VYPR

CVEs

344,021 total · page 6493 of 6,881

AllCriticalHighKEV
  • CVE-2006-4323Aug 24, 2006
    Cityforfree
    Indexcity
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in list.php in CityForFree indexcity 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cate_id parameter.

  • CVE-2006-4324Aug 24, 2006
    Cityforfree
    Indexcity
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in add_url2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

  • CVE-2006-4325Aug 24, 2006
    Doika
    Doika Guestbook
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter.

  • CVE-2006-4326Aug 24, 2006
    Justsystems
    Formliner
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in Justsystem Ichitaro 9.x through 13.x, Ichitaro 2004, 2005, 2006, and Government 2006; Ichitaro for Linux; and FormLiner before 20060818 allows remote attackers to execute arbitrary code via long Unicode strings in a crafted document, as being…

  • CVE-2006-4327Aug 24, 2006
    CloudNine Interactive
    Links Manager
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in add_url.php in CloudNine Interactive Links Manager 2006-06-12 allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, or (3) keywords parameters.

  • CVE-2006-4328Aug 24, 2006
    CloudNine Interactive
    Links Manager
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in admin.php in CloudNine Interactive Links Manager 2006-06-12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter.

  • CVE-2006-4329Aug 24, 2006
    Shadows Rising Rpg
    Shadows Rising Rpg
    risk 0.04cvss —epss 0.08

    Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) core/includes/security.inc.php, (2) core/includes/smarty.inc.php, (3)…

  • CVE-2006-4312Aug 23, 2006
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.00

    Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable…

  • CVE-2006-4313Aug 23, 2006
    Cisco Systems, Inc.
    VPN 3000 series
    risk 0.04cvss —epss 0.12

    Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete…

  • CVE-2006-4314Aug 23, 2006
    Symantec
    Enterprise Security Manager
    risk 0.00cvss —epss 0.03

    The manager server in Symantec Enterprise Security Manager (ESM) 6 and 6.5.x allows remote attackers to cause a denial of service (hang) via a malformed ESM agent request.

  • CVE-2006-4315Aug 23, 2006
    SSH
    Tectia Server
    risk 0.00cvss —epss 0.00

    Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Server before 4.4.5, and Manager 2.12 and earlier, when running on Windows, might allow local users to gain privileges via a malicious program…

  • CVE-2006-4316Aug 23, 2006
    SSH
    Tectia Manager
    risk 0.00cvss —epss 0.00

    SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is obtained from a process listing when the "Restart" action is selected from the Management server GUI, which causes the agent to locate the pathname of the…

  • CVE-2006-2932Aug 23, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    A regression error in the restore_all code path of the 4/4GB split support for non-hugemem Linux kernels on Red Hat Linux Desktop and Enterprise Linux 4 allows local users to cause a denial of service (panic) via unspecified vectors.

  • CVE-2006-3745Aug 23, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2.4.33 allows local users to cause a denial of service (panic) and possibly gain root privileges via unknown attack vectors.

  • CVE-2006-4306Aug 23, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control (RBAC) settings in the "File System Management" profile.

  • CVE-2006-4307Aug 23, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified vectors involving profiles that permit running format with elevated privileges, a different issue than CVE-2006-4306 and…

  • CVE-2006-4308Aug 23, 2006
    Blackboard
    Blackboard
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript, VBScript, or HTML via (1) data, (2) vbscript, and (3)…

  • CVE-2006-4309Aug 23, 2006
    Ak Systems
    Windows Terminal
    risk 0.00cvss —epss 0.02

    VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to login and view RDP or Citrix sessions.

  • CVE-2006-4310Aug 23, 2006
    Mozilla Corporation
    Firefox
    risk 0.03cvss —epss 0.06

    Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI.

  • CVE-2006-4311Aug 23, 2006
    Sonium
    Enterprise Adressbook
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1_Adressbuch/delete.php.

  • CVE-2006-4262Aug 23, 2006
    Cscope
    Cscope
    risk 0.00cvss —epss 0.04

    Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long…

  • CVE-2006-3869Aug 23, 2006
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.41

    Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that…

  • CVE-2006-4295Aug 23, 2006
    Panda Project
    Activescan
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter.

  • CVE-2006-4296Aug 23, 2006
    BigAPE
    com_babackup
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allows remote attackers to include arbitrary files via the mosConfig_absolute_path parameter.

  • CVE-2006-4297Aug 23, 2006
    OsCommerce
    Oscommerce
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in shopping_cart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQL commands via id array parameters.

  • CVE-2006-4298Aug 23, 2006
    OsCommerce
    Oscommerce
    risk 0.00cvss —epss 0.02

    Multiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2 060817 allow remote attackers to determine existence of arbitrary files and disclose the installation path via a .. (dot dot) in unspecified parameters in the (1)…

  • CVE-2006-4299Aug 23, 2006
    Tiki
    Tiki
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party…

  • CVE-2006-4300Aug 23, 2006
    8pixel.net
    Simple Blog
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2006-4301Aug 23, 2006
    Microsoft
    Internet Explorer
    risk 0.06cvss —epss 0.39

    Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1)…

  • CVE-2006-4302Aug 23, 2006
    Sun Corporation
    Java Web Start
    risk 0.00cvss —epss 0.04

    The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities.

  • CVE-2006-4303Aug 23, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.01

    Race condition in (1) libnsl and (2) TLI/XTI API routines in Sun Solaris 10 allows remote attackers to cause a denial of service ("tight loop" and CPU consumption for listener applications) via unknown vectors related to TCP fusion (do_tcp_fusion).

  • CVE-2006-4282Aug 22, 2006
    Mikedeboer
    Mambowiki
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component (com_mambowiki) 0.9.6 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter.

  • CVE-2006-4283Aug 22, 2006
    Solmetra
    Spaw Editor
    risk 0.00cvss —epss 0.01

    Multiple PHP remote file inclusion vulnerabilities in SOLMETRA SPAW Editor 1.0.6 and 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the spaw_dir parameter in dialogs/ scripts including (1) a.php, (2) collorpicker.php, (3) img.php, (4) img_library.php,…

  • CVE-2006-4284Aug 22, 2006
    Lblog
    Lblog
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2006-4285Aug 22, 2006
    Fscripts
    Fantastic News
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter. NOTE: it was later reported that 2.1.5 is also affected.

  • CVE-2006-4286Aug 22, 2006
    Mambo (software)
    Mambo
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com_contentpublisher) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by…

  • CVE-2006-4287Aug 22, 2006
    Nes Game
    Nes Game
    risk 0.04cvss —epss 0.10

    Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) phphtmllib parameter to (a) phphtmllib/includes.php; tag_utils/ scripts including (b) divtag_utils.php, (c)…

  • CVE-2006-4288Aug 22, 2006
    Mambo (software)
    A6mambocredits Component
    risk 0.03cvss —epss 0.06

    PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component (com_a6mambocredits) 2.0.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. NOTE: some of these details…

  • CVE-2006-4289Aug 22, 2006
    Sony
    Vaio Media Server
    risk 0.00cvss —epss 0.06

    Buffer overflow in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2006-4290Aug 22, 2006
    Sony
    Vaio Media Server
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to gain sensitive information via unspecified vectors.

  • CVE-2006-4291Aug 22, 2006
    Phlymail
    Phlymail
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute arbitrary PHP code via a URL in the _PM_[path][handler] parameter.

  • CVE-2006-4292Aug 22, 2006
    Honeyd
    Honeyd
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Niels Provos Honeyd before 1.5b allows remote attackers to cause a denial of service (application crash) via certain Address Resolution Protocol (ARP) packets.

  • CVE-2006-4293Aug 22, 2006
    CPanel
    Cpanel
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter in dohtaccess.html, or the (2) file parameter in (a) editit.html or (b) showfile.html.

  • CVE-2006-4275Aug 21, 2006
    Mambo (software)
    Catalogshop Component
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in catalogshop.php in the CatalogShop component for Mambo (com_catalogshop) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

  • CVE-2006-4276Aug 21, 2006
    Tutti Nova
    Tutti Nova
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the TNLIB_DIR parameter to novalib/class.novaEdit.mysql.php.

  • CVE-2006-4277Aug 21, 2006
    Tutti Nova
    Tutti Nova
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the TNLIB_DIR parameter to (1) include/novalib/class.novaAdmin.mysql.php and (2) novalib/class.novaRead.mysql.php. NOTE: the…

  • CVE-2006-4278Aug 21, 2006
    Sportsphool
    Sportsphool
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the mainnav parameter.

  • CVE-2006-4279Aug 21, 2006
    Xennobb
    Xennobb
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in topic_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the icon_topic parameter.

  • CVE-2006-4280Aug 21, 2006
    Mambo (software)
    Anjel Component
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in anjel.index.php in ANJEL (formerly MaMML) Component (com_anjel) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by a third party,…

  • CVE-2006-4281Aug 21, 2006
    Arthur Konze Webdesign
    Akocomment
    risk 0.00cvss —epss 0.02

    PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module (com_akocomment) for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.