VYPR

CVEs

344,036 total · page 6487 of 6,881

AllCriticalHighKEV
  • CVE-2006-4707Sep 12, 2006
    MyBB
    Mybb
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in admin/global.php (aka the Admin CP login form) in MyBB (aka MyBulletinBoard) 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the query string ($_SERVER[PHP_SELF]).

  • CVE-2006-4708Sep 12, 2006
    Vikingboard
    Vikingboard
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.

  • CVE-2006-4709Sep 12, 2006
    Vikingboard
    Vikingboard
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands via the s parameter.

  • CVE-2006-4710Sep 12, 2006
    Newsgator
    Feeddemon
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite.

  • CVE-2006-4711Sep 12, 2006
    Sage
    Sage
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite.

  • CVE-2006-4712Sep 12, 2006
    Sage
    Sage
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use…

  • CVE-2006-4713Sep 12, 2006
    Psywerks
    Puma
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter.

  • CVE-2006-4714Sep 12, 2006
    Spoonlabs
    Vivvo Article Management CMS
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classified_path parameter.

  • CVE-2006-4715Sep 12, 2006
    Spoonlabs
    Vivvo Article Management CMS
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2006-4716Sep 12, 2006
    Fire Soft Board
    Fire Soft Board
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter.

  • CVE-2006-4717Sep 12, 2006
    University of Washington
    Pubcookie
    risk 0.00cvss —epss 0.02

    The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before 1.6.2.1 2006/09/07 allows remote attackers to bypass authentication requirements and spoof identities of arbitrary users via unspecified…

  • CVE-2006-4718Sep 12, 2006
    Korviblog
    Korviblog
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in livre_or.php in KorviBlog 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) prenom, (2) emailFrom, or (3) body parameters.

  • CVE-2006-4719Sep 12, 2006
    Myabracadaweb
    Myabracadaweb
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to (1) index.php or (2) pop.php.

  • CVE-2006-4720Sep 12, 2006
    Mcgallery
    Mcgallery Pro
    risk 0.03cvss —epss 0.04

    PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter.

  • CVE-2006-4721Sep 12, 2006
    Ccleague
    Pro Sports CMS
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence and trailing null (%00) byte in the language Cookie parameter, as demonstrated by executing PHP code…

  • CVE-2006-4722Sep 12, 2006
    Openbb
    Openbb
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) index.php and possibly (2) collector.php.

  • CVE-2006-4723Sep 12, 2006
    Raidenhttpd
    Raidenhttpd
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_globals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter.

  • CVE-2006-4623Sep 11, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.04

    The Unidirectional Lightweight Encapsulation (ULE) decapsulation component in dvb-core/dvb_net.c in the dvb driver in the Linux kernel 2.6.17.8 allows remote attackers to cause a denial of service (crash) via an SNDU length of 0 in a ULE packet.

  • CVE-2006-4674Sep 11, 2006
    Dokuwiki
    Dokuwiki
    risk 0.00cvss —epss 0.02

    Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execute arbitrary PHP code via the X-FORWARDED-FOR HTTP header, which is stored in config.php.

  • CVE-2006-4675Sep 11, 2006
    Dokuwiki
    Dokuwiki
    risk 0.00cvss —epss 0.02

    Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors.

  • CVE-2006-4676Sep 11, 2006
    TIBCO Software
    Rendezvous
    risk 0.03cvss —epss 0.01

    TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file.

  • CVE-2006-4677Sep 11, 2006
    Phpopenchat
    Phpopenchat
    risk 0.00cvss —epss 0.02

    PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was disputed by a third-party researcher who stated that the _REQUEST parameters…

  • CVE-2006-4678Sep 11, 2006
    Evolution
    Evolution
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the _NE[AbsPath] parameter in (1) install.php and (2) migrateNE2toNE3.php.

  • CVE-2006-4679Sep 11, 2006
    Dokuwiki
    Dokuwiki
    risk 0.00cvss —epss 0.02

    DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug".

  • CVE-2006-4680Sep 11, 2006
    Canon
    Imagerunner 2620
    risk 0.00cvss —epss 0.01

    The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information.

  • CVE-2006-4681Sep 11, 2006
    IBM
    Director
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the file parameter.

  • CVE-2006-4682Sep 11, 2006
    IBM
    Director
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving (1) malformed WMI CIM server requests and (2) malformed packets.

  • CVE-2006-4683Sep 11, 2006
    IBM
    Director
    risk 0.00cvss —epss 0.01

    IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE.

  • CVE-2006-4671Sep 11, 2006
    Fscripts
    Fantastic News
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter, a different vector than CVE-2006-1154.

  • CVE-2006-4672Sep 11, 2006
    Profitcode
    Ppalcart
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote attackers to execute arbitrary PHP code via a URL in the (1) proMod parameter to (a) index.php, or the (2) docroot parameter to (b) index.php or (c)…

  • CVE-2006-4673Sep 11, 2006
    PHP-Fusion
    Phpfusion
    risk 0.03cvss —epss 0.01

    Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, which allows remote attackers to conduct SQL injection attacks via the _SERVER[REMOTE_ADDR] parameter to news.php.

  • CVE-2006-4294Sep 9, 2006
    TWiki
    Twiki
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.

  • CVE-2006-4650Sep 9, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which…

  • CVE-2006-4651Sep 9, 2006
    Threesquared.net
    PHP Download Script
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in download/index.php, and possibly download.php, in threesquared.net (aka Ben Speakman) Php download allows remote attackers to overwrite arbitrary local files via .. (dot dot) sequence in the file parameter.

  • CVE-2006-4652Sep 9, 2006
    Amazing Little Poll
    Amazing Little Picture Poll
    risk 0.00cvss —epss 0.01

    (1) Amazing Little Poll and (2) Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lp_admin.php.

  • CVE-2006-4653Sep 9, 2006
    Amazing Little Poll
    Amazing Little Picture Poll
    risk 0.00cvss —epss 0.01

    (1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lp_settings file (lp_settings.inc or…

  • CVE-2006-4654Sep 9, 2006
    Easy Address Book Web Server
    Easy Address Book Web Server
    risk 0.03cvss —epss 0.02

    Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service (crash) or "compromise the server" via encoded format string specifiers in the query string.

  • CVE-2006-4655Sep 9, 2006
    Sun Corporation
    Solaris
    risk 0.03cvss —epss 0.01

    Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long _XKB_CHARSET environment variable value.

  • CVE-2006-4656Sep 9, 2006
    Spaw
    SPAW Editor PHP Edition
    risk 0.04cvss —epss 0.11

    PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: CVE analysis suggests that this issue is actually in a third…

  • CVE-2006-4657Sep 9, 2006
    Panda Project
    Panda Platinum Internet Security
    risk 0.00cvss —epss 0.00

    Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying (1) WebProxy.exe or (2) PAVSRV51.EXE.

  • CVE-2006-4658Sep 9, 2006
    Panda Project
    Panda Platinum Internet Security
    risk 0.00cvss —epss 0.02

    Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns.

  • CVE-2006-4659Sep 9, 2006
    Panda Project
    Panda Platinum Internet Security
    risk 0.00cvss —epss 0.02

    The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable…

  • CVE-2006-4660Sep 9, 2006
    Icq
    Icq Toolbar
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the (1) title and (2) description elements…

  • CVE-2006-4661Sep 9, 2006
    Icq
    Icq Toolbar
    risk 0.00cvss —epss 0.01

    AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) does not properly validate the origin of the configuration web page (options2.html), which allows user-assisted remote attackers to provide a web page that contains disguised checkboxes that trick the user into…

  • CVE-2006-4662Sep 9, 2006
    AOL
    ICQ Pro
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.

  • CVE-2006-4663HigSep 9, 2006
    Linux
    Kernel
    risk 0.51cvss 7.8epss 0.00

    The source code tar archive of the Linux kernel 2.6.16, 2.6.17.11, and possibly other versions specifies weak permissions (0666 and 0777) for certain files and directories, which might allow local users to insert Trojan horse source code that would be used during the next kernel…

  • CVE-2006-4664Sep 9, 2006
    Premod
    Shadow
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in includes/functions_portal.php in Premod Shadow 2.7.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-4665Sep 9, 2006
    Mkportal
    Mkportal
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter, possibly related to the PHP_SELF variable. NOTE: Some details are obtained from third party information.

  • CVE-2006-4666Sep 9, 2006
    Newsscript.co.uk
    Newsscript
    risk 0.03cvss —epss 0.04

    Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to execute arbitrary PHP code via a URL in the (1) ide parameter in (a) article.php; or the (2) pwfile parameter in (b) delete.php, (c) modify.php, (d)…

  • CVE-2006-4667Sep 9, 2006
    Runcms
    Runcms
    risk 0.00cvss —epss 0.02

    Multiple SQL injection vulnerabilities in RunCMS 1.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) uid parameter in (a) class/sessions.class.php, and the (2) timezone_offset and (3) umode parameters in (b) class/xoopsuser.php.