VYPR

CVEs

384,009 total · page 7030 of 7,681

AllCriticalHighKEV
  • CVE-2008-4331Sep 30, 2008
    Phpocs
    Phpocs
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter to index.php.

  • CVE-2008-4330Sep 30, 2008
    Lansuite
    Lansuite
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the design parameter.

  • CVE-2008-4329Sep 30, 2008
    Openengine
    Openengine
    risk 0.03cvss —epss 0.04

    PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter.

  • CVE-2008-4328Sep 30, 2008
    Easyrealtorpro
    Easyrealtorpro
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in site_search.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the (1) item, (2) search_ordermethod, and (3) search_order parameters.

  • CVE-2008-4094Sep 30, 2008
    Rubyonrails
    Rails
    risk 0.00cvss —epss 0.03

    Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :limit and (2) :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer.

  • CVE-2008-4327Sep 30, 2008
    Microsoft
    Windows Xp
    risk 0.04cvss —epss 0.16

    gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a certain crash.ico file on a web site, and allows user-assisted attackers to…

  • CVE-2008-4326Sep 30, 2008
    PhpMyAdmin
    phpMyAdmin
    risk 0.00cvss —epss 0.02

    The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.

  • CVE-2008-4325Sep 30, 2008
    Viewvc
    Viewvc
    risk 0.00cvss —epss 0.01

    lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP request for the Content-Type header in the HTTP response, which allows remote attackers to cause content to be misinterpreted by the browser via a content-type parameter that is inconsistent with the…

  • CVE-2008-4324Sep 29, 2008
    Mozilla Corporation
    Firefox
    risk 0.04cvss —epss 0.09

    The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a series of keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup events. NOTE: it…

  • CVE-2008-4323Sep 29, 2008
    Microsoft
    Windows Xp
    risk 0.04cvss —epss 0.09

    Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service (application crash) via a crafted .ZIP file.

  • CVE-2008-4322Sep 29, 2008
    Realflex
    RealWin Server
    risk 0.08cvss —epss 0.65

    Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote attackers to execute arbitrary code via a crafted FC_INFOTAG/SET_CONTROL packet.

  • CVE-2008-4321Sep 29, 2008
    Flashget
    Flashget FTP
    risk 0.03cvss —epss 0.06

    Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command.

  • CVE-2008-3827Sep 29, 2008
    MPlayer
    Mplayer
    risk 0.01cvss —epss 0.11

    Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or…

  • CVE-2008-4320Sep 29, 2008
    Opennms
    Opennms
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via (1) the j_username parameter to j_acegi_security_check, (2) the username parameter to notification/list.jsp, and (3) the filter…

  • CVE-2008-4319Sep 29, 2008
    Libra File Manager
    Libra File Manager
    risk 0.03cvss —epss 0.02

    fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query…

  • CVE-2008-4318Sep 29, 2008
    Project Observer
    Observer
    risk 0.04cvss —epss 0.14

    Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.

  • CVE-2008-4302MedSep 29, 2008
    Linux
    Kernel
    risk 0.32cvss 5.5epss 0.01

    fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and…

  • CVE-2008-4301Sep 29, 2008
    Microsoft
    Internet Information Server
    risk 0.01cvss —epss 0.17

    A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a string argument to the SetPassword method. NOTE: this issue could not be reproduced by a reliable third party. In addition, the original…

  • CVE-2008-4300Sep 29, 2008
    Microsoft
    Internet Information Server
    risk 0.01cvss —epss 0.14

    A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows remote attackers to cause a denial of service (browser crash) via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable…

  • CVE-2008-4299Sep 29, 2008
    Microsoft
    Internet Authentication Service Helper Com Component
    risk 0.01cvss —epss 0.16

    A certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM Component in iashlpr.dll allows remote attackers to cause a denial of service (browser crash) via a large integer value in the first argument to the PutProperty method. NOTE: this issue…

  • CVE-2008-4210Sep 29, 2008
    Linux
    Kernel
    risk 0.00cvss —epss 0.02

    fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by…

  • CVE-2008-4192Sep 29, 2008
    Red Hat
    Cman
    risk 0.03cvss —epss 0.01

    The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.

  • CVE-2008-4120Sep 29, 2008
    Flatpress
    Flatpress
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to login.php, or the (3) name parameter to contact.php.

  • CVE-2008-3524Sep 29, 2008
    Red Hat
    Initscripts
    risk 0.00cvss —epss 0.00

    rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2) /var/run.

  • CVE-2008-2474Sep 29, 2008
    Abb
    Pcu400
    risk 0.01cvss —epss 0.08

    Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface.

  • CVE-2008-4298Sep 27, 2008
    Lighttpd
    Lighttpd
    risk 0.00cvss —epss 0.04

    Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests with duplicate request headers.

  • CVE-2008-4297Sep 27, 2008
    Mercurial
    Mercurial
    risk 0.00cvss —epss 0.03

    Mercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from hgweb, which allows remote attackers to read arbitrary files from a repository via an "hg pull" request.

  • CVE-2008-4296Sep 27, 2008
    Linksys
    Wrt350n
    risk 0.00cvss —epss 0.02

    The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access.

  • CVE-2008-4295Sep 27, 2008
    Microsoft
    Windows Mobile
    risk 0.05cvss —epss 0.30

    Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth…

  • CVE-2008-4294Sep 27, 2008
    IBM
    Tivoli Netcool Webtop
    risk 0.00cvss —epss 0.00

    IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cached user privileges after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation, as demonstrated by a root session that is still valid after a subsequent read-only…

  • CVE-2008-4293Sep 27, 2008
    Opera
    Opera
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors in which Opera is launched by other applications.

  • CVE-2008-4292Sep 27, 2008
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors. NOTE: it is not clear whether this is a vulnerability, but the vendor included it in a security section of the advisory.

  • CVE-2008-4200Sep 27, 2008
    Opera
    Opera
    risk 0.00cvss —epss 0.03

    Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to change this field to display the URL of a page containing web script controlled by the attacker.

  • CVE-2008-4199Sep 27, 2008
    Opera
    Opera
    risk 0.00cvss —epss 0.03

    Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."

  • CVE-2008-4198Sep 27, 2008
    Opera
    Opera
    risk 0.00cvss —epss 0.03

    Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the…

  • CVE-2008-4197HigSep 27, 2008
    Opera
    Opera
    risk 0.58cvss 8.8epss 0.06

    Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via…

  • CVE-2008-4196Sep 27, 2008
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Opera before 9.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-4195Sep 27, 2008
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 9.52 does not properly restrict the ability of a framed web page to change the address associated with a different frame, which allows remote attackers to trigger the display of an arbitrary address in a frame via unspecified use of web script.

  • CVE-2008-4119Sep 27, 2008
    Ca
    Cmdb
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms."

  • CVE-2008-4070Sep 27, 2008
    Mozilla Corporation
    Thunderbird
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] newsgroup…

  • CVE-2008-3528Sep 27, 2008
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a…

  • CVE-2008-3813Sep 26, 2008
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted L2TP packet.

  • CVE-2008-3812Sep 26, 2008
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed HTTP transit packet.

  • CVE-2008-3811Sep 26, 2008
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810.

  • CVE-2008-3810Sep 26, 2008
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811.

  • CVE-2008-3809Sep 26, 2008
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.0 through 12.4 on Gigabit Switch Router (GSR) devices (aka 12000 Series routers) allows remote attackers to cause a denial of service (device crash) via a malformed Protocol Independent Multicast (PIM) packet.

  • CVE-2008-3808Sep 26, 2008
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted Protocol Independent Multicast (PIM) packet.

  • CVE-2008-3807Sep 26, 2008
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.04

    Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with "private" as the community, which allows remote attackers to obtain administrative access by guessing this community and sending SNMP requests.

  • CVE-2008-3806Sep 26, 2008
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard…

  • CVE-2008-3805Sep 26, 2008
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard…