VYPR

CVEs

342,869 total · page 6582 of 6,858

AllCriticalHighKEV
  • CVE-2005-3407Nov 1, 2005
    PhpESP
    phpESP
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2005-3408Nov 1, 2005
    Greg Neustaetter
    Gcards
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands via the limit parameter.

  • CVE-2005-3123Oct 30, 2005
    GNU
    Gnump3d
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed.

  • CVE-2005-3315Oct 30, 2005
    Novell
    Zenworks Patch Management Server
    risk 0.03cvss —epss 0.05

    Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter…

  • CVE-2005-3363Oct 30, 2005
    Saphplesson
    Saphplesson
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in (1) showcat.php and (2) add.php.

  • CVE-2005-3364Oct 30, 2005
    Platinum
    Dboardgear
    risk 0.00cvss —epss 0.02

    Multiple SQL injection vulnerabilities in DboardGear allow remote attackers to execute arbitrary SQL commands via (1) the buddy parameter in buddy.php, (2) the u2uid parameter in u2u.php, and (3) an invalid theme file in the themes action to ctrtools.php.

  • CVE-2005-3365Oct 30, 2005
    Dcp Portal
    Dcp Portal
    risk 0.00cvss —epss 0.03

    Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in…

  • CVE-2005-3366Oct 30, 2005
    PHP Icalendar
    Phpicalendar
    risk 0.00cvss —epss 0.02

    PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 through 2.0.1 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the phpicalendar cookie. NOTE: this is not a cross-site scripting (XSS) issue as claimed by the…

  • CVE-2005-3367Oct 30, 2005
    Sparkleblog
    Sparkleblog
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in journal.php in SparkleBlog 2.1 allows remote attackers to inject arbitrary web script or HTML via the name field.

  • CVE-2005-3368Oct 30, 2005
    Search Enhanced
    Search Enhanced
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Search_Enhanced module in PHP-Nuke 7.9 allows remote attackers to inject arbitrary web script or HTML via the query parameter.

  • CVE-2005-3369Oct 30, 2005
    Woltlab
    Burning Board
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and earlier allow remote attackers to execute arbitrary SQL commands and possibly upload files via the (1) fileid and (2) subkatid parameters.

  • CVE-2005-3370Oct 30, 2005
    Arcavir
    Arcavir 2005
    risk 0.00cvss —epss 0.01

    Multiple interpretation error in ArcaVir 2005 package 2005-06-21 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that…

  • CVE-2005-3371Oct 30, 2005
    AVG Technologies
    AVG 7
    risk 0.00cvss —epss 0.01

    Multiple interpretation error in AVG 7 7.0.323 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be…

  • CVE-2005-3372Oct 30, 2005
    Ca
    eTrust
    risk 0.00cvss —epss 0.01

    Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe…

  • CVE-2005-3373Oct 30, 2005
    Doctor Web Ltd
    Dr.web
    risk 0.00cvss —epss 0.01

    Multiple interpretation error in Dr.Web 4.32b allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be…

  • CVE-2005-3374Oct 30, 2005
    FRISK Software
    F Prot Antivirus
    risk 0.00cvss —epss 0.01

    Multiple interpretation error in F-Prot 3.16c allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be…

  • CVE-2005-3375Oct 30, 2005
    Ikarus
    Ikarus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still…

  • CVE-2005-3376Oct 30, 2005
    Kaspersky Lab
    Kaspersky
    risk 0.00cvss —epss 0.01

    Multiple interpretation error in Kaspersky 5.0.372 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still…

  • CVE-2005-3377Oct 30, 2005
    McAfee
    Internet Security Suite
    risk 0.00cvss —epss 0.01

    Multiple interpretation error in (1) McAfee Internet Security Suite 7.1.5 version 9.1.08 with the 4.4.00 engine and (2) McAfee Corporate 8.0.0 patch 10 with the 4400 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic…

  • CVE-2005-3378Oct 30, 2005
    Norman
    Norman Virus Control
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in Norman 5.81 with the 5.83.02 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type…

  • CVE-2005-3379Oct 30, 2005
    Trend Micro
    Officescan
    risk 0.00cvss —epss 0.01

    Multiple interpretation error in Trend Micro (1) PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and (2) OfficeScan 7.0 with the 7.510.1002 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is…

  • CVE-2005-3380Oct 30, 2005
    Panda Project
    Titanium 2005
    risk 0.00cvss —epss 0.01

    Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that…

  • CVE-2005-3381Oct 30, 2005
    Ukranian National Antivirus
    Una
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in Ukrainian National Antivirus (UNA) 1.83.2.16 with kernel 265 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to…

  • CVE-2005-3382Oct 30, 2005
    Talos
    Sophos
    risk 0.00cvss —epss 0.04

    Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type…

  • CVE-2005-3383Oct 30, 2005
    Techno Dreams
    Announcement Script
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.

  • CVE-2005-3384Oct 30, 2005
    Techno Dreams
    Guest Book
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.

  • CVE-2005-3385Oct 30, 2005
    Techno Dreams
    Mailing List
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.

  • CVE-2005-3386Oct 30, 2005
    Techno Dreams
    Web Directory
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.

  • CVE-2005-2930Oct 28, 2005
    Chmlib
    Chmlib
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than…

  • CVE-2005-3361Oct 28, 2005
    Flatnuke
    Flatnuke
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the nome parameter in a login operation, a variant of CVE-2005-3306.

  • CVE-2005-2973Oct 27, 2005
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (infinite loop and crash).

  • CVE-2005-3088Oct 27, 2005
    Fetchmail
    Fetchmail
    risk 0.00cvss —epss 0.00

    fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.

  • CVE-2005-3241Oct 27, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.04

    Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors in the (1) ISAKMP, (2) FC-FCS, (3) RSVP, and (4) ISIS LSP dissector.

  • CVE-2005-3242Oct 27, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.03

    Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (2) the SMB dissector when SMB transaction payload reassembly is enabled.

  • CVE-2005-3243Oct 27, 2005
    Ethereal Group
    Ethereal
    risk 0.04cvss —epss 0.11

    Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.

  • CVE-2005-3244Oct 27, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.04

    The BER dissector in Ethereal 0.10.3 to 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.

  • CVE-2005-3245Oct 27, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service (memory consumption).

  • CVE-2005-3246Oct 27, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.03

    Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unknown vectors in the (1) SCSI, (2) sFlow, or (3) RTnet dissectors.

  • CVE-2005-3247Oct 27, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.04

    The SigComp UDVM in Ethereal 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.

  • CVE-2005-3248Oct 27, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the X11 dissector in Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (divide-by-zero) via unknown vectors.

  • CVE-2005-3249Oct 27, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer.

  • CVE-2005-3265Oct 27, 2005
    Skype Technologies
    Skype
    risk 0.00cvss —epss 0.06

    Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// links, or (3) a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine.

  • CVE-2005-3267Oct 27, 2005
    Skype Technologies
    Skype
    risk 0.01cvss —epss 0.07

    Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial of service (crash) via crafted network data with a large Object Counter value, which leads to a…

  • CVE-2005-3316Oct 27, 2005
    Symantec
    Discovery
    risk 0.00cvss —epss 0.01

    The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain privileges or prevent Discovery from running by setting another password.

  • CVE-2005-3317Oct 27, 2005
    Zipgenius
    Zipgenius
    risk 0.00cvss —epss 0.06

    Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via (1) a ZIP archive that contains a file with a long filename, which is not properly handled by (a)…

  • CVE-2005-3318Oct 27, 2005
    Chmlib
    Chmlib
    risk 0.00cvss —epss 0.04

    Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930.

  • CVE-2005-3319Oct 27, 2005
    PHP
    PHP
    risk 0.00cvss —epss 0.01

    The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost.

  • CVE-2005-3320Oct 27, 2005
    Siteturn
    Domain Manager Pro
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web script or HTML via the err parameter in the panel script.

  • CVE-2005-3321Oct 27, 2005
    Novell
    Suse Linux
    risk 0.00cvss —epss 0.00

    chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use…

  • CVE-2005-3322Oct 27, 2005
    Squid Cache
    Squid
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL).