegiris.asp, also known as the Kullanici Adi (k_a) and Sifre (sifre) parameters.

  • CVE-2006-5218Oct 10, 2006
    OpenBSD
    OpenBSD
    risk 0.00cvss —epss 0.00

    Integer overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service (crash), gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl.

  • CVE-2006-5219Oct 10, 2006
    Moodle
    Moodle
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter.

  • CVE-2006-5220Oct 10, 2006
    Objective Development
    Webyep
    risk 0.04cvss —epss 0.09

    Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the webyep_sIncludePath in (1) files in the programm/lib/ directory including (a) WYApplication.php, (b) WYDocument.php,…

  • CVE-2006-3741Oct 10, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The perfmonctl system call (sys_perfmonctl) in Linux kernel 2.4.x and 2.6 before 2.6.18, when running on Itanium systems, does not properly track the reference count for file descriptors, which allows local users to cause a denial of service (file descriptor consumption).

  • CVE-2006-4511Oct 5, 2006
    Novell
    Groupwise
    risk 0.00cvss —epss 0.03

    Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in…

  • CVE-2006-5144Oct 5, 2006
    Olate
    Olatedownload
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the description_small parameter.

  • CVE-2006-5145Oct 5, 2006
    Olate
    Olatedownload
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php.

  • CVE-2006-5146Oct 5, 2006
    Y Blog
    Yblog
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) funk.php, or the (2) action parameter in (b) tem.php and (c) uss.php.

  • CVE-2006-5147Oct 5, 2006
    VAMP
    Webmail
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in wamp_dir/setup/yesno.phtml in VAMP Webmail 2.0beta1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the no_url parameter.