VYPR

CVEs

342,589 total · page 6594 of 6,852

AllCriticalHighKEV
  • CVE-2005-2423Aug 3, 2005
    Beehive Forum
    Beehive Forum
    risk 0.00cvss —epss 0.01

    Beehive Forum allows remote attackers to obtain sensitive information via (1) an invalid final_uri or sort_by parameter to index.php or a direct request to (2) admin.php, (3) attachments.inc.php, (4) banned.inc.php, (5) beehive.inc.php, (6) constants.inc.php, (7) db.inc.php, (8)…

  • CVE-2005-2424Aug 3, 2005
    Ericsson
    HN294dp
    risk 0.00cvss —epss 0.02

    The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson HN294dp and Dynalink RTA300W, allows remote attackers to access the Telnet port without authentication via certain packets to the web interface that cause the…

  • CVE-2005-2425Aug 3, 2005
    Ares
    Fileshare
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via a (1) long history parameter in the configuration file (ares.conf) or (2) long search string.

  • CVE-2005-2426Aug 3, 2005
    Ftpshell
    Ftpshell Server
    risk 0.03cvss —epss 0.01

    FTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application crash) by multiple connections and disconnections without using the QUIT command.

  • CVE-2005-2427Aug 3, 2005
    Elemental Software
    Cartwiz
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter.

  • CVE-2005-2428Aug 3, 2005
    IBM
    Lotus Domino
    risk 0.04cvss —epss 0.74

    Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field,…

  • CVE-2005-2429Aug 3, 2005
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows remote attackers to write arbitrary data to open applications in Microsoft Office.

  • CVE-2005-2430Aug 3, 2005
    GForge
    Gforge
    risk 0.00cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id or (2) group_id parameter to forum.php, (3) project_task_id parameter to task.php, (4) id parameter to detail.php, (5) the text…

  • CVE-2005-2431Aug 3, 2005
    GForge
    Gforge
    risk 0.00cvss —epss 0.01

    The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses (aka mail bomb).

  • CVE-2005-2432Aug 3, 2005
    Phplist
    Phplist
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.

  • CVE-2005-2433Aug 3, 2005
    Phplist
    Phplist
    risk 0.00cvss —epss 0.03

    PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php, (3) domainstats.php or (4) usercheck.php in public_html/lists/admin directory, (5) attributes.php, (6) dbcheck.php, (7) importcsv.php, (8) user.php, (9)…

  • CVE-2005-2434Aug 3, 2005
    Linksys
    Wrt54g
    risk 0.00cvss —epss 0.01

    Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to sniff the SSL connection and obtain sensitive information.

  • CVE-2005-2435Aug 3, 2005
    Website Baker
    Website Baker Project
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbitrary web script or HTML via the dir parameter.

  • CVE-2005-2436Aug 3, 2005
    Website Baker
    Websitebaker
    risk 0.00cvss —epss 0.01

    browse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a directory that does not exist in the dir parameter or (2) a direct request to certain php files, which reveal the path in an error message.

  • CVE-2005-2437Aug 3, 2005
    Website Baker
    Websitebaker
    risk 0.00cvss —epss 0.01

    Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to upload and execute arbitrary PHP code.

  • CVE-2005-2438Aug 3, 2005
    Usebb
    Usebb
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier allows remote attackers to inject arbitrary Javascript via the BBCode color value.

  • CVE-2005-2439Aug 3, 2005
    Usebb
    Usebb
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function.

  • CVE-2005-2440Aug 3, 2005
    Thomson Netg
    Web Skill Vantage Manager
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitrary SQL commands via the svmPassword parameter.

  • CVE-2005-2441Aug 3, 2005
    Vbzoom
    Vbzoom
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php.

  • CVE-2005-2442Aug 3, 2005
    Spi Dynamics
    Webinspect
    risk 0.00cvss —epss 0.02

    Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Javascript from one application into another.

  • CVE-2005-2443Aug 3, 2005
    Kshout
    Kshout
    risk 0.00cvss —epss 0.01

    Kshout 2.x and 3.x stores settings.dat under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords.

  • CVE-2005-2444Aug 3, 2005
    Cerulean Studios
    Trillian
    risk 0.00cvss —epss 0.00

    Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information.

  • CVE-2005-2445Aug 3, 2005
    Early Impact
    Productcart
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory parameter.

  • CVE-2005-2448Aug 3, 2005
    Ekg
    Ekg
    risk 0.00cvss —epss 0.02

    Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invalid behavior in applications) on big-endian systems.

  • CVE-2005-2449Aug 3, 2005
    Sandbox
    Sandbox
    risk 0.00cvss —epss 0.00

    Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp.

  • CVE-2005-2450Aug 3, 2005
    ClamAV
    Clamav
    risk 0.00cvss —epss 0.04

    Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.

  • CVE-2005-2451Aug 3, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet.

  • CVE-2005-2452Aug 3, 2005
    LibTIFF
    Libtiff
    risk 0.00cvss —epss 0.02

    libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header with a zero "YCbCr subsampling" value, which causes a divide-by-zero error in (1) tif_strip.c and (2) tif_tile.c, a different vulnerability than CVE-2004-0804.

  • CVE-2005-1762Aug 2, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service (kernel crash) via a "non-canonical" address.

  • CVE-2005-2079Aug 2, 2005
    Symantec
    Backup Exec
    risk 0.01cvss —epss 0.05

    Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers allows remote attackers to execute arbitrary code.

  • CVE-2005-2405Aug 1, 2005
    Opera
    Opera
    risk 0.00cvss —epss 0.03

    Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.

  • CVE-2005-2406Aug 1, 2005
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI.

  • CVE-2005-2407Aug 1, 2005
    Opera
    Opera
    risk 0.00cvss —epss 0.03

    A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then tricking the user into double-clicking on the "Run" button, aka "link hijacking".

  • CVE-2005-2409Aug 1, 2005
    Nbsmtp
    Nbsmtp
    risk 0.04cvss —epss 0.10

    Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call.

  • CVE-2005-2410Aug 1, 2005
    GNOME Foundation
    Networkmanager
    risk 0.00cvss —epss 0.04

    Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call.

  • CVE-2005-2411Aug 1, 2005
    Tdiary
    Tdiary
    risk 0.00cvss —epss 0.02

    Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user.

  • CVE-2005-2335Jul 27, 2005
    Fetchmail
    Fetchmail
    risk 0.01cvss —epss 0.06

    Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue.…

  • CVE-2005-2384Jul 27, 2005
    Alwil
    Avast Antivirus
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary files via an ACE archive containing filenames with (1) .. or…

  • CVE-2005-2385Jul 27, 2005
    Alwil
    Avast Antivirus
    risk 0.00cvss —epss 0.04

    Buffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to execute arbitrary code via an ACE archive containing a long filename.

  • CVE-2005-2386Jul 27, 2005
    Elemental Software
    Cartwiz
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

  • CVE-2005-2387Jul 27, 2005
    Goodtech Systems
    Goodtech SMTP Server
    risk 0.00cvss —epss 0.03

    Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via (1) a RCPT TO command with a long DNS name, or (2) a large number of RCPT TO commands with a long e-mail name arugment in the last command.

  • CVE-2005-2388Jul 27, 2005
    Microsoft
    Windows
    risk 0.00cvss —epss 0.02

    Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code.

  • CVE-2005-2389Jul 27, 2005
    Symantec
    Netbackup
    risk 0.00cvss —epss 0.01

    NDMP server in Veritas NetBackup 5.1 allows attackers to cause a denial of service via a CONFIG message with an out-of-range timestamp, which triggers a null dereference.

  • CVE-2005-2390Jul 27, 2005
    Proftpd
    Proftpd
    risk 0.00cvss —epss 0.09

    Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.

  • CVE-2005-2391Jul 27, 2005
    risk 0.00cvss —epss 0.01

    Unknown vulnerability in 3Com OfficeConnect Wireless 11g Access Point before 1.03.12 allows remote attackers to obtain sensitive information via the web interface.

  • CVE-2005-2392Jul 27, 2005
    Cmsimple
    Cmsimple
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function.

  • CVE-2005-2393Jul 27, 2005
    Cutephp
    Cutenews
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTML via (1) the lastusername parameter to index.php or (2) selected_search_arch parameter to search.php.

  • CVE-2005-2394Jul 27, 2005
    Cutephp
    Cutenews
    risk 0.00cvss —epss 0.01

    show_news.php in CuteNews 1.3.6 allows remote attackers to obtain the full path of the server via an invalid archive parameter.

  • CVE-2005-2395Jul 27, 2005
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available.

  • CVE-2005-2396Jul 27, 2005
    MediaWiki
    Mediawiki
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the page move template.