VYPR

CVEs

384,311 total · page 7011 of 7,687

AllCriticalHighKEV
  • CVE-2008-5562Dec 15, 2008
    Aspapps
    Aspportal
    risk 0.03cvss —epss 0.05

    ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb.

  • CVE-2008-5561Dec 15, 2008
    Netref
    Netref
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) fiche_product.php and (2) presentation.php.

  • CVE-2008-5560Dec 15, 2008
    PostEcards
    PostEcards
    risk 0.03cvss —epss 0.03

    PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for postcards.mdb.

  • CVE-2008-5559Dec 15, 2008
    PostEcards
    PostEcards
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via the cid parameter.

  • CVE-2008-5430Dec 13, 2008
    Mozilla Corporation
    Thunderbird
    risk 0.00cvss —epss 0.01

    Mozilla Thunderbird 2.0.14 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which might allow remote attackers to cause a denial of service (stack consumption or…

  • CVE-2008-5556Dec 12, 2008
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.11

    The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7…

  • CVE-2008-5555Dec 12, 2008
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.13

    Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which allows remote attackers to bypass the product's XSS Filter protection mechanism, and conduct XSS and cross-domain attacks, by injecting this…

  • CVE-2008-5554Dec 12, 2008
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.15

    The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the (1)…

  • CVE-2008-5553Dec 12, 2008
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.12

    The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE:…

  • CVE-2008-5552Dec 12, 2008
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.12

    The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a utf-7 charset value. NOTE:…

  • CVE-2008-5551Dec 12, 2008
    Microsoft
    Internet Explorer
    risk 0.04cvss —epss 0.14

    The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a…

  • CVE-2008-5550Dec 12, 2008
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the redirect_url parameter.

  • CVE-2008-5549Dec 12, 2008
    Sun Corporation
    Java System Portal Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration information via unknown vectors related to "access to secure files by ThemeServlet."

  • CVE-2008-5548Dec 12, 2008
    Virusbuster
    Virusbuster
    risk 0.00cvss —epss 0.02

    VirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a…

  • CVE-2008-5547Dec 12, 2008
    Hauri
    Virobot
    risk 0.00cvss —epss 0.02

    HAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no…

  • CVE-2008-5546Dec 12, 2008
    Virusblokada
    VBA32
    risk 0.00cvss —epss 0.02

    VirusBlokAda VBA32 3.12.8.5, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or…

  • CVE-2008-5545Dec 12, 2008
    Trend Micro
    Antivirus
    risk 0.00cvss —epss 0.03

    Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no…

  • CVE-2008-5544Dec 12, 2008
    Hacksoft
    The Hacker
    risk 0.00cvss —epss 0.02

    Hacksoft The Hacker 6.3.1.2.174 and possibly 6.3.0.9.081, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no…

  • CVE-2008-5543Dec 12, 2008
    Symantec
    Norton Antivirus
    risk 0.00cvss —epss 0.03

    Symantec AntiVirus (SAV) 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or…

  • CVE-2008-5542Dec 12, 2008
    Sunbelt
    VIPRE
    risk 0.00cvss —epss 0.02

    Sunbelt VIPRE 3.1.1832.2 and possibly 3.1.1633.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2)…

  • CVE-2008-5541Dec 12, 2008
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.08

    Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or…

  • CVE-2008-5540Dec 12, 2008
    Secure Computing
    Webwasher
    risk 0.00cvss —epss 0.02

    Secure Computing Secure Web Gateway (aka Webwasher), when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension,…

  • CVE-2008-5539Dec 12, 2008
    Rising Global
    Rising Antivirus
    risk 0.01cvss —epss 0.10

    RISING Antivirus 21.06.31.00 and possibly 20.61.42.00, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no…

  • CVE-2008-5538Dec 12, 2008
    Prevx
    Prevx
    risk 0.00cvss —epss 0.02

    Prevx Prevx1 2, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg…

  • CVE-2008-5537Dec 12, 2008
    PC Tools
    Pctools Antivirus
    risk 0.00cvss —epss 0.03

    PC Tools AntiVirus 4.4.2.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or…

  • CVE-2008-5536Dec 12, 2008
    Pandasecurity
    Panda Antivirus
    risk 0.00cvss —epss 0.03

    Panda Antivirus 9.0.0.4, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3)…

  • CVE-2008-5535Dec 12, 2008
    Norman Antivirus
    Norman Antivirus
    risk 0.00cvss —epss 0.03

    Norman Antivirus 5.80.02, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or…

  • CVE-2008-5534Dec 12, 2008
    Eset
    Nod32 Antivirus
    risk 0.00cvss —epss 0.03

    ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a…

  • CVE-2008-5533Dec 12, 2008
    Microsoft
    Internet Explorer
    risk 0.00cvss —epss 0.03

    K7AntiVirus 7.10.541 and possibly 7.10.454, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a…

  • CVE-2008-5532Dec 12, 2008
    Ikarus
    Virus Utilities
    risk 0.00cvss —epss 0.02

    Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no…

  • CVE-2008-5531Dec 12, 2008
    Fortinet
    Antivirus
    risk 0.00cvss —epss 0.03

    Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension,…

  • CVE-2008-5530Dec 12, 2008
    Ewido
    Ewido Security Suite
    risk 0.00cvss —epss 0.02

    Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or…

  • CVE-2008-5529Dec 12, 2008
    Ca
    eTrust Antivirus
    risk 0.00cvss —epss 0.03

    CA eTrust Antivirus 31.6.6086, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension,…

  • CVE-2008-5528Dec 12, 2008
    Aladdin
    Esafe
    risk 0.00cvss —epss 0.05

    Aladdin eSafe 7.0.17.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3)…

  • CVE-2008-5527Dec 12, 2008
    Eset
    Smart Security
    risk 0.00cvss —epss 0.02

    ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a…

  • CVE-2008-5526Dec 12, 2008
    Microsoft
    Internet Explorer
    risk 0.00cvss —epss 0.03

    DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension,…

  • CVE-2008-5525Dec 12, 2008
    ClamAV
    Clamav
    risk 0.00cvss —epss 0.03

    ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt…

  • CVE-2008-5524Dec 12, 2008
    Quickheal
    Cat Quickheal
    risk 0.00cvss —epss 0.02

    CAT-QuickHeal 10.00 and possibly 9.50, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt…

  • CVE-2008-5523Dec 12, 2008
    Avast\!
    Antivirus
    risk 0.00cvss —epss 0.03

    avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or…

  • CVE-2008-5522Dec 12, 2008
    Microsoft
    Internet Explorer
    risk 0.00cvss —epss 0.03

    AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or…

  • CVE-2008-5521Dec 12, 2008
    Avira
    Antivir
    risk 0.00cvss —epss 0.02

    Avira AntiVir 7.9.0.36 and possibly 7.8.1.28, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a…

  • CVE-2008-5520Dec 12, 2008
    Ahnlab
    V3
    risk 0.00cvss —epss 0.02

    AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a…

  • CVE-2008-5497Dec 12, 2008
    BandSite
    CMS
    risk 0.03cvss —epss 0.03

    BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login_auth cookie to true.

  • CVE-2008-5496Dec 12, 2008
    Pozscripts
    Business Directory Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

  • CVE-2008-5495Dec 12, 2008
    Gungho
    Loadprgax Control
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the GungHo LoadPrgAx ActiveX control 1.0.0.6 and earlier allows remote attackers to execute arbitrary Java applications via unknown vectors.

  • CVE-2008-5494Dec 12, 2008
    Joomla
    Contact Information Module
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Contact Information Module (com_contactinfo) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.

  • CVE-2008-5493Dec 12, 2008
    Phpstore
    Wholesale
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2008-5492Dec 12, 2008
    VeryDOC
    PDF Viewer OCX Control
    risk 0.06cvss —epss 0.35

    Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method. NOTE: some of these details are obtained from…

  • CVE-2008-5491Dec 12, 2008
    Slimcms
    Slimcms
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageID parameter.

  • CVE-2008-5490Dec 12, 2008
    Phpstore
    Yahoo Answers
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL commands via the id parameter.