VYPR

CVEs

344,036 total · page 6482 of 6,881

AllCriticalHighKEV
  • CVE-2006-4973Sep 25, 2006
    Perpetual Motion Interactive Systems
    DotNetNuke
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter.

  • CVE-2006-4974Sep 25, 2006
    Ipswitch, Inc.
    WS_FTP Limited Edition
    risk 0.03cvss —epss 0.04

    Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command.

  • CVE-2006-4975Sep 25, 2006
    Yahoo
    Messenger
    risk 0.00cvss —epss 0.01

    Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service.

  • CVE-2006-4976Sep 25, 2006
    Adodb
    ADOdb Library for PHP
    risk 0.00cvss —epss 0.01

    The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for (1) server.php, (2) adodb-errorpear.inc.php, (3) adodb-iterator.inc.php, (4) adodb-pear.inc.php, (5) adodb-perf.inc.php, (6)…

  • CVE-2006-4977Sep 25, 2006
    Walter Beschmout
    Phpquiz
    risk 0.03cvss —epss 0.03

    Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/img_quiz folder via the (a) upload, (b) ok_update, (c) image,…

  • CVE-2006-4978Sep 25, 2006
    Walter Beschmout
    Phpquiz
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI.

  • CVE-2006-4979Sep 25, 2006
    Walter Beschmout
    Phpquiz
    risk 0.03cvss —epss 0.03

    Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings.

  • CVE-2006-4965Sep 25, 2006
    Apple Inc.
    Quicktime
    risk 0.04cvss —epss 0.12

    Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original…

  • CVE-2006-4966Sep 25, 2006
    Chumpsoft
    Phpquestionnaire
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[phpQRootDir] parameter.

  • CVE-2006-4950Sep 23, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.06

    Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote…

  • CVE-2006-4951Sep 23, 2006
    Neon WebMail for Java
    Neon WebMail for Java
    risk 0.00cvss —epss 0.03

    Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail message with a JSP file attachment, which is stored under the web root with a predictable filename.

  • CVE-2006-4952Sep 23, 2006
    Neon
    Neon
    risk 0.04cvss —epss 0.08

    The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between different mail folders, specified by the folderid and tofolderid parameters, via the ID parameter.

  • CVE-2006-4953Sep 23, 2006
    Neon
    Neon
    risk 0.03cvss —epss 0.04

    Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via the (1) adr_sortkey and (2) adr_sortkey_desc parameters in the (a) addrlist servlet, and the (3) sortkey and (4) sortkey_desc parameters in…

  • CVE-2006-4954Sep 23, 2006
    Neosys
    Neon Webmail
    risk 0.04cvss —epss 0.08

    The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify information of arbitrary users, as demonstrated by modifying (1) passwords and (2) permissions, (3) viewing profile settings, and (4)…

  • CVE-2006-4955Sep 23, 2006
    Neon
    Neon WebMail for Java
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the (1) savefolder and (2) savefilename parameters.

  • CVE-2006-4956Sep 23, 2006
    Neon
    Neon
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote attackers to inject arbitrary web script or HTML via the in_name parameter, as used by the Name field.

  • CVE-2006-4957Sep 23, 2006
    The Myreview System
    Myreview
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php.

  • CVE-2006-4958Sep 23, 2006
    Sun Corporation
    Secure Global Desktop
    risk 0.00cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3)…

  • CVE-2006-4959Sep 23, 2006
    Sun Corporation
    Secure Global Desktop
    risk 0.00cvss —epss 0.02

    Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3)…

  • CVE-2006-4960Sep 23, 2006
    Blue Dragon
    PHP Blue Dragon
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter, which is reflected in an error message resulting from a failed SQL query.

  • CVE-2006-4961Sep 23, 2006
    Blue Dragon
    PHP Blue Dragon
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php.

  • CVE-2006-4962Sep 23, 2006
    Blue Dragon
    PHP Blue Dragon
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt parameter, as demonstrated by executing PHP code in a log file.

  • CVE-2006-4963Sep 23, 2006
    Exponent
    Exponent CMS
    risk 0.04cvss —epss 0.07

    Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code…

  • CVE-2006-4964Sep 23, 2006
    Maxdev
    Mdpro
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbitrary web script or HTML via (1) vectors that bypass the XSS protection mechanisms of the pnVarCleanFromInput function, and (2) unspecified vectors related to…

  • CVE-2006-4945Sep 23, 2006
    Cardway
    Digitalwebshop
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _PHPLIB[libdir] parameter to (1) rechnung.php or (2) prepend.php.

  • CVE-2006-4946Sep 23, 2006
    Dmitry Sheiko
    Business Card Web Builder
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.

  • CVE-2006-4947Sep 23, 2006
    Drupal
    Search Keyword Module
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output."

  • CVE-2006-4948Sep 23, 2006
    Prosysinfo
    TFTP Server Tftpdwin
    risk 0.07cvss —epss 0.54

    Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from…

  • CVE-2006-4949Sep 23, 2006
    Drupal
    profile_pages
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Drupal 4.6 Site Profile Directory (profile_pages.module) before 1.1.2.1 and the Drupal 4.7 Site Profile Directory (profile_pages.module) before 1.2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified…

  • CVE-2006-4935Sep 23, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.

  • CVE-2006-4936Sep 23, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.

  • CVE-2006-4937Sep 23, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if debugging is disabled, which might allow remote authenticated users to obtain sensitive information by triggering the messages.

  • CVE-2006-4938Sep 23, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message.

  • CVE-2006-4939Sep 23, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname.

  • CVE-2006-4940Sep 23, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addresses and Moodle account names) via a find action.

  • CVE-2006-4941Sep 23, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose parameter in files/index.php and (2) the sub parameter in doc/index.php.

  • CVE-2006-4942Sep 23, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote authenticated users to write LaTeX or MimeTeX output files to the top level of the dataroot directory via (a) filter/algebra/pix.php or (b) filter/tex/pix.php.

  • CVE-2006-4943Sep 23, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbitrary local URIs, which allows remote attackers to obtain sensitive information via the jump parameter.

  • CVE-2006-4944Sep 23, 2006
    ProgSys
    ProgSys
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdns_basedir parameter.

  • CVE-2006-4899Sep 22, 2006
    Ca
    eTrust Security Command Center
    risk 0.04cvss —epss 0.10

    The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" (single quote) in the PIProfile function, which leaks the path in an error message.

  • CVE-2006-4900Sep 22, 2006
    Ca
    eTrust Security Command Center
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, allows remote authenticated users to read and delete arbitrary files via ".." sequences in the eSCCAdHocHtmlFile parameter to eSMPAuditServlet, which is not…

  • CVE-2006-4901Sep 22, 2006
    Ca
    eTrust Audit
    risk 0.04cvss —epss 0.10

    Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.

  • CVE-2006-3507Sep 21, 2006
    Apple Inc.
    Mac OS X
    risk 0.03cvss —epss 0.01

    Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physically proximate attackers to execute arbitrary code by injecting crafted frames into a wireless network.

  • CVE-2006-3508Sep 21, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attackers to cause a denial of service (crash), gain privileges, and execute arbitrary code via a crafted frame that is not properly handled during scan cache updates.

  • CVE-2006-3509Sep 21, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate attackers to cause a denial of service (crash) or execute arbitrary code in third-party wireless software that uses the API via crafted frames.

  • CVE-2006-4915Sep 21, 2006
    Innovate
    Portal
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in index.php in Innovate Portal 2.0 allows remote attackers to inject arbitrary web script or HTML via the content parameter.

  • CVE-2006-4916Sep 21, 2006
    Dora Emlak
    Tekman Portal
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in uye_profil.asp in Tekman Portal (TR) 1.0 allows remote attackers to execute arbitrary SQL commands via the uye_id parameter.

  • CVE-2006-4917Sep 21, 2006
    Pt News
    Pt News
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in search.php in PT News 1.7.8 allows remote attackers to inject arbitrary web script or HTML via the pgname parameter.

  • CVE-2006-4918Sep 21, 2006
    Simple Discussion Board
    Simple Discussion Board
    risk 0.04cvss —epss 0.08

    Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) env_dir parameter to (a) blank.php, (b) admin.php, or (c) builddb.php, and the (2) script_root parameter to blank.php.

  • CVE-2006-4919Sep 21, 2006
    Siteatschool
    Siteatschool
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter.