VYPR

CVEs

343,212 total · page 6556 of 6,865

AllCriticalHighKEV
  • CVE-2006-0184Jan 12, 2006
    AspTopSites
    AspTopSites
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to goto.asp or (2) password parameter to includeloginuser.asp.

  • CVE-2006-0185Jan 12, 2006
    PHP-Nuke
    News Module
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.

  • CVE-2006-0187Jan 12, 2006
    Microsoft
    Visual Studio
    risk 0.05cvss —epss 0.19

    By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file.

  • CVE-2006-0035Jan 11, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The netlink_rcv_skb function in af_netlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users to cause a denial of service (infinite loop) via a nlmsg_len field of 0.

  • CVE-2006-0054MedJan 11, 2006
    FreeBSD
    FreeBSD
    risk 0.35cvss 5.3epss 0.03

    The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer.

  • CVE-2006-0055Jan 11, 2006
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell.

  • CVE-2006-0163Jan 11, 2006
    PHP-Nuke
    Ev
    risk 0.04cvss —epss 0.07

    SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attackers to execute arbitrary SQL commands via the query parameter, which is used by the search field. NOTE: This is a different vulnerability than CVE-2005-3792.

  • CVE-2006-0164Jan 11, 2006
    Phgstats
    phgstats
    risk 0.03cvss —epss 0.03

    phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary files and execute arbitrary PHP code by modifying the PHGDIR variable.

  • CVE-2006-0165Jan 11, 2006
    Plain Black
    Webgui
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2) name field of the default email form.

  • CVE-2006-0166Jan 11, 2006
    Symantec
    SystemWorks
    risk 0.00cvss —epss 0.02

    Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus…

  • CVE-2006-0167Jan 11, 2006
    Myphpim
    Myphpim
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter in calendar.php3 and the (2) password field on the login page.

  • CVE-2006-0168Jan 11, 2006
    Myphpim
    Myphpim
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page.

  • CVE-2006-0169Jan 11, 2006
    Myphpim
    Myphpim
    risk 0.00cvss —epss 0.02

    addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then directly accessing those files from the uploads directory.

  • CVE-2006-0171Jan 11, 2006
    Orjinweb
    Orjinweb E Commerce
    risk 0.03cvss —epss 0.04

    PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: it is not clear, but OrjinWeb might be an application service, in which case it should not be included in CVE.

  • CVE-2006-0172Jan 11, 2006
    Hummingbird
    Enterprise Collaboration
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML in an uploaded page, which is published without a check…

  • CVE-2006-0173Jan 11, 2006
    Hummingbird
    Enterprise Collaboration
    risk 0.03cvss —epss 0.02

    Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified doc_ext and id parameters, which might trick a user into downloading dangerous or unexpected content.

  • CVE-2006-0174Jan 11, 2006
    Hummingbird
    Enterprise Collaboration
    risk 0.03cvss —epss 0.03

    Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals the information in an error…

  • CVE-2006-0175Jan 11, 2006
    Webwiz
    Forums
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

  • CVE-2006-0176Jan 11, 2006
    Xmame
    Xmame
    risk 0.03cvss —epss 0.01

    Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain privileges via a long (1) -lang, (2) -ctrlr, (3) -pb, or (4) -rec argument on many operating systems, and via a long (5) -jdev argument on…

  • CVE-2006-0177Jan 11, 2006
    Cray
    Unicos
    risk 0.03cvss —epss 0.01

    Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/script with a long command line argument or (2) setting the -c option of /etc/nu to the name of a file containing a long line.

  • CVE-2006-0178Jan 11, 2006
    Cray
    Unicos
    risk 0.00cvss —epss 0.00

    Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the quote command. NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack…

  • CVE-2006-0179Jan 11, 2006
    Cisco Systems, Inc.
    Voip Phone Cp 7940
    risk 0.04cvss —epss 0.13

    The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to arbitrary ports, as demonstrated to port 80.

  • CVE-2006-0002Jan 10, 2006
    Microsoft
    Office
    risk 0.04cvss —epss 0.46

    Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME…

  • CVE-2006-0010Jan 10, 2006
    Microsoft
    Windows 2000
    risk 0.03cvss —epss 0.32

    Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font…

  • CVE-2006-0020Jan 10, 2006
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.18

    An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file…

  • CVE-2006-0105Jan 10, 2006
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.02

    PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service (postmaster exit and no new connections) via a large number of simultaneous connection requests.

  • CVE-2006-0161Jan 10, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2004-0780.

  • CVE-2006-0162Jan 10, 2006
    ClamAV
    Clamav
    risk 0.01cvss —epss 0.10

    Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.

  • CVE-2006-0152Jan 10, 2006
    Phpchamber
    Phpchamber
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) in search_result.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2006-0153Jan 10, 2006
    risk 0.03cvss —epss 0.03

    427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.

  • CVE-2006-0154Jan 10, 2006
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter.

  • CVE-2006-0155Jan 10, 2006
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a new message with a url bbcode tag containing a javascript URI.

  • CVE-2006-0156Jan 10, 2006
    Foxrum
    Foxrum
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in (1) addpost1.php and (2) addtopic1.php.

  • CVE-2006-0157Jan 10, 2006
    Reamday Enterprises
    Magic News Plus
    risk 0.03cvss —epss 0.02

    settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_password parameters, then declares the new password string in the new_passwd and…

  • CVE-2006-0158Jan 10, 2006
    Cyberdoc
    Sitesuite CMS
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in index.php in CyberDoc SiteSuite CMS allows remote attackers to execute arbitrary SQL commands via the page parameter.

  • CVE-2006-0159Jan 10, 2006
    Javier Suarez Sanz
    Foro Domus
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the…

  • CVE-2006-0160Jan 10, 2006
    Venom Board
    Venom Board
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the (1) parent, (2) root, and (3) topic_id parameters to post.php3.

  • CVE-2006-0144Jan 9, 2006
    PHP
    Pear
    risk 0.00cvss —epss 0.02

    The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified version of Tar.php with a malicious extractModify function.

  • CVE-2006-0145Jan 9, 2006
    NetBSD
    NetBSD
    risk 0.00cvss —epss 0.00

    The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative 32-bit values that occur as a result of truncation, which allows local users to read arbitrary kernel memory and gain privileges via the lseek…

  • CVE-2006-0146Jan 9, 2006
    Moodle
    Moodle
    risk 0.04cvss —epss 0.13

    The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to…

  • CVE-2006-0147Jan 9, 2006
    Moodle
    Moodle
    risk 0.04cvss —epss 0.13

    Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote…

  • CVE-2006-0148Jan 9, 2006
    Netsarang
    Xlpd
    risk 0.00cvss —epss 0.02

    NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from the same IP address.

  • CVE-2006-0149MedJan 9, 2006
    Simpbook
    Simpbook
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary web script or HTML via the message field.

  • CVE-2006-0150Jan 9, 2006
    Dave Carrigan
    Auth LDAP
    risk 0.00cvss —epss 0.05

    Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.

  • CVE-2006-0151Jan 9, 2006
    Todd Miller
    Sudo
    risk 0.00cvss —epss 0.01

    sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.

  • CVE-2006-0083Jan 9, 2006
    SMS Server Tools
    SMS Server Tools
    risk 0.00cvss —epss 0.00

    Format string vulnerability in the logging code of SMS Server Tools (smstools) 1.14.8 and earlier allows local users to execute arbitrary code via unspecified attack vectors.

  • CVE-2006-0143Jan 9, 2006
    Microsoft
    Windows
    risk 0.05cvss —epss 0.39

    Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.

  • CVE-2006-0140Jan 9, 2006
    Navboard
    Navboard
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in post.php in NavBoard V16 Stable(2.6.0) and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the (1) b, (2) textlarge, and (3) url bbcode tags.

  • CVE-2006-0141Jan 9, 2006
    Eudora
    Internet Mail Server
    risk 0.00cvss —epss 0.03

    Qualcomm Eudora Internet Mail Server (EIMS) before 3.2.8 allows remote attackers to cause a denial of service (crash) via (1) malformed NTLM authentication requests, or a malformed (2) Incoming Mail X or (3) Temporary Mail file.

  • CVE-2006-0142Jan 9, 2006
    Andromeda Software
    Andromeda
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in andromeda.php in Andromeda 1.9.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…