VYPR

CVEs

343,049 total · page 6562 of 6,861

AllCriticalHighKEV
  • CVE-2005-4832Dec 31, 2005
    Oracle Corporation
    Database Server
    risk 0.06cvss —epss 0.42

    SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the (1) SYS.DBMS_CDC_SUBSCRIBE and (2) SYS.DBMS_CDC_ISUBSCRIBE packages, a different…

  • CVE-2005-4833Dec 31, 2005
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows remote attackers to obtain the JSP source code and other sensitive information via "a specific JSP URL," related to lack of normalization of…

  • CVE-2005-4834Dec 31, 2005
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container.

  • CVE-2005-4835Dec 31, 2005
    Madwifi
    Madwifi
    risk 0.00cvss —epss 0.02

    The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial of service (failed KASSERT and system crash) by moving a connected system to a location with low signal strength, and possibly other vectors…

  • CVE-2005-4836Dec 31, 2005
    Apache
    Tomcat
    risk 0.00cvss —epss 0.04

    The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.

  • CVE-2005-4837Dec 31, 2005
    Net SNMP
    Net SNMP
    risk 0.01cvss —epss 0.10

    snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) by causing a particular TCP disconnect, which triggers a free of an incorrect…

  • CVE-2005-4838Dec 31, 2005
    Apache
    Tomcat
    risk 0.01cvss —epss 0.08

    Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in…

  • CVE-2005-4839Dec 31, 2005
    PureTLS
    PureTLS
    risk 0.00cvss —epss 0.01

    PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information leak of values from earlier certificates.

  • CVE-2005-4840Dec 31, 2005
    Microsoft
    Outlook Express Book Control
    risk 0.01cvss —epss 0.12

    The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL dereference and browser crash) by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer.

  • CVE-2005-4841Dec 31, 2005
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.09

    The Outlook Progress Ctl control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

  • CVE-2005-4842Dec 31, 2005
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.09

    The System Monitor Source Properties control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

  • CVE-2005-4843Dec 31, 2005
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.11

    The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

  • CVE-2005-4844Dec 31, 2005
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.12

    The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

  • CVE-2005-4845Dec 31, 2005
    Sun Corporation
    Java Plugin
    risk 0.00cvss —epss 0.02

    The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not…

  • CVE-2005-4846Dec 31, 2005
    Spey
    Spey
    risk 0.00cvss —epss 0.02

    Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a syslog call.

  • CVE-2005-4847Dec 31, 2005
    Spey
    Spey
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Spey 0.3.3 has unknown impact and attack vectors related to "A number of security holes which could lead to compromise," a different issue than CVE-2005-4846.

  • CVE-2005-4848Dec 31, 2005
    Rim
    Blackberry Enterprise Server
    risk 0.00cvss —epss 0.03

    Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier before 20050607 might allow remote attackers to execute arbitrary code via certain data packets.

  • CVE-2005-4849Dec 31, 2005
    Apache
    Derby
    risk 0.00cvss —epss 0.02

    Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information.

  • CVE-2005-4850Dec 31, 2005
    Ez
    Ez Publish
    risk 0.00cvss —epss 0.01

    eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users.

  • CVE-2005-4851Dec 31, 2005
    Ez
    Ez Publish
    risk 0.00cvss —epss 0.01

    eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authenticated users to bypass the original permissions on embedded objects in XML fields and read these objects.

  • CVE-2005-4852Dec 31, 2005
    Ez
    Ez Publish
    risk 0.00cvss —epss 0.01

    The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric characters in a URI to '_' (underscore), which allows remote attackers to bypass access restrictions by inserting certain characters in a URI, as demonstrated by…

  • CVE-2005-4853Dec 31, 2005
    Ez
    Ez Publish
    risk 0.00cvss —epss 0.01

    The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings.

  • CVE-2005-4854Dec 31, 2005
    Ez
    Ez Publish
    risk 0.00cvss —epss 0.01

    eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders.

  • CVE-2005-4855Dec 31, 2005
    Ez
    Ez Publish
    risk 0.00cvss —epss 0.01

    Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922 does not restrict Image datatype uploads to image content types, which allows remote authenticated users to upload certain types of files, as…

  • CVE-2005-4856Dec 31, 2005
    Ez
    Ez Publish
    risk 0.00cvss —epss 0.01

    The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via…

  • CVE-2005-4857Dec 31, 2005
    Ez
    Ez Publish
    risk 0.00cvss —epss 0.01

    eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service (Apache httpd segmentation fault) via a request to content/advancedsearch.php with an empty SearchContentClassID parameter,…

  • CVE-2005-4858Dec 31, 2005
    mimicboard2
    Mimic2
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in mimicboard2 (Mimic2) 086 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters associated with the (1) name, (2) title, and (3) comment sections, as demonstrated…

  • CVE-2005-4859Dec 31, 2005
    Chitta
    Mimicboard
    risk 0.00cvss —epss 0.01

    mimicboard2 (Mimic2) 086 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mimic2.dat.

  • CVE-2005-4860HigDec 31, 2005
    Spectrumcu
    Cash Receipting System
    risk 0.51cvss 7.8epss 0.00

    Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password.

  • CVE-2005-4861Dec 31, 2005
    Jasio.net
    Ragnarok Online Control Panel
    risk 0.00cvss —epss 0.01

    functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account_manage.php with a trailing "/login.php" PHP_SELF value, which is not properly handled by the CHECK_AUTH function.

  • CVE-2005-4862Dec 31, 2005
    Cryptpad
    Xwiki
    risk 0.00cvss —epss 0.01

    The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password.

  • CVE-2005-4863Dec 31, 2005
    IBM
    Db2
    risk 0.00cvss —epss 0.00

    Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long parameter.

  • CVE-2005-4864Dec 31, 2005
    IBM
    Db2
    risk 0.00cvss —epss 0.00

    Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable.

  • CVE-2005-4865Dec 31, 2005
    IBM
    Db2
    risk 0.00cvss —epss 0.06

    Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname.

  • CVE-2005-4866Dec 31, 2005
    IBM
    Db2
    risk 0.00cvss —epss 0.02

    Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which…

  • CVE-2005-4867Dec 31, 2005
    IBM
    Db2
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enabled, allows remote attackers to execute arbitrary code via a long parameter.

  • CVE-2005-4868HigDec 31, 2005
    IBM
    Db2
    risk 0.49cvss 7.1epss 0.01

    Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service.

  • CVE-2005-4869Dec 31, 2005
    IBM
    Db2
    risk 0.03cvss —epss 0.01

    The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application crash) via an empty string in the second parameter, which causes a null pointer dereference.

  • CVE-2005-4870Dec 31, 2005
    IBM
    Db2
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflows in the (1) xmlvarcharfromfile, (2) xmlclobfromfile, (3) xmlfilefromvarchar, and (4) xmlfilefromclob function calls in IBM DB2 8.1 allow remote attackers to execute arbitrary code via a 94-byte second argument, which causes the return address to be…

  • CVE-2005-4871Dec 31, 2005
    IBM
    Db2
    risk 0.00cvss —epss 0.01

    Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via (1) XMLFileFromVarchar or (2) XMLFileFromClob, or read files via (3) XMLVarcharFromFile or (4) XMLClobFromFile.

  • CVE-2005-4872Dec 31, 2005
    Pcre
    Pcre
    risk 0.00cvss —epss 0.02

    Perl-Compatible Regular Expression (PCRE) library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service (crash) via a regular expression with a large number of named subpatterns, which…

  • CVE-2005-4873Dec 31, 2005
    Openprinting
    Cups
    risk 0.00cvss —epss 0.02

    Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 might allow context-dependent attackers to execute arbitrary code via vectors that result in long function parameters, as demonstrated by the cups_get_dest_options function in phpcups.c.

  • CVE-2005-4874Dec 31, 2005
    Mozilla Corporation
    Mozilla
    risk 0.00cvss —epss 0.01

    The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication passwords via a request with a "Max-Forwards: 0" header or (2) arbitrary local passwords on the web server that hosts this object.

  • CVE-2005-4875Dec 31, 2005
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.

  • CVE-2005-4876Dec 31, 2005
    Igniterealtime
    Openfire
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.2.2, and possibly other versions before 2.3.0 Beta 2, allows remote attackers to inject arbitrary web script or HTML via the username parameter, a…

  • CVE-2005-4877Dec 31, 2005
    Igniterealtime
    Openfire
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 allows remote attackers to inject arbitrary web script or HTML via Javascript events in the username parameter, a different vulnerability than…

  • CVE-2005-4586Dec 30, 2005
    PHP Surveyor
    Phpsurveyor
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts.

  • CVE-2005-4587Dec 30, 2005
    Juniper Networks
    Netscreen Security Manager 2004
    risk 0.00cvss —epss 0.02

    Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3 allow remote attackers to cause a denial of service (crash or hang of server components that are automatically restarted) via a long crafted string on (1) port 7800 (the GUI Server port) or (2) port 7801 (the Device…

  • CVE-2005-4588Dec 30, 2005
    Dream4
    Koobi CMS
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2005-4589Dec 30, 2005
    Spb
    Kiosk Engine
    risk 0.00cvss —epss 0.00

    Spb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which allows local users to obtain the passcode.