VYPR

CVEs

343,049 total · page 6565 of 6,861

AllCriticalHighKEV
  • CVE-2005-4492Dec 22, 2005
    Starphire Technologies
    Sitesage Se
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Starphire SiteSage 5.0.18 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the norelay_highlight_words parameter.

  • CVE-2005-4493Dec 22, 2005
    Speartek
    Speartek
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.

  • CVE-2005-4494Dec 22, 2005
    Spip
    Spip
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) spip_login.php3 and (2) spip_pass.php3.

  • CVE-2005-4495Dec 22, 2005
    Spiremedia
    Mx7
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in index.cfm in SpireMedia mx7 allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: the vendor has disputed this issue, stating "This information is incorrect, unproven, and potentially slanderous." However, CVE and…

  • CVE-2005-4496Dec 22, 2005
    Forum One
    Syntaxcms
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search_query parameter.

  • CVE-2005-4497Dec 22, 2005
    Tangora
    Tangora Portal CMS
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter in a search page, as demonstrated using (1) page1631.aspx and (2) page496.aspx.

  • CVE-2005-4498Dec 22, 2005
    Text E
    Text E CMS
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Text-e 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.

  • CVE-2005-4499Dec 22, 2005
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.00cvss —epss 0.02

    The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers…

  • CVE-2005-4474Dec 22, 2005
    WinRAR
    WinRAR
    risk 0.00cvss —epss 0.02

    Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by tricking the user into adding a file whose filename contains a non-default code page and non-ANSI characters,…

  • CVE-2005-4464Dec 22, 2005
    Ingate
    Firewall
    risk 0.00cvss —epss 0.02

    Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service (kernel deadlock) by sending a SYN packet for a TCP stream, which requires an RST packet in response.

  • CVE-2005-4465Dec 22, 2005
    NEC
    Univerge
    risk 0.00cvss —epss 0.03

    The Internet Key Exchange version 1 (IKEv1) implementation in NEC UNIVERGE IX1000, IX2000, and IX3000 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.…

  • CVE-2005-4466Dec 22, 2005
    Interaction SIP Proxy
    Interaction SIP Proxy
    risk 0.04cvss —epss 0.13

    Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a REGISTER request with a SPI version number that contains a large number of…

  • CVE-2005-4467Dec 22, 2005
    Phpgedview
    Phpgedview
    risk 0.03cvss —epss 0.05

    Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the PGV_BASE_DIRECTORY parameter.

  • CVE-2005-4468Dec 22, 2005
    Phpgedview
    Phpgedview
    risk 0.04cvss —epss 0.08

    PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to execute arbitrary code via a URL in the PGV_BASE_DIRECTORY parameter.

  • CVE-2005-4469Dec 22, 2005
    Phpgedview
    Phpgedview
    risk 0.00cvss —epss 0.03

    Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code via (1) the username field in login.php, or the (2) user_language, (3) user_email, and (4) user_gedcomid parameters in login_register.php,…

  • CVE-2005-4470Dec 22, 2005
    Blender
    Blenloader
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which…

  • CVE-2005-4471Dec 22, 2005
    Avaya
    Modular Messaging Message Storage Server
    risk 0.00cvss —epss 0.02

    POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted packets.

  • CVE-2005-4472Dec 22, 2005
    Macromedia
    Jrun
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conversion to wide characters.

  • CVE-2005-4473Dec 22, 2005
    Macromedia
    Jrun
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformed URL."

  • CVE-2005-4462Dec 21, 2005
    Tolva
    Tolva
    risk 0.03cvss —epss 0.05

    PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execute arbitrary code via a URL in the ROOT parameter.

  • CVE-2005-4463Dec 21, 2005
    WordPress
    WordPress
    risk 0.00cvss —epss 0.03

    WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to (1) wp-includes/vars.php, (2) wp-content/plugins/hello.php, (3) wp-admin/upgrade-functions.php, (4) wp-admin/edit-form.php, (5) wp-settings.php, and (6)…

  • CVE-2005-4459Dec 21, 2005
    VMware
    Workstation
    risk 0.01cvss —epss 0.14

    Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP…

  • CVE-2005-4460Dec 21, 2005
    Beehive Forum
    Beehive Forum
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Description, and (3) Comment fields to (a) links.php and (b) links_add.php.

  • CVE-2005-4461Dec 21, 2005
    Beehive Forum
    Beehive Forum
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_sess parameter.

  • CVE-2005-3657Dec 21, 2005
    McAfee
    Mcinsctl.dll
    risk 0.00cvss —epss 0.02

    The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to restrict access to required domains, which allows remote attackers to create or append to arbitrary files via the StartLog and AddLog methods in the…

  • CVE-2005-4267Dec 21, 2005
    Qualcomm
    Eudora Worldmail
    risk 0.08cvss —epss 0.67

    Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7)…

  • CVE-2005-4448Dec 21, 2005
    Flatnuke
    Flatnuke
    risk 0.00cvss —epss 0.03

    FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash (possibly via CVE-2005-2813), then calculating the…

  • CVE-2005-4449Dec 21, 2005
    Flatnuke
    Flatnuke
    risk 0.03cvss —epss 0.05

    verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting the code into the body parameter. NOTE: if a FlatNuke administrator is normally assumed to be able to modify…

  • CVE-2005-4450Dec 21, 2005
    PhpMyAdmin
    phpMyAdmin
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to server_privileges.php, as demonstrated using the dbname and checkprivs parameters. NOTE: the provenance of…

  • CVE-2005-4451Dec 21, 2005
    Microfocus
    Hpux
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to gain access via unspecified attack vectors.

  • CVE-2005-4452Dec 21, 2005
    Information Call Center
    Information Call Center
    risk 0.00cvss —epss 0.01

    Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords.

  • CVE-2005-4453Dec 21, 2005
    Ultraapps
    Ultraapps Issue Manager
    risk 0.00cvss —epss 0.03

    UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to UserProfile.aspx, then modifying the password field.

  • CVE-2005-4454Dec 21, 2005
    Livejournal
    Livejournal
    risk 0.03cvss —epss 0.02

    Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss option is enabled, allows remote attackers to conduct cross-site scripting (XSS) attacks via a "\" (backslash) within a "javascript" scheme in a style property…

  • CVE-2005-4455Dec 21, 2005
    Livejournal
    Livejournal
    risk 0.00cvss —epss 0.01

    cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi.

  • CVE-2005-4456Dec 21, 2005
    MailEnable
    Mailenable
    risk 0.04cvss —epss 0.07

    Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) LIST, (2) LSUB, and (3) UID FETCH commands. NOTE: it is possible that…

  • CVE-2005-4457Dec 21, 2005
    MailEnable
    Mailenable
    risk 0.00cvss —epss 0.03

    MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via several "..." (triple dot) sequences in a UID FETCH command.

  • CVE-2005-4458Dec 21, 2005
    Metadot
    Metadot Portal Server
    risk 0.00cvss —epss 0.02

    Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER global variables when performing checks for special privileges, which allows users to gain administrator privileges by adding themselves to the SITE_MGR group.

  • CVE-2005-4440Dec 21, 2005
    Vlan Protocol
    Vlan Protocol
    risk 0.00cvss —epss 0.02

    The 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via a message with two 802.1q tags, which causes the second tag to be redirected from a downstream switch after the first tag has been stripped, as demonstrated by Yersinia,…

  • CVE-2005-4441Dec 21, 2005
    Pvlan Protocol
    Pvlan Protocol
    risk 0.00cvss —epss 0.02

    The PVLAN protocol allows remote attackers to bypass network segmentation and spoof PVLAN traffic via a PVLAN message with a target MAC address that is set to a gateway router, which causes the packet to be sent to the router, where the source MAC is modified, aka "Modification…

  • CVE-2005-4442Dec 21, 2005
    OpenLDAP
    Openldap
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.

  • CVE-2005-4443Dec 21, 2005
    Gauche
    Gauche
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in Gauche before 0.8.6-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.

  • CVE-2005-4444Dec 21, 2005
    David Harris
    Mail
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in the trace message functionality in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allow remote attackers to execute arbitrary code via a long POP3 reply.

  • CVE-2005-4445Dec 21, 2005
    Pegasus Mail
    Pegasus Mail
    risk 0.00cvss —epss 0.03

    Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allows remote attackers to execute arbitrary code via a long email message header, which triggers a one-byte buffer overflow.

  • CVE-2005-4446Dec 21, 2005
    Aspbite
    Aspbite
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.asp in ASPBite 8.x allows remote attackers to inject arbitrary web script or HTML via the strSearch parameter.

  • CVE-2005-4447Dec 21, 2005
    Coinsoft Technologies
    Phpcoin
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in articles\articles_funcs.php in phpCOIN 1.2.2 allows remote attackers to modify SQL syntax and possibly execute SQL in limited circumstances via the rec_next parameter. NOTE: the original disclosure suggests that command injection is not feasible…

  • CVE-2005-4433Dec 21, 2005
    Esselbach
    Storyteller CMS
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Search field.

  • CVE-2005-4434Dec 21, 2005
    Abledesign
    Abledesign
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2005-4435Dec 21, 2005
    Abledesign
    D Man
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2005-4436Dec 21, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2), 12.3(3)B, and 12.3(2)T and other products, allows remote attackers to cause a denial of service by sending a "spoofed neighbor announcement" with (1) mismatched k values or (2)…

  • CVE-2005-4437Dec 21, 2005
    Extended Interior Gateway Routing Protocol
    Extended Interior Gateway Routing Protocol
    risk 0.00cvss —epss 0.02

    MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP…