VYPR

CVEs

343,049 total · page 6561 of 6,861

AllCriticalHighKEV
  • CVE-2005-4782Dec 31, 2005
    NetBSD
    NetBSD
    risk 0.00cvss —epss 0.00

    NetBSD 2.0 before 2.0.4, 2.1 before 2.1.1, and 3, when the kernel is compiled with "options DIAGNOSTIC," allows local users to cause a denial of service (kernel assertion panic) via a negative linger time in the SO_LINGER socket option.

  • CVE-2005-4783Dec 31, 2005
    NetBSD
    NetBSD
    risk 0.00cvss —epss 0.00

    kernfs_xread in kernfs_vnops.c in NetBSD before 20050831 does not check for a negative offset when reading the message buffer, which allows local users to read arbitrary kernel memory.

  • CVE-2005-4784Dec 31, 2005
    KDE
    Kde
    risk 0.00cvss —epss 0.00

    Multiple buffer overflows in the POSIX readdir_r function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via (1) a symlink attack that exploits a race condition between opendir and pathcon calls and changes the…

  • CVE-2005-4785Dec 31, 2005
    Jl Webworks
    Quickblogger
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) author ("your name") and (2) "comment" section.

  • CVE-2005-4786Dec 31, 2005
    Hauri
    Livecall
    risk 0.00cvss —epss 0.03

    Buffer overflow in the archive decompression library (vrAZMain.dll 5.8.22.137), as used in HAURI anti-virus products including (1) ViRobot Expert 4.0, (2) ViRobot Advanced Server, and (3) HAURI LiveCall, allows user-assisted attackers to execute arbitrary code via an ALZ archive…

  • CVE-2005-4787Dec 31, 2005
    Turnkey Web Tools
    Sunshop Shopping Cart
    risk 0.00cvss —epss 0.02

    Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to (1) index.php, (2) admin/index.php, and (3) admin/adminindex.php, which executes the PHP phpinfo function. NOTE: The vendor has disputed this issue, saying…

  • CVE-2005-4788Dec 31, 2005
    SUSE S.A.
    Linux
    risk 0.00cvss —epss 0.00

    resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, allows local users to bypass access control rules for USB devices via "alternate syntax for specifying USB devices."

  • CVE-2005-4789Dec 31, 2005
    SUSE S.A.
    Linux
    risk 0.00cvss —epss 0.00

    resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, does not properly enforce class-specific exclude rules in some situations, which allows local users to bypass intended access restrictions for USB devices that set their class ID at the interface level.

  • CVE-2005-4790Dec 31, 2005
    Novell
    Suse Linux
    risk 0.00cvss —epss 0.00

    Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam. NOTE: in…

  • CVE-2005-4791Dec 31, 2005
    Novell
    Suse Linux
    risk 0.00cvss —epss 0.00

    Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or (2) banshee.

  • CVE-2005-4792Dec 31, 2005
    Phpwebsite
    Phpwebsite
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from…

  • CVE-2005-4793Dec 31, 2005
    Hitachi
    Jp1 Cm2 Network Node Manager 250
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in the web utility function in Hitachi Cm2/Network Node Manager and JP1/Cm2/Network Node Manager before 20050930 allow attackers to execute arbitrary commands, disable services, and "exploit vulnerabilities."

  • CVE-2005-4794Dec 31, 2005
    Cisco Systems, Inc.
    Ata
    risk 0.00cvss —epss 0.02

    Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cause a denial of service (crash or instability) via a compressed DNS packet with a label length byte with an incorrect offset.

  • CVE-2005-4795Dec 31, 2005
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the multi-language environment library (libmle) in Solaris 7 and 8, as shipped with the Japanese locale, allows local users to gain privileges via unknown attack vectors.

  • CVE-2005-4796Dec 31, 2005
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files via unknown vectors related to the handling of the clipboard selection while an XView application exits.

  • CVE-2005-4797Dec 31, 2005
    Sun Corporation
    Solaris
    risk 0.05cvss —epss 0.29

    Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary files via ".." sequences in an "Unlink data file" command.

  • CVE-2005-4798Dec 31, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.03

    Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service (crash) via a long symlink, which is not properly handled in (1) nfs2xdr.c or (2) nfs3xdr.c and causes a crash in the NFS client.

  • CVE-2005-4799Dec 31, 2005
    Yapig
    Yapig
    risk 0.04cvss —epss 0.07

    Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Homepage field (aka the Website field) in an "image-related comment" and (2) the img_size…

  • CVE-2005-4800Dec 31, 2005
    Yapig
    Yapig
    risk 0.00cvss —epss 0.02

    Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a mod_info action to modify_gallery.php, which inserts the code into…

  • CVE-2005-4801Dec 31, 2005
    Yapig
    Yapig
    risk 0.00cvss —epss 0.02

    Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as demonstrated by tricking the administrator to access a web page that performs a…

  • CVE-2005-4802Dec 31, 2005
    Flexbackup
    Flexbackup
    risk 0.00cvss —epss 0.01

    Flexbackup 1.2.1 and earlier allows local users to overwrite files and execute code via a symlink attack on temporary files. NOTE: the raw source referenced an incorrect candidate number; this is the correct number to use.

  • CVE-2005-4803Dec 31, 2005
    Graphviz
    Graphviz
    risk 0.00cvss —epss 0.00

    graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct…

  • CVE-2005-4804Dec 31, 2005
    Sun Corporation
    Java System Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to deployed web applications.

  • CVE-2005-4805Dec 31, 2005
    Sun Corporation
    Java System Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors.

  • CVE-2005-4806Dec 31, 2005
    Sun Corporation
    Java System Web Proxy Server
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service (unresponsive service) via unknown vectors.

  • CVE-2005-4807Dec 31, 2005
    GNU
    Binutils
    risk 0.04cvss —epss 0.12

    Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code.

  • CVE-2005-4808Dec 31, 2005
    GNU
    Binutils
    risk 0.00cvss —epss 0.02

    Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file.

  • CVE-2005-4809Dec 31, 2005
    Mozilla Corporation
    Mozilla
    risk 0.03cvss —epss 0.06

    Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag.

  • CVE-2005-4810Dec 31, 2005
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.14

    Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Content-type header sent in response to an XMLHttpRequest (AJAX).

  • CVE-2005-4811Dec 31, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The hugepage code (hugetlb.c) in Linux kernel 2.6, possibly 2.6.12 and 2.6.13, in certain configurations, allows local users to cause a denial of service (crash) by triggering an mmap error before a prefault, which causes an error in the unmap_hugepage_area function.

  • CVE-2005-4812Dec 31, 2005
    Sisco
    Ax S4 Iccp
    risk 0.00cvss —epss 0.04

    The SISCO OSI stack for Windows, as used by MMS-EASE 7.10 and earlier, AX-S4 MMS 5.01 and earlier, AX-S4 ICCP 3.0103 and earlier, and the ICCP Toolkit for MMS-EASE 4.10 and earlier, allows remote attackers to cause a denial of service (process crash) via certain network traffic,…

  • CVE-2005-4813Dec 31, 2005
    Businessobjects
    Crystal Reports Server Xi
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, Crystal Reports Server XI, and BusinessObjects Enterprise XI, allows remote attackers to cause a denial of service (application hang) via…

  • CVE-2005-4814Dec 31, 2005
    Segue CMS
    CMS
    risk 0.00cvss —epss 0.01

    Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory.

  • CVE-2005-4815Dec 31, 2005
    SAP
    Sap R 3
    risk 0.00cvss —epss 0.03

    SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and 31 before 31I patch 735 do not properly restrict process execution by lnaxdm/sapsys, which allows remote attackers to execute arbitrary…

  • CVE-2005-4816Dec 31, 2005
    Proftpd
    Proftpd
    risk 0.01cvss —epss 0.13

    Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password.

  • CVE-2005-4817Dec 31, 2005
    Tmsnc
    Tmsnc
    risk 0.00cvss —epss 0.02

    Format string vulnerability in ui.c in Textbased MSN Client (TMSNC) before 0.2.5 allows attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors that cause format strings to be injected into the wprintw function.

  • CVE-2005-4818Dec 31, 2005
    Copernicus
    Europa
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Copernicus Europa allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2005-4819Dec 31, 2005
    IBM
    Lotus Domino
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2005-4820Dec 31, 2005
    Smc
    SMC7904WBRA
    risk 0.00cvss —epss 0.01

    SMC Wireless Router model SMC7904WBRA allows remote attackers to cause a denial of service (reboot) by flooding the router with traffic.

  • CVE-2005-4821Dec 31, 2005
    Neocrome
    Land Down Under
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2) the f parameter in events.php, or (3) the e parameter in plug.php.

  • CVE-2005-4822Dec 31, 2005
    Digger Solutions
    Intranet Open Source
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source (IOS) version 2.7.2 allows remote attackers to execute arbitrary SQL commands via the project_id parameter.

  • CVE-2005-4823Dec 31, 2005
    Microfocus
    HTTP Server
    risk 0.01cvss —epss 0.12

    Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2005-4824Dec 31, 2005
    Glen Campbell
    Siteframe
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the LOCAL_PATH parameter, a different vulnerability than CVE-2005-1965.

  • CVE-2005-4825Dec 31, 2005
    Cisco Systems, Inc.
    Clean Access
    risk 0.00cvss —epss 0.01

    Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue…

  • CVE-2005-4826Dec 31, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774,…

  • CVE-2005-4827Dec 31, 2005
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.11

    Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return…

  • CVE-2005-4828Dec 31, 2005
    Kolab
    Kolab Groupware Server
    risk 0.00cvss —epss 0.01

    Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege…

  • CVE-2005-4829Dec 31, 2005
    Virtuemart
    Virtuemart
    risk 0.00cvss —epss 0.01

    VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors.

  • CVE-2005-4830Dec 31, 2005
    Viewvc
    Viewcvs
    risk 0.00cvss —epss 0.02

    CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.

  • CVE-2005-4831Dec 31, 2005
    Viewvc
    Viewcvs
    risk 0.00cvss —epss 0.01

    viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which can be leveraged for cross-site scripting (XSS) and other attacks, as demonstrated using (1) "text/html", or (2) "image/jpeg" with an image…