VYPR

CVEs

384,868 total · page 6985 of 7,698

AllCriticalHighKEV
  • CVE-2008-6525Mar 25, 2009
    Nice PHP FAQ Script
    Nice PHP FAQ Script
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL commands via the Password parameter (aka the pass field).

  • CVE-2008-6524Mar 25, 2009
    OpenInvoice
    openInvoice
    risk 0.03cvss —epss 0.02

    resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separate vulnerability in auth.php to modify passwords without authentication.

  • CVE-2008-6523Mar 25, 2009
    OpenInvoice
    openInvoice
    risk 0.03cvss —epss 0.03

    auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie. NOTE: this can be leveraged with a separate vulnerability in resetpass.php to modify passwords for arbitrary users.

  • CVE-2008-6522Mar 25, 2009
    Terracotta
    Terracotta
    risk 0.03cvss —epss 0.02

    Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka OpenTerracotta) 0.6.1, and possibly other versions, allow remote attackers to list arbitrary directories and read arbitrary files via a .. (dot dot) in the (1)…

  • CVE-2008-6521Mar 25, 2009
    Terracotta
    Terracotta
    risk 0.00cvss —epss 0.01

    index.php in Terracotta (aka OpenTerracotta) 0.6.1 allows remote attackers to obtain sensitive information via an invalid File parameter, which reveals the installation path in an error message.

  • CVE-2008-6520Mar 25, 2009
    Xitami
    Xitami Web Server
    risk 0.00cvss —epss 0.05

    Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a URI that ends in (1) .ssi,…

  • CVE-2008-6519Mar 25, 2009
    Xitami
    Xitami Web Server
    risk 0.03cvss —epss 0.06

    Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a Long Running Web Process (LRWP) request,…

  • CVE-2008-6518Mar 25, 2009
    Vidiscript
    Vidiscript
    risk 0.03cvss —epss 0.03

    Unrestricted file upload vulnerability in the profile feature in VidiScript allows registered remote authenticated users to execute arbitrary code by uploading a PHP file as an Avatar, then accessing the avatar via a direct request.

  • CVE-2008-6517Mar 25, 2009
    NewsHOWLER
    NewsHOWLER
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in NewsHOWLER 1.03 Beta allows remote attackers to execute arbitrary SQL commands via the news_user cookie parameter.

  • CVE-2008-6516Mar 25, 2009
    Phpkf
    Phpkf Portal
    risk 0.03cvss —epss 0.03

    Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via a .. (dot dot) in the (1) tema_dizin parameter to baslik.php and (2) portal_ayarlarportal_dili parameter to anket_yonetim.php. NOTE: the provenance of this…

  • CVE-2009-1084Mar 25, 2009
    Sun Corporation
    Java System Identity Manager
    risk 0.00cvss —epss 0.03

    Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.

  • CVE-2009-1083Mar 25, 2009
    Sun Corporation
    Java System Identity Manager
    risk 0.00cvss —epss 0.04

    Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving "resource adapters."

  • CVE-2009-1082Mar 25, 2009
    Sun Corporation
    Java System Identity Manager
    risk 0.00cvss —epss 0.03

    Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the…

  • CVE-2009-1081Mar 25, 2009
    Sun Corporation
    Java System Identity Manager
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19595 and 19661.

  • CVE-2009-1080Mar 25, 2009
    Sun Corporation
    Java System Identity Manager
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID 19033.

  • CVE-2009-1079Mar 25, 2009
    Sun Corporation
    Java System Identity Manager
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683.

  • CVE-2009-1078Mar 25, 2009
    Sun Corporation
    Java System Identity Manager
    risk 0.00cvss —epss 0.02

    Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, which allows remote authenticated users to have an unspecified impact.

  • CVE-2009-1077Mar 25, 2009
    Sun Corporation
    Java System Identity Manager
    risk 0.00cvss —epss 0.02

    The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by…

  • CVE-2009-1076Mar 25, 2009
    Sun Corporation
    Java System Identity Manager
    risk 0.00cvss —epss 0.02

    Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

  • CVE-2009-1075Mar 25, 2009
    Sun Corporation
    Java System Identity Manager
    risk 0.00cvss —epss 0.02

    Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

  • CVE-2009-1074Mar 25, 2009
    Sun Corporation
    Java System Identity Manager
    risk 0.00cvss —epss 0.02

    Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs.

  • CVE-2009-0215Mar 25, 2009
    IBM
    Access Support eGatherer ActiveX control
    risk 0.06cvss —epss 0.36

    Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2009-1072Mar 25, 2009
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.

  • CVE-2009-1062Mar 25, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory corruption and possibly execute arbitrary code via unknown attack vectors related to JBIG2, a different vulnerability than CVE-2009-0193 and CVE-2009-1061.

  • CVE-2009-1061Mar 25, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.11

    Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to execute arbitrary code via unknown attack vectors related to JBIG2 and "input validation," a different vulnerability than CVE-2009-0193 and…

  • CVE-2009-0928Mar 25, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.10

    Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table.

  • CVE-2009-0921Mar 25, 2009
    Microfocus
    OpenView Network Node Manager
    risk 0.01cvss —epss 0.13

    Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or (2) a long…

  • CVE-2009-0920Mar 25, 2009
    Microfocus
    OpenView Network Node Manager
    risk 0.09cvss —epss 0.75

    Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067.

  • CVE-2009-0891Mar 25, 2009
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    The Web Services Security component in IBM WebSphere Application Server 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix Pack 23 (6.1.0.23),and 6.0.2 before Fix Pack 33 (6.0.2.33) does not properly enforce (1) nonce and (2) timestamp expiration values in WS-Security bindings as…

  • CVE-2009-0787Mar 25, 2009
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions…

  • CVE-2009-0207Mar 25, 2009
    HP UX
    VERITAS Oracle Disk Manager
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root…

  • CVE-2009-0193Mar 25, 2009
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.10

    Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a PDF file with a malformed JBIG2 symbol dictionary segment, a different vulnerability than CVE-2009-1061 and CVE-2009-1062.

  • CVE-2009-1060Mar 24, 2009
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Charlie Miller during a PWN2OWN competition at CanSecWest 2009.

  • CVE-2009-1059Mar 24, 2009
    Powerzip
    Powerzip
    risk 0.03cvss —epss 0.05

    Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafted .zip file. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product.

  • CVE-2009-1058Mar 24, 2009
    Zipgenius
    Zipgenius
    risk 0.03cvss —epss 0.06

    Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file that triggers an SEH overwrite. NOTE: it is possible that this overlaps CVE-2005-3317. NOTE: CVE has not investigated whether the specified file.zip file can…

  • CVE-2009-1057Mar 24, 2009
    Microsmarts
    Enterprise ZipItFast!
    risk 0.04cvss —epss 0.07

    MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that triggers memory corruption, related to a "format string buffer overflow." NOTE: CVE has not investigated whether the specified file.zip file can be used for…

  • CVE-2009-1056Mar 24, 2009
    IBM
    Rational Appscan
    risk 0.00cvss —epss 0.01

    IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported reports by "forcefully browsing."

  • CVE-2009-1055Mar 24, 2009
    Sitecore
    CMS
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests.

  • CVE-2009-1054Mar 24, 2009
    Justsystems
    Ichitaro
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier allows remote attackers to execute arbitrary code via a crafted file, as exploited in the wild by Trojan.Tarodrop.H in March 2009.

  • CVE-2009-1053Mar 24, 2009
    Chaozz
    Chaozzdb
    risk 0.00cvss —epss 0.01

    chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.

  • CVE-2009-1052Mar 24, 2009
    FireAnt
    FireAnt
    risk 0.00cvss —epss 0.01

    FireAnt 1.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.

  • CVE-2009-1051Mar 24, 2009
    Chaozz
    Fubarforum
    risk 0.00cvss —epss 0.01

    FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.

  • CVE-2009-1050Mar 24, 2009
    Kamads
    Bloginator
    risk 0.03cvss —epss 0.03

    Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYourself cookie.

  • CVE-2009-1049Mar 24, 2009
    Bloginator
    Bloginator
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2008-6515Mar 24, 2009
    Fritz Berger
    yet another php photo album - next generation (yappa-ng)
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Fritz Berger yet another php photo album - next generation (yappa-ng) allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.

  • CVE-2008-6514Mar 24, 2009
    Compiz
    Compiz Fusion
    risk 0.00cvss —epss 0.00

    The Expo plugin in Compiz Fusion 0.7.8 allows local users with physical access to drag the screen saver aside and access the locked desktop by using Expo mouse shortcuts, a related issue to CVE-2007-3920.

  • CVE-2008-6513Mar 24, 2009
    Andy's PHP Knowledgebase
    Andy's PHP Knowledgebase
    risk 0.03cvss —epss 0.04

    Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.php.

  • CVE-2008-6512Mar 24, 2009
    Google
    Gears
    risk 0.00cvss —epss 0.05

    Cross-domain vulnerability in the WorkerPool API in Google Gears before 0.5.4.2 allows remote attackers to bypass the Same Origin Policy and the intended access restrictions of the allowCrossOrigin function by hosting an assumed-safe file type containing Google Gear commands on…

  • CVE-2009-1047Mar 23, 2009
    Drupal
    Drupal
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via vectors involving outbound…

  • CVE-2009-0584Mar 23, 2009
    Argyll Color Management System
    icc.c
    risk 0.00cvss —epss 0.04

    icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly…