VYPR

CVEs

344,036 total · page 6485 of 6,881

AllCriticalHighKEV
  • CVE-2006-4571Sep 15, 2006
    Mozilla Corporation
    Thunderbird
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve…

  • CVE-2006-4340Sep 15, 2006
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote…

  • CVE-2006-4565Sep 15, 2006
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier."

  • CVE-2006-4566Sep 15, 2006
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.04

    Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character set ("[\\"), which leads to a…

  • CVE-2006-4567Sep 15, 2006
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and…

  • CVE-2006-4437Sep 14, 2006
    Tagger
    Tagger LE
    risk 0.04cvss —epss 0.08

    Eval injection vulnerability in Tagger LE allows remote attackers to execute arbitrary PHP code via the query string in (1) tags.php, (2) sign.php, and (3) admin/index.php.

  • CVE-2006-4800Sep 14, 2006
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.05

    Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c,…

  • CVE-2006-4801Sep 14, 2006
    Roxio
    Toast
    risk 0.00cvss —epss 0.00

    Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows local users to execute arbitrary code via temporary files, including dejavu_manual.rb, which are executed with raised privileges.

  • CVE-2006-4802Sep 14, 2006
    Symantec
    Client Security
    risk 0.00cvss —epss 0.00

    Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different…

  • CVE-2006-4803Sep 14, 2006
    Novell
    Identity Manager
    risk 0.00cvss —epss 0.01

    The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors involving certain environment variables and "code injection."

  • CVE-2006-4793Sep 14, 2006
    Tualblog
    Tualblog
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in icerik.asp in TualBLOG 1.0 allow remote attackers to execute arbitrary SQL commands, as demonstrated by the icerikno parameter.

  • CVE-2006-4794Sep 14, 2006
    E107
    E107
    risk 0.03cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string (PATH_INFO) in (1) contact.php, (2) download.php, (3) admin.php, (4) fpw.php, (5) news.php, (6) search.php, (7) signup.php, (8)…

  • CVE-2006-4795Sep 14, 2006
    Microfocus
    Hpux
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.11 and B.11.23 before 20060912 allows local users to cause a denial of service via unspecified vectors.

  • CVE-2006-4796Sep 14, 2006
    Snitz Forums 2000
    Snitz Forums 2000
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter (strtopicsortord variable).

  • CVE-2006-4797Sep 14, 2006
    CloudNine Interactive
    CJ Tag Board
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in tag.php in CloudNine Interactive CJ Tag Board 3.0 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a url BBcode tag in the cjmsg parameter.

  • CVE-2006-4798Sep 14, 2006
    Dws Systems Inc.
    SQL Ledger
    risk 0.00cvss —epss 0.01

    SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history.

  • CVE-2006-4799Sep 14, 2006
    FFmpeg
    Ffmpeg
    risk 0.00cvss —epss 0.03

    Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005-4048 and CVE-2006-2802.

  • CVE-2006-4790Sep 14, 2006
    GNU
    Gnutls
    risk 0.00cvss —epss 0.02

    verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and…

  • CVE-2006-4778Sep 14, 2006
    Creative Commons
    ccHost
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Creative Commons Tools ccHost before 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URL, which is used to populate the file ID. NOTE: Some details are obtained from third party information.

  • CVE-2006-4779Sep 14, 2006
    PhpBB
    Vitrax Premodded Phpbb
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-4780Sep 14, 2006
    Phpbb Xs
    Phpbb Xs
    risk 0.04cvss —epss 0.09

    PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-4781Sep 14, 2006
    Futuresoft
    TFTP Server Multithreaded
    risk 0.03cvss —epss 0.06

    Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded (MT) 1.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path…

  • CVE-2006-4782Sep 14, 2006
    Webspell
    Webspell
    risk 0.03cvss —epss 0.03

    src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication and gain sensitive information stored in the database via a modified userID parameter in a write action to admin/database.php.

  • CVE-2006-4783Sep 14, 2006
    Webspell
    Webspell
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in squads.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the squadID parameter.

  • CVE-2006-4784Sep 14, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) doc/index.php or (2) files/index.php.

  • CVE-2006-4785Sep 14, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.03

    SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls…

  • CVE-2006-4786Sep 14, 2006
    Moodle
    Moodle
    risk 0.00cvss —epss 0.01

    Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.

  • CVE-2006-4787Sep 14, 2006
    Alphamail
    Alphamail
    risk 0.00cvss —epss 0.00

    AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained from third party information.

  • CVE-2006-4788Sep 14, 2006
    Telekorn
    Signkorn Guestbook
    risk 0.04cvss —epss 0.07

    PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled and _SESSION[permission] parameter is set to "yes", allows remote attackers to execute arbitrary PHP code via a URL in the…

  • CVE-2006-4789Sep 14, 2006
    Open Movie Editor
    Open Movie Editor
    risk 0.03cvss —epss 0.01

    Buffer overflow in Open Movie Editor 0.0.20060901 allows local users to cause a denial of service (system crash) or execute arbitrary code via a long project name in an open_movie_editor_project XML tag.

  • CVE-2006-3454Sep 14, 2006
    Symantec
    Client Security
    risk 0.00cvss —epss 0.00

    Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in (1) Tamper Protection and (2) Virus Alert Notification messages.

  • CVE-2006-4724Sep 14, 2006
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the ColdFusion Flash Remoting Gateway in Adobe ColdFusion MX 7 and 7.01 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors involving a crafted command.

  • CVE-2006-4725Sep 14, 2006
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.01

    Adobe ColdFusion MX 7 and 7.01 allows local users to bypass security restrictions and call components (CFC) within a sandbox from CFML templates that are located outside of the sandbox.

  • CVE-2006-4726Sep 14, 2006
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 through 7.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a ColdFusion error page.

  • CVE-2006-4771Sep 14, 2006
    Jbc
    Forumjbc
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in haut.php in ForumJBC 4 allows remote attackers to inject arbitrary web script or HTML via the nb_connecte parameter.

  • CVE-2006-4772Sep 14, 2006
    Hotplug CMS
    CMS
    risk 0.00cvss —epss 0.01

    HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc.

  • CVE-2006-4773Sep 14, 2006
    Sun Corporation
    StorEdge 6130 Array Controllers
    risk 0.00cvss —epss 0.02

    Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service (controller reboot) via a flood of traffic on the LAN.

  • CVE-2006-4774Sep 14, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.05

    The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to cause a denial of service by sending a VTP version 1 summary frame with a VTP version field value of 2.

  • CVE-2006-4775Sep 14, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.05

    The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of 0x7FFFFFFF, which is incremented to 0x80000000 and is interpreted as a negative number in a signed…

  • CVE-2006-4776Sep 14, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to execute arbitrary code via a long VLAN name in a VTP type 2 summary advertisement.

  • CVE-2006-4777Sep 14, 2006
    Microsoft
    Ie
    risk 0.09cvss —epss 0.79

    Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations…

  • CVE-2006-4757Sep 13, 2006
    E107
    E107
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative users to execute arbitrary SQL commands via the (1) linkopentype, (2) linkrender, (3) link_class, and (4) link_id parameters in (a) links.php; the (5) searchquery…

  • CVE-2006-4758Sep 13, 2006
    PhpBB
    phpBB
    risk 0.00cvss —epss 0.02

    phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/admin_board.php with an avatar_path parameter ending in .php%00.

  • CVE-2006-4759Sep 13, 2006
    Punbb
    Punbb
    risk 0.00cvss —epss 0.02

    PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote authenticated administrative users to upload arbitrary files and execute code, as demonstrated by a query to admin_options.php with an avatars_dir parameter ending in %00. NOTE:…

  • CVE-2006-4760Sep 13, 2006
    Benjamin Pasero And Tobias Eichert
    Rssowl
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test…

  • CVE-2006-4761Sep 13, 2006
    Luke Hutteman
    Sharpreader
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Luke Hutteman SharpReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.

  • CVE-2006-4762Sep 13, 2006
    Rssreader
    Rssreader
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Ykoon RssReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.

  • CVE-2006-4763Sep 13, 2006
    IBM
    Domino Web Access
    risk 0.00cvss —epss 0.02

    IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.

  • CVE-2006-4764Sep 13, 2006
    Wtools
    Wtools
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.

  • CVE-2006-4765Sep 13, 2006
    Netgear
    Dg834gt
    risk 0.00cvss —epss 0.01

    NETGEAR DG834GT Wireless ADSL router running firmware 1.01.28 allows attackers to cause a denial of service (device hang) via a long string in the username field in the login window.