VYPR

CVEs

342,589 total · page 6592 of 6,852

AllCriticalHighKEV
  • CVE-2005-2569Aug 16, 2005
    Funkboard
    Funkboard
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the fbusername or fbpassword parameter to (1) editpost.php, (2) prefs.php, (3) newtopic.php, (4) reply.php,…

  • CVE-2005-2570Aug 16, 2005
    Funkboard
    Funkboard
    risk 0.00cvss —epss 0.01

    FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to forums.php, which reveals the path in an error message.

  • CVE-2005-2571Aug 16, 2005
    Funkboard
    Funkboard
    risk 0.00cvss —epss 0.01

    FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_install.php scripts, which allows attackers to obtain the database username and password or inject arbitrary PHP code into info.php.

  • CVE-2005-2572Aug 16, 2005
    MySQL
    MySQL
    risk 0.00cvss —epss 0.05

    MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via (1) a request for a non-library file, which causes the Windows LoadLibraryEx…

  • CVE-2005-2573Aug 16, 2005
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash…

  • CVE-2005-2574Aug 16, 2005
    Xmb Forum
    Xmb
    risk 0.00cvss —epss 0.02

    xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as _SERVER[REMOTE_ADDR].

  • CVE-2005-2575Aug 16, 2005
    Xmb Forum
    Xmb
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands via certain values that are inserted into the $in variable.

  • CVE-2005-2576Aug 16, 2005
    Calogic
    Calogic Calendars
    risk 0.00cvss —epss 0.01

    CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) doclsqlres.php, (2) clmcpreload.php, (3) viewhistlog.php, (4) mcconfig.php, (5) doclsqlbak.php, (6) defcalsel.php, or (7) cl_minical.php, which…

  • CVE-2005-2577Aug 16, 2005
    Wyse
    Winterm
    risk 0.03cvss —epss 0.07

    Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device crash) via a packet with a zero in the IP option length field.

  • CVE-2005-2579Aug 16, 2005
    Nortel
    Contivity
    risk 0.00cvss —epss 0.00

    Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box.

  • CVE-2005-2580Aug 16, 2005
    MyBB
    Mybb
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to execute arbitrary SQL commands via the Username field in (1) index.php or (2) member.php, action parameter to (3) search.php or (4) member.php, or (5)…

  • CVE-2005-2581Aug 16, 2005
    Grandstream
    Budgetone 101
    risk 0.04cvss —epss 0.03

    Grandstream BudgeTone 101 and 102 running firmware 1.0.6.7 and possibly earlier versions, allows remote attackers to cause a denial of service (device hang or reboot) via a large UDP packet to port 5060.

  • CVE-2005-2582Aug 16, 2005
    Kaspersky Lab
    Anti Virus
    risk 0.00cvss —epss 0.00

    Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 uses world-writable permissions for the (1) log and (2) license directory, which allows local users to delete log files, append to arbitrary files via a symlink attack on kavmonitor.log, or delete license keys and prevent…

  • CVE-2005-2583Aug 16, 2005
    Mentor
    Adslfr4ii
    risk 0.00cvss —epss 0.01

    Mentor ADSL-FR4II router running firmware 2.00.0111 has an undocumented web server running on TCP port 5678, which allows local users to gain access.

  • CVE-2005-2584Aug 16, 2005
    Mentor
    Adslfr4ii
    risk 0.00cvss —epss 0.00

    The web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not set a default password, which allows local users to gain access.

  • CVE-2005-2585Aug 16, 2005
    Mentor
    Adslfr4ii
    risk 0.00cvss —epss 0.01

    Mentor ADSL-FR4II router running firmware 2.00.0111 allows remote attackers to cause a denial of service (active TCP connections state table consumption) via a large number of connections, such as a port scan.

  • CVE-2005-2586Aug 16, 2005
    Mentor
    Adslfr4ii
    risk 0.00cvss —epss 0.00

    Mentor ADSL-FR4II router running firmware 2.00.0111 stores the web administration password in cleartext in the backup configuration file, which allows local users to obtain sensitive information.

  • CVE-2005-2587Aug 16, 2005
    Phptb
    Topic Boards
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary SQL commands via the mid parameter.

  • CVE-2005-1527Aug 15, 2005
    AWStats
    Awstats
    risk 0.00cvss —epss 0.03

    Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.

  • CVE-2005-2498Aug 15, 2005
    PHPXMLRPC
    XML-RPC For PHP
    risk 0.00cvss —epss 0.05

    Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP…

  • CVE-2005-2547Aug 12, 2005
    Bluez
    Bluez
    risk 0.00cvss —epss 0.02

    security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.

  • CVE-2005-2548Aug 12, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.03

    vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service (kernel oops from null dereference) via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd.

  • CVE-2005-2549Aug 12, 2005
    Evolution
    Evolution
    risk 0.00cvss —epss 0.04

    Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.

  • CVE-2005-2550Aug 12, 2005
    Evolution
    Evolution
    risk 0.00cvss —epss 0.04

    Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.

  • CVE-2005-2551Aug 12, 2005
    Novell
    Edirectory
    risk 0.09cvss —epss 0.55

    Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors.

  • CVE-2005-2552Aug 12, 2005
    Microfocus
    Proliant Dl585
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in HP ProLiant DL585 servers running Integrated Lights Out (ILO) firmware before 1.81 allows attackers to access server controls when the server is "powered down."

  • CVE-2005-2553Aug 12, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The find_target function in ptrace32.c in the Linux kernel 2.4.x before 2.4.29 does not properly handle a NULL return value from another function, which allows local users to cause a denial of service (kernel crash/oops) by running a 32-bit ltrace program with the -i option on a…

  • CVE-2005-2554Aug 12, 2005
    Network Associates
    Epolicy Orchestrator Agent
    risk 0.00cvss —epss 0.00

    The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory.

  • CVE-2005-0058Aug 10, 2005
    Microsoft
    Windows 2000
    risk 0.05cvss —epss 0.46

    Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message.

  • CVE-2005-1218Aug 10, 2005
    Microsoft
    Windows 2000
    risk 0.08cvss —epss 0.57

    The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.

  • CVE-2005-1981Aug 10, 2005
    Microsoft
    Windows 2000
    risk 0.00cvss —epss 0.07

    Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message.

  • CVE-2005-1982Aug 10, 2005
    Microsoft
    Windows 2000
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card…

  • CVE-2005-1983Aug 10, 2005
    Microsoft
    Windows 2000
    risk 0.10cvss —epss 0.93

    Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the…

  • CVE-2005-1984Aug 10, 2005
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.55

    Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message.

  • CVE-2005-1988Aug 10, 2005
    Microsoft
    Internet Explorer
    risk 0.10cvss —epss 0.46

    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability".

  • CVE-2005-1989Aug 10, 2005
    Microsoft
    Internet Explorer
    risk 0.08cvss —epss 0.46

    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability".

  • CVE-2005-1990Aug 10, 2005
    Microsoft
    Internet Explorer
    risk 0.10cvss —epss 0.49

    Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, including (1) devenum.dll, (2)…

  • CVE-2005-2360Aug 10, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in the LDAP dissector in Ethereal 0.8.5 through 0.10.11 allows remote attackers to cause a denial of service (free static memory and application crash) via unknown attack vectors.

  • CVE-2005-2361Aug 10, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP dissector, (6) DCERPC, (7) DHCP, (8) RADIUS dissector, (9) Telnet dissector, (10) IS-IS LSP dissector, or (11) NCP dissector in Ethereal 0.8.19 through 0.10.11…

  • CVE-2005-2362Aug 10, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.02

    Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of service (application crash) by reassembling certain packets.

  • CVE-2005-2363Aug 10, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.04

    Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissector in Ethereal 0.8.15 through 0.10.11 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.

  • CVE-2005-2364Aug 10, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.04

    Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through 0.10.11 allows remote attackers to cause a denial of service (application crash) via certain packets that cause a null pointer dereference.

  • CVE-2005-2365Aug 10, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.03

    Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial of service (memory consumption) via unknown attack vectors.

  • CVE-2005-2366Aug 10, 2005
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.03

    Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abort or infinite loop) via unknown attack vectors.

  • CVE-2005-2367Aug 10, 2005
    Ethereal Group
    Ethereal
    risk 0.05cvss —epss 0.06

    Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.

  • CVE-2005-2535Aug 10, 2005
    Broadcom Corporation
    Brightstor Arcserve Backup
    risk 0.10cvss —epss 0.81

    Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.

  • CVE-2005-2536Aug 10, 2005
    Pstotext
    Pstotext
    risk 0.00cvss —epss 0.02

    pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file.

  • CVE-2005-2537Aug 10, 2005
    Flatnuke
    Flatnuke
    risk 0.00cvss —epss 0.02

    FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct request to structure.php.

  • CVE-2005-2538Aug 10, 2005
    Flatnuke
    Flatnuke
    risk 0.00cvss —epss 0.02

    FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via (1) a null byte or (2) an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1 in the mod parameter.

  • CVE-2005-2539Aug 10, 2005
    Flatnuke
    Flatnuke
    risk 0.04cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attackers to inject arbitrary web script or HTML via the (1) bodycolor, (2) backimage, (3) theme, or (4) logo parameter to structure.php, (5) admin, (6) admin_mail,…