VYPR

CVEs

343,963 total · page 6501 of 6,880

AllCriticalHighKEV
  • CVE-2006-3806Jul 27, 2006
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object,…

  • CVE-2006-3807Jul 27, 2006
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling "named JavaScript…

  • CVE-2006-3840Jul 27, 2006
    Iss
    Realsecure Network Sensor
    risk 0.00cvss —epss 0.02

    The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service…

  • CVE-2006-3897Jul 27, 2006
    Microsoft
    Internet Explorer
    risk 0.05cvss —epss 0.27

    Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property.

  • CVE-2006-3898Jul 27, 2006
    Microsoft
    Internet Explorer
    risk 0.05cvss —epss 0.24

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the Click method of the Internet.HHCtrl.1 ActiveX object before initializing the URL, which triggers a null dereference.

  • CVE-2006-3899Jul 27, 2006
    Microsoft
    Internet Explorer
    risk 0.05cvss —epss 0.24

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the stringToBinary function of the CEnroll.CEnroll.2 ActiveX object with a long second argument, which triggers an invalid memory access inside…

  • CVE-2006-3900Jul 27, 2006
    TP Book
    TP-Book
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter.

  • CVE-2006-3901Jul 27, 2006
    Axway
    Email Firewall
    risk 0.00cvss —epss 0.04

    Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a (1) file or (2) directory with a long LHA extended header, (3) an LHA archive in which the…

  • CVE-2006-3633Jul 27, 2006
    Ossp
    Shiela
    risk 0.00cvss —epss 0.03

    OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed.

  • CVE-2006-3819Jul 27, 2006
    TWiki
    Twiki
    risk 0.03cvss —epss 0.04

    Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a parameter name starting with "TYPEOF".

  • CVE-2006-3838Jul 27, 2006
    Eiqnetworks
    Enterprise Security Analyzer
    risk 0.09cvss —epss 0.73

    Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Sidewinder, (b) iPolicy Security Manager, (c) Astaro Report Manager, (d) Fortinet FortiReporter, (e) Top Layer Network Security Analyzer, and…

  • CVE-2006-3878Jul 27, 2006
    Opsware
    Network Automation System
    risk 0.00cvss —epss 0.00

    Opsware Network Automation System (NAS) 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql.

  • CVE-2006-3879Jul 27, 2006
    Mikmod
    Mikmod Sound System
    risk 0.04cvss —epss 0.09

    Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF TRACKER (GT2) module file with a large (0xffffffff) comment length value in an XCOM chunk.

  • CVE-2006-3880Jul 27, 2006
    Microsoft
    Windows 2000
    risk 0.05cvss —epss 0.28

    Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in…

  • CVE-2006-3881Jul 27, 2006
    Musicbox
    Musicbox
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI. NOTE: the id parameter in index.php, and the type and show parameters in a top…

  • CVE-2006-3882Jul 27, 2006
    Musicbox
    Musicbox
    risk 0.00cvss —epss 0.01

    Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

  • CVE-2006-3883Jul 27, 2006
    Gonafish
    Linkscaffe
    risk 0.03cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the tablewidth parameter in (a) counter.php; (2) the newdays parameter in (b) links.php; and the (3) tableborder, (4) menucolor,…

  • CVE-2006-3884Jul 27, 2006
    Gonafish
    Linkscaffe
    risk 0.03cvss —epss 0.04

    Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) offset and (2) limit parameters, (3) newdays parameter in a new action, and the (4) link_id parameter in a deadlink action. NOTE:…

  • CVE-2006-3885Jul 27, 2006
    Checkpoint
    Firewall 1
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encoded .. (dot dot) in the URL on TCP port 18264.

  • CVE-2006-3886Jul 27, 2006
    Musicbox
    Musicbox
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-level URI. NOTE: the start parameter/search action is already covered by…

  • CVE-2006-3678Jul 26, 2006
    Tippingpoint
    Tipping Point
    risk 0.00cvss —epss 0.02

    TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback (L2FB)", causing a denial of service (page fault), via a malformed packet.

  • CVE-2006-3119Jul 25, 2006
    Fbida
    Fbi
    risk 0.00cvss —epss 0.02

    The fbgs framebuffer Postscript/PDF viewer in fbi before 2.01 has a typo that prevents a filter from working correctly, which allows user-assisted attackers to bypass the filter and execute malicious Postscript commands.

  • CVE-2006-3841Jul 25, 2006
    Trustwave
    Webscarab
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error…

  • CVE-2006-3842Jul 25, 2006
    Zoho
    Virtual Office
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Zoho Virtual Office 3.2 Build 3210 allows remote attackers to execute arbitrary web script or HTML via an HTML message.

  • CVE-2006-3843Jul 25, 2006
    Mambo (software)
    Mambo Calendar
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in com_calendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter.

  • CVE-2006-3844Jul 25, 2006
    Quick 'n Easy Web Server
    FTP Server
    risk 0.00cvss —epss 0.04

    Buffer overflow in Quick 'n Easy FTP Server 3.0 allows remote authenticated users to execute arbitrary commands via a long argument to the LIST command, a different issue than CVE-2006-2027.

  • CVE-2006-3845Jul 25, 2006
    Rarlab
    Winrar
    risk 0.04cvss —epss 0.08

    Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive.

  • CVE-2006-3846Jul 25, 2006
    Mambo (software)
    Mambo Multibanners
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

  • CVE-2006-3847Jul 25, 2006
    MoSpray
    MoSpray
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in (1) admin.php, and possibly (2) details.php, (3) modify.php, (4) newgroup.php, (5) newtask.php, and (6) rss.php, in MoSpray (aka com_mospray) 1.8 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the basedir…

  • CVE-2006-3848Jul 25, 2006
    Krischan Jodies
    IP Calculator
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in CGI wrapper for IP Calculator (IPCalc) 0.40 allows remote attackers to inject arbitrary web script or HTML via the URI (REQUEST_URI environment variable), which is used in the actionurl variable.

  • CVE-2006-3849Jul 25, 2006
    Warzone
    Warzone 2100
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in Warzone 2100 and Warzone Resurrection 2.0.3 and earlier allows remote attackers to execute arbitrary code via a (1) long message handled by the recvTextMessage function in multiplay.c or a (2) long filename handled by NETrecvFile function in…

  • CVE-2006-3850Jul 25, 2006
    Lussumo
    Vanilla
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/old_settings.php exists, allows remote attackers to execute arbitrary PHP code via a URL in the RootDirectory parameter. NOTE: this issue has been disputed by a third party who…

  • CVE-2006-3851Jul 25, 2006
    X7 Chat
    X7 Chat
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the old_prefix parameter.

  • CVE-2006-3852Jul 25, 2006
    Phptoys
    Micro Guestbook
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in Micro GuestBook allows remote attackers to execute arbitrary SQL commands via the (1) name or (2) comment ("text") fields.

  • CVE-2006-3619Jul 25, 2006
    GNU
    Gcc
    risk 0.00cvss —epss 0.04

    Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences.

  • CVE-2006-3814Jul 25, 2006
    Cheese Tracker
    Cheese Tracker
    risk 0.04cvss —epss 0.07

    Buffer overflow in the Loader_XM::load_instrument_internal function in loader_xm.cpp for Cheese Tracker 0.9.9 and earlier allows user-assisted attackers to execute arbitrary code via a crafted file with a large amount of extra data.

  • CVE-2006-3815Jul 25, 2006
    Linux Ha
    Heartbeat
    risk 0.03cvss —epss 0.01

    heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup.

  • CVE-2006-3816Jul 25, 2006
    Krusader
    Krusader
    risk 0.00cvss —epss 0.01

    Krusader 1.50-beta1 up to 1.70.0 stores passwords for remote connections in cleartext in the bookmark file (krbookmarks.xml), which allows attackers to steal passwords by obtaining the file.

  • CVE-2006-3820Jul 25, 2006
    Loudblog
    Loudblog
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in loudblog/index.php in Loudblog before 0.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

  • CVE-2006-3821Jul 25, 2006
    Atutor
    Atutor
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in (a) index_list.php and (2) year, (3) month, and (4) day parameter in (b) registration.php.

  • CVE-2006-3822Jul 25, 2006
    Geodesicsolutions
    Geoauctions Enterprise
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to execute arbitrary SQL commands via the d parameter.

  • CVE-2006-3823Jul 25, 2006
    Geodesicsolutions
    Geoauctions Premier
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic 2.0.3 allows remote attackers to execute arbitrary SQL commands via the b parameter.

  • CVE-2006-3824Jul 25, 2006
    Sun Corporation
    Solaris
    risk 0.03cvss —epss 0.01

    systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which causes a -1 argument to be used by the copyout function. NOTE: this issue has been referred to as an integer overflow, but it is probably more…

  • CVE-2006-3825Jul 25, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    The IPv4 implementation in Sun Solaris 10 before 20060721 allows local users to select routes that differ from the routing table, possibly facilitating firewall bypass or unauthorized network communication.

  • CVE-2006-3826Jul 25, 2006
    Kailash Nadh
    Boastmachine
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user_login, (2) full_name, and (3) URL parameters in register.php; and allow remote…

  • CVE-2006-3827Jul 25, 2006
    Kailash Nadh
    Boastmachine
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the blog parameter.

  • CVE-2006-3828Jul 25, 2006
    Kailash Nadh
    Boastmachine
    risk 0.00cvss —epss 0.01

    Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL injection protection mechanisms by using commas, quote characters, pound sign (#) characters, "UNION," and "SELECT," which…

  • CVE-2006-3829Jul 25, 2006
    Kailash Nadh
    Boastmachine
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in bmc/admin.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote attackers to perform unauthorized actions as an administrator and delete arbitrary user accounts via a delete_user action.

  • CVE-2006-3830Jul 25, 2006
    Kailash Nadh
    Boastmachine
    risk 0.00cvss —epss 0.01

    The Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to upload files with arbitrary extensions to the bmc/Inc/Lang directory. NOTE: because the uploaded files cannot be…

  • CVE-2006-3831Jul 25, 2006
    Kailash Nadh
    Boastmachine
    risk 0.00cvss —epss 0.01

    The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by…