VYPR

CVEs

385,711 total · page 6904 of 7,715

AllCriticalHighKEV
  • CVE-2010-0953Mar 10, 2010
    Coinsoft Technologies
    Phpcoin
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the mod parameter.

  • CVE-2010-0952Mar 10, 2010
    Adaptcms
    Onecms
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an elite action.

  • CVE-2010-0951Mar 10, 2010
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via the kontent_id parameter.

  • CVE-2010-0950Mar 10, 2010
    Natychmiast CMS
    Natychmiast CMS
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Natychmiast CMS allow remote attackers to execute arbitrary SQL commands via the id_str parameter to (1) index.php and (2) a_index.php.

  • CVE-2010-0949Mar 10, 2010
    Natychmiast CMS
    Natychmiast CMS
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Natychmiast CMS allow remote attackers to inject arbitrary web script or HTML via the id_str parameter to (1) index.php and (2) a_index.php.

  • CVE-2010-0948Mar 10, 2010
    Bigforum
    Bigforum
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in profil.php in Bigforum 4.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-0947Mar 10, 2010
    Bbsmax
    Bbsmax
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in post.aspx in Max Network Technology BBSMAX 3.0, 4.1, and 4.2 allows remote attackers to inject arbitrary web script or HTML via the action parameter.

  • CVE-2010-0926Mar 10, 2010
    Samba (software)
    Samba
    risk 0.05cvss —epss 0.30

    The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in…

  • CVE-2010-0791Mar 10, 2010
    Ncpfs
    Ncpfs
    risk 0.00cvss —epss 0.00

    The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after the…

  • CVE-2010-0790Mar 10, 2010
    Ncpfs
    Ncpfs
    risk 0.00cvss —epss 0.00

    sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name.

  • CVE-2010-0728Mar 10, 2010
    Samba (software)
    Samba
    risk 0.00cvss —epss 0.04

    smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.

  • CVE-2010-0418Mar 10, 2010
    Chumby
    Chumby One
    risk 0.00cvss —epss 0.03

    The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a request.

  • CVE-2010-0103Mar 10, 2010
    Energizer
    Duo USB
    risk 0.05cvss —epss 0.27

    UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs,…

  • CVE-2010-0946Mar 8, 2010
    Keep It Simple Stupid (KISS) Software
    Advertiser
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Keep It Simple Stupid (KISS) Software Advertiser (com_ksadvertiser) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showcats action to index.php.

  • CVE-2010-0945Mar 8, 2010
    Joomla
    HotBrackets Tournament Brackets
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

  • CVE-2010-0944Mar 8, 2010
    Joomla
    JCollection
    risk 0.04cvss —epss 0.14

    Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-0943Mar 8, 2010
    JA
    JA Showcase
    risk 0.04cvss —epss 0.16

    Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a jashowcase action to index.php.

  • CVE-2010-0942Mar 8, 2010
    Jvideodirect
    Com Jvideodirect
    risk 0.04cvss —epss 0.07

    Directory traversal vulnerability in the jVideoDirect (com_jvideodirect) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-0941Mar 8, 2010
    ETek Systems
    Hit Counter
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) inc/login.php, (3) admin/index.php, and (4) admin/forgot.php.

  • CVE-2010-0940Mar 8, 2010
    Sanusart
    Simple PHP Guestbook
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in guestbook.php in Simple PHP Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the action parameter.

  • CVE-2010-0939Mar 8, 2010
    Visialis
    Abb Forum
    risk 0.03cvss —epss 0.02

    Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb.

  • CVE-2010-0938Mar 8, 2010
    Todoo
    Todoo Forum
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the id_forum parameter in a post action.

  • CVE-2010-0937Mar 8, 2010
    Visualizationlibrary
    Visualization Library
    risk 0.00cvss —epss 0.01

    Multiple unspecified vulnerabilities in Visualization Library before 2009.08.812 have unknown impact and attack vectors.

  • CVE-2010-0936Mar 8, 2010
    Dlink
    Dkvm Ip8
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter.

  • CVE-2009-4679Mar 8, 2010
    Joomla
    iF Portfolio Nexus
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2009-4678Mar 8, 2010
    Winn
    Winn Guestbook
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

  • CVE-2009-4677Mar 8, 2010
    Phpfk
    PHP Forum
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2010-0935Mar 5, 2010
    Rogue Wave
    Perforce Server
    risk 0.00cvss —epss 0.02

    Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command.

  • CVE-2010-0934Mar 5, 2010
    Rogue Wave
    Perforce Server
    risk 0.00cvss —epss 0.02

    The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client" command in conjunction with the form-in trigger script.

  • CVE-2010-0933Mar 5, 2010
    Rogue Wave
    Perforce Server
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (dot dot) in the argument to the "p4 add" command.

  • CVE-2010-0932Mar 5, 2010
    Rogue Wave
    Perforce Server
    risk 0.00cvss —epss 0.02

    The FTP server in Perforce Server 2008.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain MKD command.

  • CVE-2010-0931Mar 5, 2010
    Rogue Wave
    Perforce Server
    risk 0.00cvss —epss 0.01

    The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted data, possibly involving a large sndbuf value.

  • CVE-2010-0930Mar 5, 2010
    Rogue Wave
    Perforce Server
    risk 0.00cvss —epss 0.01

    The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (infinite loop) via crafted data that includes a byte sequence of 0xdc, 0xff, 0xff, and 0xff immediately before the client protocol version number.

  • CVE-2010-0929Mar 5, 2010
    Rogue Wave
    Perforce Server
    risk 0.00cvss —epss 0.01

    The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted data beginning with a byte sequence of 0x4c, 0xb3, 0xff, 0xff, and 0xff.

  • CVE-2010-0928Mar 5, 2010
    Gaisler Research
    LEON3 SoC
    risk 0.00cvss —epss 0.01

    OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically…

  • CVE-2010-0792Mar 5, 2010
    Fcron
    Fcron
    risk 0.00cvss —epss 0.00

    fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file.

  • CVE-2010-0573Mar 5, 2010
    Cisco Systems, Inc.
    Digital Media Player 4300g
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability on the Cisco Digital Media Player before 5.2 allows remote attackers to hijack the source of (1) video or (2) data for a display via unknown vectors, related to a "content injection" issue, aka Bug ID CSCtc46024.

  • CVE-2010-0572Mar 5, 2010
    Cisco Systems, Inc.
    Digital Media Manager
    risk 0.00cvss —epss 0.03

    Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a (1) error log or (2) stack trace, aka Bug ID CSCtc46050.

  • CVE-2010-0571Mar 5, 2010
    Cisco Systems, Inc.
    Digital Media Manager
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors, and consequently execute arbitrary code via a crafted web application, aka Bug ID CSCtc46008.

  • CVE-2010-0570Mar 5, 2010
    Cisco Systems, Inc.
    Digital Media Manager
    risk 0.00cvss —epss 0.05

    Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378.

  • CVE-2010-0434Mar 5, 2010
    Apache
    HTTP Server
    risk 0.01cvss —epss 0.18

    The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote…

  • CVE-2010-0433Mar 5, 2010
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.08

    The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference…

  • CVE-2010-0425Mar 5, 2010
    Apache
    HTTP Server
    risk 0.04cvss —epss 0.94

    modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which…

  • CVE-2010-0393Mar 5, 2010
    Apple Inc.
    Cups
    risk 0.00cvss —epss 0.00

    The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted…

  • CVE-2010-0302HigMar 5, 2010
    Apple Inc.
    Cups
    risk 0.49cvss 7.5epss 0.03

    Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or…

  • CVE-2009-4676Mar 5, 2010
    Cowon America
    Jetaudio
    risk 0.03cvss —epss 0.04

    Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a long title in a FLAC file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2009-3245Mar 5, 2010
    OpenSSL Project
    OpenSSL
    risk 0.00cvss —epss 0.06

    OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.

  • CVE-2009-3032Mar 5, 2010
    IBM
    Lotus Notes
    risk 0.00cvss —epss 0.04

    Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via…

  • CVE-2009-4675Mar 5, 2010
    Mole Group
    Gastro Portal
    risk 0.03cvss —epss 0.03

    admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission.

  • CVE-2009-4674Mar 5, 2010
    Mole Group
    Bus Ticket Script
    risk 0.03cvss —epss 0.02

    admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.