VYPR

CVEs

340,057 total · page 6635 of 6,802

AllCriticalHighKEV
  • CVE-2004-1979Apr 30, 2004
    Props
    Props
    risk 0.00cvss —epss 0.00

    Cross-site scripting (XSS) vulnerability in do_search.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HTML or web script via the search_string parameter.

  • CVE-2004-1980Apr 30, 2004
    Props
    Props
    risk 0.00cvss —epss 0.00

    Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .. (dot dot) in (1) module or (2) format variables.

  • CVE-2004-1985Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.03cvss —epss 0.00

    Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL parameter.

  • CVE-2004-1987Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.00cvss —epss 0.00

    picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters.

  • CVE-2004-1988Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.03cvss —epss 0.00

    PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php.

  • CVE-2004-1989Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.03cvss —epss 0.00

    PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc.

  • CVE-2004-1977Apr 29, 2004
    risk 0.00cvss —epss 0.01

    3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service (crash) via a Nessus scan in safeChecks mode.

  • CVE-2004-1976Apr 28, 2004
    SMC Networks
    Barricade broadband router 7008ABR
    risk 0.00cvss —epss 0.01

    SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900.

  • CVE-2004-1973Apr 27, 2004
    Digi International Inc
    DiGi Web Server
    risk 0.04cvss —epss 0.08

    DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (slash) characters, which consumes resources when DiGi converts the slashes to \ (backslash) characters.

  • CVE-2004-1974Apr 27, 2004
    paFileDB
    paFileDB
    risk 0.00cvss —epss 0.00

    paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an…

  • CVE-2004-1975Apr 27, 2004
    PHP Arena
    Pafiledb
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551.

  • CVE-2004-1077Apr 26, 2004
    Citrix Systems
    Program Neighborhood Agent
    risk 0.00cvss —epss 0.00

    Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.

  • CVE-2004-1078Apr 26, 2004
    Citrix Systems
    Program Neighborhood Agent
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName…

  • CVE-2004-1355Apr 26, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.

  • CVE-2004-1968Apr 26, 2004
    Openbb
    Openbb
    risk 0.03cvss —epss 0.07

    The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter.

  • CVE-2004-1970Apr 26, 2004
    Securecomputing
    Smartether Ss6215s Switch
    risk 0.00cvss —epss 0.01

    Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the…

  • CVE-2004-1971Apr 26, 2004
    PHP-Nuke
    Video Gallery Module
    risk 0.00cvss —epss 0.00

    modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message.

  • CVE-2004-1972Apr 26, 2004
    PHP-Nuke
    Video Gallery Module
    risk 0.03cvss —epss 0.00

    SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execute arbitrary SQL code via the (1) clipid or (2) catid parameters in a viewclip, viewcat, or voteclip action.

  • CVE-2004-1965Apr 25, 2004
    Openbb
    Openbb
    risk 0.03cvss —epss 0.00

    Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4)…

  • CVE-2004-1967HigApr 25, 2004
    Openbb
    Openbb
    risk 0.57cvss 8.8epss 0.01

    Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the…

  • CVE-2004-1969Apr 25, 2004
    Devsyn
    Open Bulletin Board
    risk 0.00cvss —epss 0.01

    The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript.

  • CVE-2004-1356Apr 23, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.

  • CVE-2004-1952Apr 23, 2004
    Advanced Guestbook
    Advanced Guestbook
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password.

  • CVE-2004-1959Apr 23, 2004
    Protector System
    Protector System
    risk 0.00cvss —epss 0.01

    blocker_query.php in Protector System 1.15b1 for PHP-Nuke allows remote attackers to gain sensitive information via a string in the portNum parameter, which reveals the full path in an error message.

  • CVE-2004-1961Apr 23, 2004
    Protector System
    Protector System
    risk 0.00cvss —epss 0.00

    blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection and execute limited SQL commands via URL-encoded "'" characters ("%27").

  • CVE-2004-1963Apr 23, 2004
    risk 0.00cvss —epss 0.01

    nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to obtain sensitive information via a string in the portNum parameter, which reveals the full path in an error message.

  • CVE-2004-1964Apr 23, 2004
    Network Query Tool
    NQT
    risk 0.00cvss —epss 0.00

    Cross-site scripting (XSS) vulnerability in nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to inject arbitrary web script or HTML via the portNum parameter.

  • CVE-2004-1954Apr 21, 2004
    Phprofession
    Phprofession
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter.

  • CVE-2004-1956Apr 21, 2004
    Postnuke
    Postnuke
    risk 0.00cvss —epss 0.00

    PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the (1) includes/blocks directory, (2) pnadodb directory, (3) NS-NewUser module, (4) NS-Your_Account, (5) NS-LostPassword module, or (6) NS-User module which reveals the path to…

  • CVE-2004-1957Apr 21, 2004
    Postnuke
    Postnuke
    risk 0.03cvss —epss 0.00

    Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via the (1) lid and query parameters to the Downloads module, (2) query parameter to the Web_links module, or (3) hlpfile parameter to…

  • CVE-2004-1945Apr 20, 2004
    Kinesphere Corporation
    Exchange POP3
    risk 0.04cvss —epss 0.13

    Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field.

  • CVE-2004-1948Apr 20, 2004
    Ncftp Software
    Ncftp
    risk 0.00cvss —epss 0.00

    NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list.

  • CVE-2004-1992Apr 20, 2004
    SolarWinds
    Serv U File Server
    risk 0.04cvss —epss 0.11

    Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter, which triggers an out-of-bounds read.

  • CVE-2004-1938Apr 19, 2004
    Phorum
    Phorum
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorum_uriauth parameter to list.php.

  • CVE-2004-1941Apr 19, 2004
    Fastream
    Netfile FTP Web Server
    risk 0.00cvss —epss 0.01

    Fastream NETFile FTP/Web Server 6.5.1.980 allows remote attackers to cause a denial of service via a username that does not exist.

  • CVE-2004-1942Apr 19, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as…

  • CVE-2004-1943Apr 19, 2004
    PhpBB
    phpBB
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.

  • CVE-2004-1946Apr 19, 2004
    Codesys
    Web Server
    risk 0.00cvss —epss 0.00

    Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C command line argument. NOTE: it is not clear whether this issue could be exploited…

  • CVE-2004-1947Apr 19, 2004
    Bitdefender
    Bitdefender
    risk 0.04cvss —epss 0.10

    The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that…

  • CVE-2004-1950Apr 19, 2004
    PhpBB
    phpBB
    risk 0.00cvss —epss 0.01

    phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses.

  • CVE-2002-1576Apr 15, 2004
    SAP
    DB
    risk 0.03cvss —epss 0.01

    lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.

  • CVE-2002-1577Apr 15, 2004
    SAP
    R/3
    risk 0.00cvss —epss 0.01

    SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts.

  • CVE-2002-1578Apr 15, 2004
    SAP
    R/3
    risk 0.00cvss —epss 0.01

    The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.

  • CVE-2002-1579Apr 15, 2004
    SAP
    Sapgui
    risk 0.00cvss —epss 0.01

    SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an "unknown connection data" error.

  • CVE-2003-0202Apr 15, 2004
    Brian Renaud
    Metrics
    risk 0.00cvss —epss 0.00

    The (1) halstead and (2) gather_stats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.

  • CVE-2003-0257Apr 15, 2004
    IBM
    Aix
    risk 0.00cvss —epss 0.00

    Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges.

  • CVE-2003-0513Apr 15, 2004
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.11

    Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Internet Explorer to send the cookie outside the specified URL subsets, e.g.…

  • CVE-2003-0514Apr 15, 2004
    Apple Inc.
    Safari
    risk 0.03cvss —epss 0.03

    Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Safari to send the cookie outside the specified URL subsets, e.g. to a vulnerable…

  • CVE-2003-0592Apr 15, 2004
    KDE
    Konqueror
    risk 0.00cvss —epss 0.01

    Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL…

  • CVE-2003-0593Apr 15, 2004
    Opera
    Opera
    risk 0.00cvss —epss 0.00

    Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that…