VYPR

CVEs

343,326 total · page 6707 of 6,867

AllCriticalHighKEV
  • CVE-2004-0042Feb 3, 2004
    Beasts
    Vsftpd
    risk 0.00cvss —epss 0.01

    vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames.

  • CVE-2004-0043Feb 3, 2004
    Yahoo
    Messenger
    risk 0.00cvss —epss 0.04

    Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in the download feature.

  • CVE-2004-0044Feb 3, 2004
    Cisco Systems, Inc.
    Personal Assistant
    risk 0.00cvss —epss 0.02

    Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with…

  • CVE-2004-0045Feb 3, 2004
    Isc
    Inn
    risk 0.01cvss —epss 0.09

    Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.

  • CVE-2004-0046Feb 3, 2004
    Snapstream
    PVS LITE
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' (double quote) character.

  • CVE-2004-1082Feb 3, 2004
    Apache
    HTTP Server
    risk 0.01cvss —epss 0.08

    mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

  • CVE-2003-1207Feb 1, 2004
    Crob
    Crob FTP Server
    risk 0.03cvss —epss 0.03

    Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir command with a large number of "." characters followed by a "/*" string.

  • CVE-2004-2034Jan 29, 2004
    Wildtangent
    Webdriver
    risk 0.00cvss —epss 0.04

    Buffer overflow in the (1) WTHoster and (2) WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to execute arbitrary code via a long filename.

  • CVE-2004-2132Jan 29, 2004
    PJ CGI
    Neo review
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in PJreview_Neo.cgi in PJ CGI Neo review allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter.

  • CVE-2004-2133Jan 29, 2004
    Cvsup
    Cvsup
    risk 0.00cvss —epss 0.01

    Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in…

  • CVE-2004-2134Jan 28, 2004
    Oracle Corporation
    toplink mapping workBench
    risk 0.03cvss —epss 0.02

    Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords.

  • CVE-2004-2131Jan 27, 2004
    IBM
    Informix Dynamic Server
    risk 0.03cvss —epss 0.01

    Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable.

  • CVE-2004-2117Jan 24, 2004
    Tinyserver
    Tinyserver
    risk 0.04cvss —epss 0.08

    Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a GET request without the HTTP version (HTTP/1.1), or (2) a request without GET or the HTTP version.

  • CVE-2004-2122Jan 24, 2004
    Intra Forum
    Intra Forum
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in intraforum_db.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML via the (1) use_last_read or (2) forum parameters.

  • CVE-2004-2120Jan 23, 2004
    Reptile Web Server
    Reptile Web Server
    risk 0.03cvss —epss 0.03

    Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via multiple incomplete GET requests without the HTTP version.

  • CVE-2004-1759Jan 21, 2004
    IBM
    Director Agent
    risk 0.00cvss —epss 0.02

    Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.

  • CVE-2004-1760Jan 21, 2004
    IBM
    Director Agent
    risk 0.00cvss —epss 0.04

    The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.

  • CVE-2003-0696Jan 20, 2004
    IBM
    Aix
    risk 0.00cvss —epss 0.01

    The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion).

  • CVE-2003-0904Jan 20, 2004
    Microsoft
    Exchange Server
    risk 0.01cvss —epss 0.08

    Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g.…

  • CVE-2003-0969Jan 20, 2004
    risk 0.00cvss —epss 0.03

    mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.

  • CVE-2003-0985Jan 20, 2004
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual…

  • CVE-2003-0990Jan 20, 2004
    SquirrelMail
    Squirrelmail
    risk 0.05cvss —epss 0.29

    The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field.

  • CVE-2003-1022Jan 20, 2004
    Debian
    Fsp
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.

  • CVE-2003-1023Jan 20, 2004
    Midnight Commander
    Midnight Commander
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.

  • CVE-2003-1024Jan 20, 2004
    Tcsh
    Tcsh
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gain privileges.

  • CVE-2003-1025Jan 20, 2004
    Microsoft
    Internet Explorer
    risk 0.05cvss —epss 0.27

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL…

  • CVE-2003-1026Jan 20, 2004
    Microsoft
    Internet Explorer
    risk 0.06cvss —epss 0.39

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by…

  • CVE-2003-1027Jan 20, 2004
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.38

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2,…

  • CVE-2003-1028Jan 20, 2004
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.19

    The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which could allow remote attackers to bypass security mechanisms that rely on random names, as…

  • CVE-2004-0011Jan 20, 2004
    Debian
    Fsp
    risk 0.00cvss —epss 0.04

    Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code.

  • CVE-2004-0014Jan 20, 2004
    Nd
    Nd
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings.

  • CVE-2004-0029Jan 20, 2004
    IBM
    Lotus Domino
    risk 0.00cvss —epss 0.00

    Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges.

  • CVE-2004-0030CriJan 20, 2004
    Phpgedview
    Phpgedview
    risk 0.67cvss 9.8epss 0.07

    PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server…

  • CVE-2004-0031Jan 20, 2004
    Phpgedview
    Phpgedview
    risk 0.00cvss —epss 0.02

    PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.

  • CVE-2004-0032Jan 20, 2004
    Phpgedview
    Phpgedview
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname parameter.

  • CVE-2004-0033Jan 20, 2004
    Phpgedview
    Phpgedview
    risk 0.03cvss —epss 0.03

    admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command.

  • CVE-2004-0034Jan 20, 2004
    Phorum
    Phorum
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the phorum_check_xss function in common.php, (2) the EditError variable in profile.php, and (3) the Error variable in login.php.

  • CVE-2004-0035Jan 20, 2004
    Phorum
    Phorum
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.

  • CVE-2004-0036Jan 20, 2004
    Jelsoft
    Vbulletin
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter.

  • CVE-2004-0037Jan 20, 2004
    Pulsesecure
    Desktop Client
    risk 0.00cvss —epss 0.02

    FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages.

  • CVE-2004-1766Jan 20, 2004
    Juniper Networks
    Netscreen Security Manager 2004
    risk 0.00cvss —epss 0.02

    The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing.

  • CVE-2004-2127Jan 20, 2004
    Leif M. Wright
    Web Blog
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable.

  • CVE-2005-1247Jan 15, 2004
    Novell
    Nsure Audit
    risk 0.00cvss —epss 0.02

    webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability.

  • CVE-2004-1124Jan 14, 2004
    SCO Group
    Unixware
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities.

  • CVE-2004-1764Jan 14, 2004
    Microfocus
    CDE libDtSvc
    risk 0.00cvss —epss 0.01

    Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.

  • CVE-2004-1000Jan 10, 2004
    Debian
    Lintian
    risk 0.00cvss —epss 0.00

    lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack.

  • CVE-2003-0963Jan 5, 2004
    LFTP
    lftp
    risk 0.04cvss —epss 0.14

    Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.

  • CVE-2003-0977Jan 5, 2004
    Nongnu
    Cvs
    risk 0.00cvss —epss 0.02

    CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.

  • CVE-2003-0978Jan 5, 2004
    GNU
    Privacy Guard
    risk 0.00cvss —epss 0.03

    Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key…

  • CVE-2003-0979Jan 5, 2004
    Freescripts
    Visitorbook
    risk 0.00cvss —epss 0.01

    FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via…