VYPR

CVEs

342,589 total · page 6595 of 6,852

AllCriticalHighKEV
  • CVE-2005-2397Jul 27, 2005
    GNU
    Phpbook
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in guestbook.php in phpBook 1.46 allows remote attackers to inject arbitrary web script or HTML via the admin parameter.

  • CVE-2005-2398Jul 27, 2005
    PHP Surveyor
    Phpsurveyor
    risk 0.00cvss —epss 0.03

    Multiple SQL injection vulnerabilities in PHP Surveyor 0.98 allows remote attackers to execute arbitrary SQL commands via (1) the sid, start, and id parameters to browse.php, the sid parameter to (2) dataentry.php, (3) export.php, (4) admin.php, (5) conditions.php, (6) spss.php,…

  • CVE-2005-2399Jul 27, 2005
    PHP Surveyor
    Phpsurveyor
    risk 0.00cvss —epss 0.02

    PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to (1) browse.php, (2) export.php, (3) conditions.php, or (4) spss.php.

  • CVE-2005-2400Jul 27, 2005
    Phpfinance
    Phpfinance
    risk 0.00cvss —epss 0.02

    The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges.

  • CVE-2005-2401Jul 27, 2005
    PHP-Fusion
    Phpfusion
    risk 0.00cvss —epss 0.01

    PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag.

  • CVE-2005-2402Jul 27, 2005
    Phpsitesearch
    Phpsitesearch
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.php in PHPSiteSearch 1.7.7d allows remote attackers to inject arbitrary web script or HTML via the query parameter.

  • CVE-2005-2403Jul 27, 2005
    Realchat
    Realchat
    risk 0.00cvss —epss 0.01

    The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username.

  • CVE-2005-2404Jul 27, 2005
    Sendcard
    Sendcard
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2005-1691Jul 26, 2005
    SAP
    Internet Graphics Server
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to read arbitrary files via ".." sequences in an HTTP GET request.

  • CVE-2005-1849Jul 26, 2005
    Zlib
    Zlib
    risk 0.01cvss —epss 0.04

    inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.

  • CVE-2005-1852Jul 26, 2005
    KDE
    Kde
    risk 0.00cvss —epss 0.05

    Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.

  • CVE-2005-1920HigJul 26, 2005
    KDE
    Kde
    risk 0.49cvss 7.5epss 0.04

    The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information.

  • CVE-2005-2218Jul 26, 2005
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass restrictions on a jailed process.

  • CVE-2005-2276Jul 26, 2005
    Novell
    Groupwise Webaccess
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI (e.g. "j&#X41vascript" in an IMG tag.

  • CVE-2005-2368Jul 26, 2005
    Vim
    Vim
    risk 0.00cvss —epss 0.03

    vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

  • CVE-2005-2369Jul 26, 2005
    Ekg
    Ekg
    risk 0.00cvss —epss 0.03

    Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code.

  • CVE-2005-2370Jul 26, 2005
    Ekg
    Ekg
    risk 0.00cvss —epss 0.02

    Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.

  • CVE-2005-2371Jul 26, 2005
    Oracle Corporation
    Reports
    risk 0.00cvss —epss 0.22

    Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. NOTE: this issue was probably fixed by REP06 in…

  • CVE-2005-2372Jul 26, 2005
    Oracle Corporation
    Forms
    risk 0.00cvss —epss 0.03

    Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a malicious .fmx file and referencing it using an absolute pathname argument in the (1)…

  • CVE-2005-2373Jul 26, 2005
    Whitsoft Development
    Slimftpd
    risk 0.06cvss —epss 0.46

    Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands.

  • CVE-2005-2374Jul 26, 2005
    Belkin
    54g Wireless Router
    risk 0.00cvss —epss 0.02

    Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the (1) Telnet or (2) web administration interfaces.

  • CVE-2005-2375Jul 26, 2005
    Race Driver
    Race Driver
    risk 0.00cvss —epss 0.01

    Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a (1) nickname or (2) chat message.

  • CVE-2005-2376Jul 26, 2005
    Codemasters
    Toca Race Driver
    risk 0.00cvss —epss 0.01

    Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via a long (1) nickname or (2) chat message.

  • CVE-2005-2377Jul 26, 2005
    Mandrakesoft
    Mandrake Linux
    risk 0.00cvss —epss 0.03

    nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating systems, does not properly handle a SIGPIPE signal when sending a search request to an LDAP directory server, which might allow remote attackers to cause a denial of…

  • CVE-2005-2378Jul 26, 2005
    Oracle Corporation
    Reports
    risk 0.00cvss —epss 0.09

    Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the (1) CUSTOMIZE or (2) desformat parameters to rwservlet. NOTE: vector 2 is probably the same as CVE-2006-0289, and fixed in Jan 2006 CPU.

  • CVE-2005-2379Jul 26, 2005
    Oracle Corporation
    Reports
    risk 0.00cvss —epss 0.04

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) debug parameter to showenv, (2) test parameter to parsequery, or (3) delimiter or (4) CELLWRAPPER parameter to rwservlet.

  • CVE-2005-2380Jul 26, 2005
    PHP Surveyor
    Phpsurveyor
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the (1) sid, (2) start, and (3) id parameters to browse.php, or the sid parameter to (4) dataentry.php or (5) export.php.

  • CVE-2005-2381Jul 26, 2005
    PHP Surveyor
    Phpsurveyor
    risk 0.00cvss —epss 0.01

    PHP Surveyor 0.98 allows remote attackers to obtain sensitive information via a direct request to (1) question.php, (2) survey.php, or (3) group.php in the root directory, a direct request to (4) database.php, (5) sessioncontrol.php, (6) html.php, (7) sessioncontrol.php, an…

  • CVE-2005-2382Jul 26, 2005
    Oray
    Peanuthull
    risk 0.00cvss —epss 0.01

    Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which allows local users to gain privileges by accessing the Help functionality.

  • CVE-2005-2383Jul 26, 2005
    Phpnews
    Phpnews
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request.

  • CVE-2005-2327Jul 20, 2005
    E107
    E107
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested [url] BBCode tags.

  • CVE-2005-2328Jul 20, 2005
    Laffer
    Laffer
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in im.php in Laffer 0.3.2.6 and 0.3.2.7 allows remote attackers to execute arbitrary PHP code via the CFG_PATH variable.

  • CVE-2005-2329Jul 20, 2005
    MRV Communications
    In-Reach LX-8000S
    risk 0.00cvss —epss 0.01

    MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key authentication, does not properly restrict access to ports, which allows remote authenticated users to access the consoles of other users.

  • CVE-2005-2330Jul 20, 2005
    OsCommerce
    Oscommerce
    risk 0.04cvss —epss 0.10

    Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via (1) .. sequences or (2) a full pathname in the readme_file parameter.

  • CVE-2005-2331Jul 20, 2005
    Moosegallery
    Moosegallery
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in display.php in MooseGallery allows remote attackers to execute arbitrary PHP code via the type parameter.

  • CVE-2005-2332Jul 20, 2005
    Php.warpedweb.net
    Phppageprotect
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in PHPPageProtect 1.0.0a allows remote attackers to inject arbitrary web script or HTML via the username parameter to (1) admin.php or (2) login.php.

  • CVE-2005-2333Jul 20, 2005
    Seo Board
    Seo Board
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in smilies_popup.php in SEO-Board 1.0 allows remote attackers to inject arbitrary web script or HTML via the doc parameter.

  • CVE-2005-2334Jul 20, 2005
    Y.sak
    Y.sak
    risk 0.00cvss —epss 0.03

    Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to (1) w_s3mbfm.cgi, (2) w_s3adix.cgi, or (3) w_s3sbfm.cgi.

  • CVE-2005-1530Jul 19, 2005
    Sophos
    Small Business Suite
    risk 0.00cvss —epss 0.06

    Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.

  • CVE-2005-1850Jul 19, 2005
    Ekg
    Ekg
    risk 0.00cvss —epss 0.02

    Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown impact and attack vectors, a different vulnerability than CVE-2005-1916.

  • CVE-2005-1851Jul 19, 2005
    Ekg
    Ekg
    risk 0.00cvss —epss 0.02

    A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors.

  • CVE-2005-2196Jul 19, 2005
    Apple Inc.
    AirPort
    risk 0.00cvss —epss 0.00

    The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network.

  • CVE-2005-2297Jul 19, 2005
    Sybase
    Easerver
    risk 0.09cvss —epss 0.74

    Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter.

  • CVE-2005-2298Jul 19, 2005
    Bitdefender
    Bitdefender Engine
    risk 0.00cvss —epss 0.01

    BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards.

  • CVE-2005-2299Jul 19, 2005
    Simple Message Board
    Simple Message Board
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) FID parameter to forum.cfm, (2) UID parameter to user.cfm, (3) TID parameter to thread.cfm, or (4) PostDate…

  • CVE-2005-2300Jul 19, 2005
    Skype Technologies
    Skype
    risk 0.00cvss —epss 0.00

    Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jpg temporary file.

  • CVE-2005-2301Jul 19, 2005
    PowerDNS
    Powerdns
    risk 0.00cvss —epss 0.03

    PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote attackers to cause a denial of service (failure to answer ldap questions) and possibly conduct an LDAP injection attack.

  • CVE-2005-2302Jul 19, 2005
    PowerDNS
    Powerdns
    risk 0.00cvss —epss 0.00

    PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questions from clients that are denied recursion, which could cause a "blank out" of answers to those clients that are allowed to use recursion.

  • CVE-2005-2304Jul 19, 2005
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.09

    Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) via an image with an ICC Profile with a large Tag Count.

  • CVE-2005-2305Jul 19, 2005
    Dg
    Remote Control Server
    risk 0.04cvss —epss 0.05

    DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via a long message to TCP port 1071 or 1073, possibly due to a buffer overflow.