VYPR

CVEs

343,267 total · page 6546 of 6,866

AllCriticalHighKEV
  • CVE-2006-0787Feb 19, 2006
    Plaino
    Wimpy Mp3
    risk 0.03cvss —epss 0.02

    wimpy_trackplays.php in Plaino Wimpy MP3 Player, possibly 5.2 and earlier, allows remote attackers to insert arbitrary strings into trackme.txt via the (1) trackFile, (2) trackArtist, and (3) trackTitle parameters, which can result in providing false information about songs,…

  • CVE-2006-0788Feb 19, 2006
    Kyocera
    Fs 3830n
    risk 0.00cvss —epss 0.02

    Kyocera 3830 (aka FS-3830N) printers have a back door that allows remote attackers to read and alter configuration settings via strings that begin with "!R!SIOP0", as demonstrated using (1) a connection to to TCP port 9100 or (2) the UNIX lp command.

  • CVE-2006-0789Feb 19, 2006
    Kyocera
    Fs 3830n
    risk 0.00cvss —epss 0.04

    Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attackers to access an administrative menu via a telnet session.

  • CVE-2006-0772Feb 19, 2006
    Hitachi
    Business Logic
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through 03-00-/B on Linux, allows remote attackers to execute arbitrary SQL commands via unspecified vectors in the extended receiving box function.

  • CVE-2006-0773Feb 19, 2006
    Hitachi
    Business Logic
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through 03-00-/B on Linux, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the extended receiving box function.

  • CVE-2006-0774Feb 19, 2006
    DB_eSession
    DB_eSession library
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute arbitrary SQL commands via the $_sess_id_set variable, which is usually derived from PHPSESSID.

  • CVE-2006-0775Feb 19, 2006
    Ridder Roeland
    Birthsys
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable. NOTE: a vector regarding the $date parameter and data.php (date.php) was originally reported, but this appears to be in error.

  • CVE-2006-0776Feb 19, 2006
    Teca Scripts
    Guestex
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

  • CVE-2006-0777Feb 19, 2006
    Teca Scripts
    Guestex
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to execute arbitrary shell commands via the email parameter, possibly involving shell metacharacters.

  • CVE-2006-0778Feb 19, 2006
    XMB Forum
    Xmb
    risk 0.00cvss —epss 0.03

    Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) $u2u_select array parameter to u2u.inc.php and (2) $val variable (fidpw0 cookie value) in today.php.

  • CVE-2006-0779Feb 19, 2006
    XMB Forum
    Xmb
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag.

  • CVE-2006-0042Feb 18, 2006
    Apache
    Libapreq2
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational…

  • CVE-2006-0767Feb 18, 2006
    Nathan Neulinger
    Cgiwrap
    risk 0.00cvss —epss 0.02

    CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause errors in scripts that reveal system information.

  • CVE-2006-0768Feb 18, 2006
    Kadu
    Kadu
    risk 0.00cvss —epss 0.02

    Kadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large number of image send requests.

  • CVE-2006-0769Feb 18, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unknown attack vectors.

  • CVE-2006-0770Feb 18, 2006
    PhpBB
    Mybulletinboard
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in calendar.php in MyBulletinBoard (MyBB) 1.0.4 allows remote attackers to inject arbitrary web script or HTML via a URL that is not sanitized before being returned as a link in "advanced details". NOTE: the provenance of this…

  • CVE-2006-0771Feb 18, 2006
    Even Balance
    Punkbuster
    risk 0.00cvss —epss 0.03

    Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in invalid cvar values,…

  • CVE-2006-0750Feb 18, 2006
    Supersmashbrothers
    Army System
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the userstat parameter in an army action to index.php.

  • CVE-2006-0751Feb 18, 2006
    NOOFS
    Network Object Oriented File System
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in the (1) Filesystem in USErspace (FUSE) client and (2) NOOFS daemon in in Network Object Oriented File System (NOOFS) before 0.9.0 have unspecified impact and attack vectors.

  • CVE-2006-0752Feb 18, 2006
    Libevent Project
    Honeyd
    risk 0.00cvss —epss 0.02

    Niels Provos Honeyd before 1.5 replies to certain illegal IP packet fragments that other IP stack implementations would drop, which allows remote attackers to identify IP addresses that are being simulated using honeyd.

  • CVE-2006-0753Feb 18, 2006
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.12

    Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consumption) via JavaScript that uses setInterval to repeatedly call a function to set the value of window.status.

  • CVE-2006-0754Feb 18, 2006
    Dotproject
    Dotproject
    risk 0.00cvss —epss 0.02

    dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain PHP scripts in the db directory, which reveal the path in an error message. NOTE: the vendor disputes this issue, saying that it could…

  • CVE-2006-0755MedFeb 18, 2006
    Dotproject
    Dotproject
    risk 0.40cvss 5.6epss 0.08

    Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary commands via the baseDir parameter in (1) db_adodb.php, (2) db_connect.php, (3) session.php, (4) vw_usr_roles.php, (5)…

  • CVE-2006-0756Feb 18, 2006
    Dotproject
    Dotproject
    risk 0.00cvss —epss 0.02

    dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible under the /docs/ directory after installation, which allows remote attackers to obtain sensitive configuration information. NOTE: the vendor disputes this issue, saying that it could only occur if…

  • CVE-2006-0757Feb 18, 2006
    Hivemail
    Hivemail
    risk 0.03cvss —epss 0.03

    Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via (1) the contactgroupid parameter in addressbook.update.php, (2) the messageid parameter in addressbook.add.php, (3) the folderid parameter in…

  • CVE-2006-0758Feb 18, 2006
    Hivemail
    Hivemail
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via a URL encoded expression in the query string in (1) index.php and (2) possibly certain other scripts, which is not properly cleansed…

  • CVE-2006-0759Feb 18, 2006
    Hivemail
    Hivemail
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the contactgroupid parameter in addressbook.update.php, (2) the messageid parameter in addressbook.add.php, (3) the folderid parameter in…

  • CVE-2006-0760Feb 18, 2006
    Lighttpd
    Lighttpd
    risk 0.00cvss —epss 0.02

    LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass URL checks and obtain sensitive information via file extensions with unexpected capitalization, as demonstrated by a request for index.PHP when the configuration…

  • CVE-2006-0761Feb 18, 2006
    Rim
    Blackberry Enterprise Server
    risk 0.00cvss —epss 0.03

    Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1…

  • CVE-2006-0762Feb 18, 2006
    Winability
    Folder Guard
    risk 0.00cvss —epss 0.00

    WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application by renaming or moving the password file (FGuard.FGP), which disables the password requirement.

  • CVE-2006-0763Feb 18, 2006
    CPanel
    Cpanel
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in dowebmailforward.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML via a URL encoded value in the fwd parameter.

  • CVE-2006-0764Feb 18, 2006
    Cisco Systems, Inc.
    Cisco Anomaly Detection and Mitigation
    risk 0.00cvss —epss 0.02

    The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows…

  • CVE-2006-0765Feb 18, 2006
    Mirabilis
    Icq
    risk 0.00cvss —epss 0.01

    GUI display truncation vulnerability in ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions, bypass Windows security warnings via a filename that is all…

  • CVE-2006-0766Feb 18, 2006
    Mirabilis
    Icq
    risk 0.00cvss —epss 0.01

    ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG,…

  • CVE-2006-0460Feb 17, 2006
    Bomberclone
    Bomberclone
    risk 0.08cvss —epss 0.68

    Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error messages.

  • CVE-2006-0737Feb 17, 2006
    Estara
    Softphone
    risk 0.03cvss —epss 0.03

    eStara SIP softphone allows remote attackers to cause a denial of service (crash) via a SIP OPTIONS request with a negative Expires field.

  • CVE-2006-0738Feb 17, 2006
    Estara
    Softphone
    risk 0.03cvss —epss 0.03

    Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service (hang) via SIP INVITE requests with format string specifiers in the SDP session description, as demonstrated using (1) the field name, (2) the o field…

  • CVE-2006-0739Feb 17, 2006
    Estara
    Softphone
    risk 0.00cvss —epss 0.02

    eStara SIP softphone allows remote attackers to cause a denial of service (crash) via an INVITE request with a Content-Length field that has more than 9 digits.

  • CVE-2006-0679Feb 16, 2006
    PHP-Nuke
    Ev
    risk 0.00cvss —epss 0.04

    SQL injection vulnerability in index.php in the Your_Account module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable (Nickname field).

  • CVE-2006-0721Feb 16, 2006
    Runcms
    Runcms
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to execute arbitrary SQL commands via the to_userid parameter.

  • CVE-2006-0722Feb 16, 2006
    Reamday Enterprises
    Magic Downloads
    risk 0.00cvss —epss 0.01

    settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5)…

  • CVE-2006-0723Feb 16, 2006
    Reamday Enterprises
    Magic News Lite
    risk 0.00cvss —epss 0.02

    PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the php_script_path parameter.

  • CVE-2006-0724Feb 16, 2006
    Reamday Enterprises
    Magic News Lite
    risk 0.00cvss —epss 0.01

    profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5)…

  • CVE-2006-0725Feb 16, 2006
    Plume CMS
    CMS
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the _PX_config[manager_path] parameter. NOTE: this is a different executable and affected version than…

  • CVE-2006-0726Feb 16, 2006
    Cpg Nuke
    Dragonfly CMS
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a list of online users.

  • CVE-2006-0727Feb 16, 2006
    Musox
    Df Msanalysis
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in mstrack.php in MusOX DF MSAnalysis (DFMSA), as used in some environments that use CPG-Nuke Dragonfly CMS, allows remote attackers to trigger path disclosure from a SQL syntax error, and possibly execute arbitrary SQL commands, via certain query…

  • CVE-2006-0728Feb 16, 2006
    Webspell
    Webspell
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary SQL commands via the title_op parameter.

  • CVE-2006-0729Feb 16, 2006
    Teca Scripts
    Teca Diary
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters.

  • CVE-2006-0730Feb 16, 2006
    Timo Sirainen
    Dovecot
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) "potential hangs" in the APPEND command and "potential crashes" in (2) dovecot-auth and (3)…

  • CVE-2006-0731Feb 16, 2006
    SAP
    Business Connector
    risk 0.03cvss —epss 0.03

    WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in the url parameter, which loads the URL inside a frame.