VYPR

CVEs

385,496 total · page 6947 of 7,710

AllCriticalHighKEV
  • CVE-2009-3050Sep 2, 2009
    Htmldoc
    Htmldoc
    risk 0.00cvss —epss 0.04

    Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment. NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using…

  • CVE-2009-3049Sep 2, 2009
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode.

  • CVE-2009-3048Sep 2, 2009
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote attackers to trick a user into uploading an unintended file via vectors involving a "dropped file."

  • CVE-2009-3047Sep 2, 2009
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs.

  • CVE-2009-3046HigSep 2, 2009
    Opera
    Opera
    risk 0.49cvss 7.5epss 0.01

    Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote SSL servers to bypass validation of the certificate chain via a revoked certificate.

  • CVE-2009-3045Sep 2, 2009
    Opera
    Opera Browser
    risk 0.00cvss —epss 0.01

    Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted server certificate.

  • CVE-2009-3044Sep 2, 2009
    Opera
    Opera
    risk 0.00cvss —epss 0.01

    Opera before 10.00 does not properly handle a (1) '\0' character or (2) invalid wildcard character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate…

  • CVE-2009-3043Sep 2, 2009
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    The tty_ldisc_hangup function in drivers/char/tty_ldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local users to cause a denial of service (system crash, sometimes preceded by a NULL pointer dereference) or possibly gain privileges via certain pseudo-terminal I/O…

  • CVE-2009-2968Sep 2, 2009
    VMware
    Studio
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote attackers to upload files to arbitrary locations via unspecified vectors.

  • CVE-2009-2700Sep 2, 2009
    Qt
    Qt
    risk 0.00cvss —epss 0.01

    src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted…

  • CVE-2009-0201Sep 2, 2009
    Openoffice
    Openoffice
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to "table parsing."

  • CVE-2009-0200Sep 2, 2009
    Openoffice
    Openoffice
    risk 0.01cvss —epss 0.07

    Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow.

  • CVE-2008-7158Sep 2, 2009
    Numara
    Footprints
    risk 0.00cvss —epss 0.03

    Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) transcriptFile parameter to MRcgi/MRchat.pl or (2) LOADFILE parameter to MRcgi/MRABLoad2.pl. NOTE: some of these details are…

  • CVE-2008-7157Sep 2, 2009
    Ekinboard
    Ekinboard
    risk 0.03cvss —epss 0.03

    Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading an avatar file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in uploaded/avatars/.

  • CVE-2008-7156Sep 2, 2009
    Ekinboard
    Ekinboard
    risk 0.03cvss —epss 0.02

    EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the _groups[] parameter to 2, as demonstrated via backup.php.

  • CVE-2008-7155Sep 2, 2009
    Netrisk
    Netrisk
    risk 0.03cvss —epss 0.02

    NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows remote attackers to change the password of arbitrary users via a direct request.

  • CVE-2008-7154Sep 2, 2009
    Docebo
    Docebo
    risk 0.03cvss —epss 0.03

    Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/class.conf_fw.php, (2) class.module/class.event_manager.php, (3) lib/lib.domxml5.php, or (4) menu/menu_over.php in doceboCore/; or (5) class/class.conf_cms.php,…

  • CVE-2008-7153Sep 2, 2009
    Docebo
    Docebo
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header. NOTE: this can be leveraged to execute arbitrary PHP code…

  • CVE-2009-2958Sep 2, 2009
    Thekelleys
    Dnsmasq
    risk 0.04cvss —epss 0.10

    The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.

  • CVE-2009-2957Sep 2, 2009
    Thekelleys
    Dnsmasq
    risk 0.04cvss —epss 0.13

    Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.

  • CVE-2009-3042Sep 1, 2009
    Ocsinventory Ng
    Ocsinventory Ng
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040.

  • CVE-2009-3041Sep 1, 2009
    Spip
    Spip
    risk 0.04cvss —epss 0.07

    SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August…

  • CVE-2009-3040Sep 1, 2009
    Ocsinventory Ng
    Ocsinventory Ng
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the (1) N, (2) DL, (3) O and (4) V parameters to download.php and the (5) SYSTEMID parameter to group_show.php.

  • CVE-2009-3038Sep 1, 2009
    Lotus Notes
    Connector for BlackBerry Desktop Manager
    risk 0.03cvss —epss 0.03

    A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service (Internet Explorer crash) by referencing the control's CLSID in the classid…

  • CVE-2009-3037Sep 1, 2009
    IBM
    Lotus Notes
    risk 0.00cvss —epss 0.06

    Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), and other products, allows remote attackers to…

  • CVE-2008-7152Sep 1, 2009
    Specimen Image Database
    Specimen Image Database
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to (1) client.php or (2) taxonservice.php.

  • CVE-2008-7151Sep 1, 2009
    Drupal
    Live
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal, allows remote attackers to hijack the authentication of unspecified privileged users for requests that can be leveraged to execute arbitrary PHP code.

  • CVE-2008-7150Sep 1, 2009
    Drupal
    Refine by Taxonomy
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Refine by Taxonomy 5.x before 5.x-0.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a taxonomy term, which is not properly handled by refine_by_taxo when displaying tags.

  • CVE-2008-7149Sep 1, 2009
    Agilewiki
    Agilewiki
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in AgileWiki before 0.10.1 has unknown impact and attack vectors related to passwords.

  • CVE-2008-7148Sep 1, 2009
    Synfig
    Synfig Animation Studio
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Synfig Animation Studio before 0.61.08 allows attackers to execute arbitrary code via a crafted .sif file.

  • CVE-2008-7147Sep 1, 2009
    Intralearn
    Intralearn
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allow remote attackers to inject arbitrary web script or HTML via the (1) outline and (2) course parameters to library/description_link.cfm, or…

  • CVE-2008-7146Sep 1, 2009
    Intralearn
    Intralearn
    risk 0.00cvss —epss 0.01

    IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote attackers to obtain sensitive information via a direct request to (1) Knowledge_Impact_Course.htm, (2) LRN-formatted_Course.htm, or (3) Create_Course.htm in help/1/Instructor/, which…

  • CVE-2008-7145Sep 1, 2009
    Coronamatrix
    Phpaddressbook
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) parameters.

  • CVE-2008-7144Sep 1, 2009
    Rarlab
    Winrar
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive…

  • CVE-2008-7143Sep 1, 2009
    PhpBB
    phpBB
    risk 0.00cvss —epss 0.01

    phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, which allows remote attackers to hijack the session via a post in the thread containing a URL to a remotely hosted image, which might include the session ID in the…

  • CVE-2008-7142Sep 1, 2009
    CPanel
    Cpanel
    risk 0.03cvss —epss 0.03

    Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter.

  • CVE-2008-7141Sep 1, 2009
    @lex
    Poll
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web script or HTML via the language_setup parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2008-7140Sep 1, 2009
    @lex
    @lex Guestbook
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) language_setup parameter to setup.php or (2) test parameter to index.php. NOTE: the provenance of this information…

  • CVE-2008-7139Sep 1, 2009
    Eye.fi
    WS-Proxy
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAction parameter of (1) urn:SetOptions for autostart, (2) urn:SetDesktopSync for…

  • CVE-2008-7138Sep 1, 2009
    Eye.fi
    Eye-Fi
    risk 0.00cvss —epss 0.01

    The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers to bypass authentication and upload arbitrary images by guessing the snonce.

  • CVE-2008-7137Sep 1, 2009
    Eye.fi
    WS-Proxy
    risk 0.00cvss —epss 0.02

    WS-Proxy in Eye-Fi 1.1.2 allows remote attackers to cause a denial of service (crash) via an empty query string to port 59278 and other unspecified vectors.

  • CVE-2008-7136Sep 1, 2009
    Icq
    Icq Toolbar
    risk 0.03cvss —epss 0.04

    toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a long argument to the (1) RequestURL, (2) GetPropertyById, or (3) SetPropertyById method, different vectors than CVE-2008-7135.

  • CVE-2008-7135Sep 1, 2009
    Icq
    Icq Toolbar
    risk 0.03cvss —epss 0.02

    toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a long argument to the IsChecked method, a different vector than CVE-2008-7136.

  • CVE-2008-7134Sep 1, 2009
    Redgalaxy
    Download Center
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter, (2) message parameter in a login action, (3) category parameter in a…

  • CVE-2008-7133Sep 1, 2009
    Onlinetools.org
    Easyimagecatalogue
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in onlinetools.org EasyImageCatalogue 1.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) search and (2) d index.php parameters to index.php, (3) dir parameter to thumber.php, and the d parameter to…

  • CVE-2008-7132Sep 1, 2009
    Nuked Klan
    Nuked Klan
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.3 beta allows remote attackers to inject arbitrary web script or HTML via the nuked_nude parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2009-3026Aug 31, 2009
    Pidgin (software)
    Pidgin
    risk 0.00cvss —epss 0.01

    protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the…

  • CVE-2009-3025Aug 31, 2009
    Pidgin (software)
    Pidgin
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service (crash) via a link in a Yahoo IM.

  • CVE-2009-3024Aug 31, 2009
    Io Socket SSL
    Io Socket SSL
    risk 0.00cvss —epss 0.01

    The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate.

  • CVE-2009-3023Aug 31, 2009
    Microsoft
    Internet Information Server
    risk 0.10cvss —epss 0.91

    Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and…