VYPR

CVEs

342,589 total · page 6589 of 6,852

AllCriticalHighKEV
  • CVE-2005-1843Aug 24, 2005
    Adobe Inc.
    Version Cue
    risk 0.03cvss —epss 0.01

    VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, allows local users to load arbitrary libraries and execute arbitrary code via the -lib command line argument.

  • CVE-2005-2531Aug 24, 2005
    OpenVPN
    OpenVPN
    risk 0.00cvss —epss 0.02

    OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to the server and causes the error to be processed by the wrong client, which allows remote attackers…

  • CVE-2005-2532Aug 24, 2005
    OpenVPN
    OpenVPN
    risk 0.00cvss —epss 0.03

    OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service (client disconnection) via a large number of packets that can not be decrypted.

  • CVE-2005-2533Aug 24, 2005
    OpenVPN
    OpenVPN
    risk 0.00cvss —epss 0.01

    OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.

  • CVE-2005-2534Aug 24, 2005
    OpenVPN
    OpenVPN
    risk 0.00cvss —epss 0.01

    Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.

  • CVE-2005-2556Aug 24, 2005
    Mantisbt
    Mantis
    risk 0.00cvss —epss 0.02

    core/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows remote attackers to connect to internal databases by modifying the g_db_type variable and monitoring the speed of responses, as identified by bug#0005956.

  • CVE-2005-2685Aug 24, 2005
    Savewebportal
    Savewebportal
    risk 0.00cvss —epss 0.01

    SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then editing the desired file to contain the PHP code, as demonstrated using header.php in the fichier parameter. NOTE: it is possible that…

  • CVE-2005-2686Aug 24, 2005
    Savewebportal
    Savewebportal
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via ".." sequences in the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php.

  • CVE-2005-2687Aug 24, 2005
    Savewebportal
    Savewebportal
    risk 0.00cvss —epss 0.02

    PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php.

  • CVE-2005-2688Aug 24, 2005
    Savewebportal
    Savewebportal
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a large number of parameters to (1) footer.php, (2) header.php, (3) menu_dx.php, or (4) menu_sx.php, or Javascript code in the (5)…

  • CVE-2005-2689Aug 24, 2005
    Postnuke
    Postnuke
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary web script or HTML via (1) the moderate parameter to the Comments module or (2) htmltext parameter to html/user.php.

  • CVE-2005-2690Aug 24, 2005
    Postnuke
    Postnuke
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arbitrary SQL commands via the show parameter to dl-viewdownload.php.

  • CVE-2005-2691Aug 24, 2005
    Runcms
    Runcms
    risk 0.00cvss —epss 0.02

    includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTR_OVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code.

  • CVE-2005-2692Aug 24, 2005
    Runcms
    Runcms
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addquery and (2) subquery parameters to the newbb plus module, the forum parameter to (3) newtopic.php, (4) edit.php, or (5) reply.php in the…

  • CVE-2005-0357Aug 23, 2005
    Sun Corporation
    Solstice Backup
    risk 0.01cvss —epss 0.04

    EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or…

  • CVE-2005-0358Aug 23, 2005
    Sun Corporation
    Solstice Backup
    risk 0.01cvss —epss 0.05

    EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.

  • CVE-2005-0359Aug 23, 2005
    Sun Corporation
    Solstice Backup
    risk 0.01cvss —epss 0.04

    The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to…

  • CVE-2005-2098Aug 23, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.03

    The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session…

  • CVE-2005-2099Aug 23, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.03

    The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty, which causes the creation to fail,…

  • CVE-2005-2457Aug 23, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.04

    The driver for compressed ISO file systems (zisofs) in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a denial of service (kernel crash) via a crafted compressed ISO file system.

  • CVE-2005-2458Aug 23, 2005
    Linux
    Kernel
    risk 0.01cvss —epss 0.04

    inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service (kernel crash) via a compressed file with "improper tables".

  • CVE-2005-2459Aug 23, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.05

    The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different…

  • CVE-2005-2491Aug 23, 2005
    Pcre
    Pcre
    risk 0.00cvss —epss 0.04

    Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based…

  • CVE-2005-2499Aug 23, 2005
    Slocate
    Slocate
    risk 0.00cvss —epss 0.00

    slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory structure.

  • CVE-2005-2631Aug 23, 2005
    Cisco Systems, Inc.
    Clean Access
    risk 0.00cvss —epss 0.02

    Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.

  • CVE-2005-2632Aug 23, 2005
    Mediabox404
    Mediabox404
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in login_admin_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field.

  • CVE-2005-2633Aug 23, 2005
    Phptb
    Topic Boards
    risk 0.03cvss —epss 0.03

    Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter.

  • CVE-2005-2634Aug 23, 2005
    Wftpserver
    Winftp Server
    risk 0.00cvss —epss 0.05

    Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server 1.6.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long request.

  • CVE-2005-2635Aug 23, 2005
    Phpadsnew
    Phpadsnew
    risk 0.00cvss —epss 0.02

    Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via a .. (dot dot) in the (1) layerstyle parameter to adlayer.php or (2) language parameter to js-form.php.

  • CVE-2005-2636Aug 23, 2005
    Phpadsnew
    Phpadsnew
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter.

  • CVE-2005-2637Aug 23, 2005
    Phpfreenews
    Phpfreenews
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Match or (2) CatID parameter to SearchResults.php, or (3) the password to AccessControl.php.

  • CVE-2005-2638Aug 23, 2005
    Phpfreenews
    Phpfreenews
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) NewsMode parameter to NewsCategoryForm.php, or the (2) Match or (3) NewsMode parameter to SearchResults.php.

  • CVE-2005-2639Aug 23, 2005
    Valusoft
    Chris Moneymakers World Poker Championship
    risk 0.04cvss —epss 0.06

    Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long nickname.

  • CVE-2005-2640Aug 23, 2005
    Juniper Networks
    Screenos
    risk 0.03cvss —epss 0.07

    Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the…

  • CVE-2005-2641Aug 23, 2005
    Padl Software
    Pam LDAP
    risk 0.00cvss —epss 0.04

    Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate.

  • CVE-2005-2642Aug 23, 2005
    Mutt
    Mutt
    risk 0.01cvss —epss 0.04

    Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext.

  • CVE-2005-2643Aug 23, 2005
    Tor
    Tor
    risk 0.00cvss —epss 0.01

    Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit.

  • CVE-2005-2644Aug 23, 2005
    Isemarket
    Jaguarcontrol
    risk 0.03cvss —epss 0.04

    Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Jtext field.

  • CVE-2005-2645Aug 23, 2005
    Xerox
    MicroServer Web Server
    risk 0.00cvss —epss 0.03

    Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication.

  • CVE-2005-2646Aug 23, 2005
    Xerox
    MicroServer Web Server
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests.

  • CVE-2005-2647Aug 23, 2005
    Xerox
    MicroServer Web Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitrary web script or HTML and modify web pages via unknown vectors.

  • CVE-2005-2648Aug 23, 2005
    W Agora
    W Agora
    risk 0.04cvss —epss 0.04

    Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary files via the site parameter.

  • CVE-2005-2649Aug 23, 2005
    Atutor
    Atutor
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course parameter in login.php or (2) words parameter in search.php.

  • CVE-2005-2650Aug 23, 2005
    Emefa
    Emefa Guestbook
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, and (3) email parameters.

  • CVE-2005-2651Aug 23, 2005
    Phpoutsourcing
    Zorum
    risk 0.04cvss —epss 0.05

    gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter.

  • CVE-2005-2652Aug 23, 2005
    Phpoutsourcing
    Zorum
    risk 0.00cvss —epss 0.02

    Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) attach.php, (4) blacklist.php, (5) zorum/forum.php, (6) globalstat.php, (7) gorum/trace.php, (8) gorum/badwords.php, or (9) gorum/flood.php.

  • CVE-2005-2653Aug 23, 2005
    Bbcaffe
    Bbcaffe
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML via e-mail data in a message.

  • CVE-2005-2664Aug 23, 2005
    Whisper32
    Whisper32
    risk 0.00cvss —epss 0.00

    Whisper 32 1.16, and possibly earlier versions, stores passwords in plaintext in memory, which allows local users to obtain the password using a debugger or another mechanism to read process memory.

  • CVE-2005-2665Aug 23, 2005
    Elm Development Group
    Elm
    risk 0.05cvss —epss 0.15

    Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.

  • CVE-2005-2666Aug 23, 2005
    OpenSSL Project
    OpenSSL
    risk 0.00cvss —epss 0.01

    SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets…