VYPR

CVEs

343,956 total · page 6508 of 6,880

AllCriticalHighKEV
  • CVE-2006-3485Jul 10, 2006
    Astrodog Press
    Some Chess
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php.

  • CVE-2006-2917Jul 10, 2006
    Qbik
    Wingate
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 1099, allows remote authenticated users to read email of other users, or perform unauthorized operations on directories, via the (1) CREATE,…

  • CVE-2006-2936Jul 10, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.03

    The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be…

  • CVE-2006-3470Jul 10, 2006
    Dell
    Openmanage Cd
    risk 0.00cvss —epss 0.02

    The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to gain privileges.

  • CVE-2006-3471Jul 10, 2006
    Microsoft
    Internet Explorer
    risk 0.05cvss —epss 0.21

    Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a child, which triggers a null dereference, as demonstrated using the appendChild method.

  • CVE-2006-1176Jul 8, 2006
    Ebay
    Enhanced Picture Services
    risk 0.00cvss —epss 0.05

    Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers…

  • CVE-2006-3458Jul 7, 2006
    Zope
    Zope
    risk 0.00cvss —epss 0.00

    Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.

  • CVE-2006-2451Jul 7, 2006
    Linux
    Kernel
    risk 0.03cvss —epss 0.04

    The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program…

  • CVE-2006-3431Jul 7, 2006
    Microsoft
    Excel
    risk 0.05cvss —epss 0.28

    Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option,…

  • CVE-2006-3405Jul 7, 2006
    Qto
    Qtofilemanager
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) delete, (2) pathext, and (3) edit parameters.

  • CVE-2006-3406Jul 7, 2006
    Qto
    Qtofilemanager
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files via a .. (dot dot) sequence in the edit parameter.

  • CVE-2006-3407Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.01

    Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters.

  • CVE-2006-3408Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows remote attackers to cause an unspecified denial of service via unknown vectors.

  • CVE-2006-3409Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.04

    Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow when elements are added to smartlists.

  • CVE-2006-3410Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.02

    Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks.

  • CVE-2006-3411Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.01

    TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, which makes it easier for remote attackers to conduct brute force attacks on the encryption keys.

  • CVE-2006-3412Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.02

    Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intended access restrictions for dirservers, direct connections, or proxy servers.

  • CVE-2006-3413Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.02

    The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information.

  • CVE-2006-3414Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.02

    Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution.

  • CVE-2006-3415Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.02

    Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man-in-the-middle (MITM) attack via unspecified vectors.

  • CVE-2006-3416Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.02

    Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to be disbanded. NOTE: while this item is listed under the "Security fixes" section of the developer changelog, the developer clarified on 20060707 that this is…

  • CVE-2006-3417Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.02

    Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers to be preferred over nodes that are identified as more trustworthy "entry guard" (is_guard) systems by directory authorities.

  • CVE-2006-3418Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.02

    Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications.

  • CVE-2006-3419Jul 7, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.02

    Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes, and seeds the entropy value at start-up with 160-bit chunks without reseeding, which makes it easier for attackers to conduct brute force guessing attacks.

  • CVE-2006-3420Jul 7, 2006
    MyBB
    MyBulletinBoard
    risk 0.00cvss —epss 0.02

    Cross-site request forgery (CSRF) vulnerability in editpost.php in MyBulletinBoard (MyBB) before 1.1.5 allows remote attackers to perform unauthorized actions as a logged in user and delete arbitrary forum posts via a bbcode IMG tag with a modified delete parameter in a…

  • CVE-2006-3421Jul 7, 2006
    Smartsitecms
    Smartsitecms
    risk 0.03cvss —epss 0.04

    PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the root parameter in (1) comment.php, (2) admin/comedit.php, (3) admin/test.php, (4) admin/index.php, and (5)…

  • CVE-2006-3422Jul 7, 2006
    Wonderedit
    Wonderedit Pro CMS
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the config[template_path] parameter in user_bottom.php, as used by multiple templates including (1) rwb (template/rwb/user_bottom.php), (2) gwb…

  • CVE-2006-3423Jul 7, 2006
    Webex Communications
    Downloader Java
    risk 0.01cvss —epss 0.09

    WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to…

  • CVE-2006-3424Jul 7, 2006
    Webex Communications
    Webex Downloader Activex Control
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2006-3425Jul 7, 2006
    Novell
    Zenworks
    risk 0.00cvss —epss 0.02

    FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point…

  • CVE-2006-3426Jul 7, 2006
    Novell
    Zenworks
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (b) Novell ZENworks 6.2 SR1 and earlier allows remote attackers to overwrite arbitrary files and directories via a .. (dot dot) sequence in the (1) action, (2)…

  • CVE-2006-3427Jul 7, 2006
    Microsoft
    Internet Explorer
    risk 0.05cvss —epss 0.24

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, which triggers a null dereference.

  • CVE-2006-3428Jul 7, 2006
    TigerTom
    TTCalc
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in (1) loan.php and (2) mortgage.php.

  • CVE-2006-3429Jul 7, 2006
    TigerTom
    TTCalc
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the currency parameter in (1) loan.php and (2) mortgage.php. NOTE: the provenance of this information is unknown; the details are obtained solely…

  • CVE-2006-3430Jul 7, 2006
    Novell
    Zenworks
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter.

  • CVE-2006-3355Jul 6, 2006
    risk 0.04cvss —epss 0.06

    Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function. NOTE: This appears to be the result of an incomplete patch for…

  • CVE-2006-3356Jul 6, 2006
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.01

    The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service (application crash) via an invalid tag value in a TIFF image, possibly triggering a null dereference. NOTE: This is a different issue…

  • CVE-2006-3357Jul 6, 2006
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.35

    Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1…

  • CVE-2006-3358Jul 6, 2006
    Newsphp
    Newsphp
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words, (2) id, (3) cat_id, and (4) tim parameters, which are not sanitized before being returned in an error page. …

  • CVE-2006-3359Jul 6, 2006
    Newsphp
    Newsphp
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words, (2) id, (3) topmenuitem, and (4) cat_id parameters in (a) index.php; and the (5) category parameter in (b) inc/rss_feed.php.

  • CVE-2006-3360Jul 6, 2006
    Phpsysinfo
    Phpsysinfo
    risk 0.00cvss —epss 0.05

    Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file…

  • CVE-2006-3361Jul 6, 2006
    Stud.ip
    Stud.ip
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) _PHPLIB[libdir] parameter in studip-phplib/oohforms.inc and (2) ABSOLUTE_PATH_STUDIP parameter in…

  • CVE-2006-3362Jul 6, 2006
    Geeklog
    Geeklog
    risk 0.03cvss —epss 0.05

    Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with…

  • CVE-2006-3363Jul 6, 2006
    XOOPS
    Glossaire Module
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the pa parameter.

  • CVE-2006-3364Jul 6, 2006
    F Art Agency
    BLOG:CMS
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2006-3365Jul 6, 2006
    V3 Chat
    V3 Chat
    risk 0.00cvss —epss 0.01

    V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2) membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement.

  • CVE-2006-3366Jul 6, 2006
    V3 Chat
    V3 Chat
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HTML tags, as demonstrated by the IMG tag, in the (1) id parameter in (a) mail/index.php and (b) mail/reply.php; (2) login_id parameter in (c)…

  • CVE-2006-3367Jul 6, 2006
    risk 0.00cvss —epss 0.01

    Mp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration.

  • CVE-2006-3368Jul 6, 2006
    Efone
    Efone
    risk 0.00cvss —epss 0.02

    Efone 20000723 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.

  • CVE-2006-3369Jul 6, 2006
    Kamikaze QSCM
    Kamikaze-QSCM
    risk 0.00cvss —epss 0.01

    Kamikaze-QSCM 0.1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration.