VYPR

CVEs

383,893 total · page 7058 of 7,678

AllCriticalHighKEV
  • CVE-2008-1377Jun 16, 2008
    Xorg
    X11R7.3
    risk 0.00cvss —epss 0.03

    The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary…

  • CVE-2008-1379Jun 16, 2008
    Xorg
    X11R7.3
    risk 0.00cvss —epss 0.01

    Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height.

  • CVE-2008-1806Jun 16, 2008
    FreeType
    Freetype
    risk 0.00cvss —epss 0.04

    Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.

  • CVE-2008-1807Jun 16, 2008
    FreeType
    Freetype
    risk 0.00cvss —epss 0.04

    FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.

  • CVE-2008-1808Jun 16, 2008
    FreeType
    Freetype
    risk 0.00cvss —epss 0.04

    Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer…

  • CVE-2008-2360Jun 16, 2008
    Xorg
    X11R7.3
    risk 0.00cvss —epss 0.03

    Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based…

  • CVE-2008-2361Jun 16, 2008
    Xorg
    X11
    risk 0.00cvss —epss 0.02

    Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service (daemon crash) via unspecified request fields that are used to calculate a glyph buffer size,…

  • CVE-2008-2362Jun 16, 2008
    Xorg
    X11R7.3
    risk 0.00cvss —epss 0.04

    Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request…

  • CVE-2008-0071Jun 16, 2008
    Utorrent
    Utorrent
    risk 0.04cvss —epss 0.07

    The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.

  • CVE-2008-2366Jun 16, 2008
    Openoffice
    Openoffice
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the…

  • CVE-2008-2639Jun 16, 2008
    Citect
    Citectfacilities
    risk 0.09cvss —epss 0.78

    Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222.

  • CVE-2008-2705Jun 16, 2008
    Sun Corporation
    Java System Access Manager
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configurations of Sun Directory Server Enterprise Edition (DSEE), allows remote attackers to bypass authentication via unspecified vectors.

  • CVE-2008-2706Jun 16, 2008
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service (panic) by submitting and retrieving user-defined events, probably related to a NULL dereference.

  • CVE-2008-2707Jun 16, 2008
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the e1000g driver in Sun Solaris 10 and OpenSolaris before snv_93 allows remote attackers to cause a denial of service (network connectivity loss) via unknown vectors.

  • CVE-2008-2689Jun 13, 2008
    Browsercrm
    Browsercrm
    risk 0.07cvss —epss 0.46

    PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter.

  • CVE-2008-2690Jun 13, 2008
    Browsercrm
    Browsercrm
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter to (1) kb.php, (2) login.php, (3) index.php, (4) contact_view.php, and (5)…

  • CVE-2008-2691Jun 13, 2008
    Jiros
    FAQ Manager eXperience
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote attackers to execute arbitrary SQL commands via the fID parameter.

  • CVE-2008-2692Jun 13, 2008
    Joomla
    Com Yvcomment
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the ArticleID parameter in a comment action to index.php.

  • CVE-2008-2693Jun 13, 2008
    Black Ice
    Barcode SDK
    risk 0.04cvss —epss 0.10

    Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method.

  • CVE-2008-2694Jun 13, 2008
    Phpinv
    Phpinv
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.

  • CVE-2008-2695Jun 13, 2008
    Phpinv
    Phpinv
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter.

  • CVE-2008-2696Jun 13, 2008
    Exiv2
    Exiv2
    risk 0.00cvss —epss 0.02

    Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function.

  • CVE-2008-2697Jun 13, 2008
    Joomla
    Rapid Recipe
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Rapid Recipe (com_rapidrecipe) component 1.6.6 and 1.6.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipe_id parameter in a viewrecipe action to index.php.

  • CVE-2008-2698Jun 13, 2008
    Web Album
    Webalbum
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in photo_add-c.php (aka the "add comment" section) in WEBalbum 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) id, or (3) category parameter.

  • CVE-2008-2699Jun 13, 2008
    Galatolo
    Galatolo Webmanager
    risk 0.03cvss —epss 0.02

    Multiple directory traversal vulnerabilities in Galatolo WebManager (GWM) 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in (1) the plugin parameter to admin/plugins.php or (2) the com parameter to index.php.

  • CVE-2008-2700Jun 13, 2008
    Galatolo
    Galatolo Webmanager
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in view.php in Galatolo WebManager 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2008-2701Jun 13, 2008
    Joomla
    com_gameq
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the GameQ (com_gameq) component 4.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a page action to index.php.

  • CVE-2008-2702Jun 13, 2008
    Estsoft
    Alftp
    risk 0.04cvss —epss 0.11

    Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345. NOTE: this can be leveraged for…

  • CVE-2008-2703Jun 13, 2008
    Novell
    Groupwise Messenger
    risk 0.08cvss —epss 0.61

    Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name.

  • CVE-2008-2704Jun 13, 2008
    Novell
    Groupwise Messenger
    risk 0.00cvss —epss 0.02

    Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash) via a long user ID, possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries.

  • CVE-2008-2364Jun 13, 2008
    Apache
    HTTP Server
    risk 0.01cvss —epss 0.13

    The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a…

  • CVE-2008-2654Jun 13, 2008
    Motion
    Motion
    risk 0.01cvss —epss 0.08

    Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor…

  • CVE-2008-2686Jun 13, 2008
    Flux CMS
    Flux CMS
    risk 0.03cvss —epss 0.04

    webinc/bxe/scripts/loadsave.php in Flux CMS 1.5.0 and earlier allows remote attackers to execute arbitrary code by overwriting a PHP file in webinc/bxe/scripts/ via a filename in the XML parameter and PHP sequences in the request body, then making a direct request for this…

  • CVE-2008-2687Jun 13, 2008
    Promanager
    Promanager
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in inc/config.php in ProManager 0.73 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.

  • CVE-2008-2688Jun 13, 2008
    ASPilot
    Pilot Cart
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action.

  • CVE-2008-2673Jun 12, 2008
    Powie
    Pnews
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the shownews parameter.

  • CVE-2008-2674Jun 12, 2008
    Fujitsu
    Interstage Application Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Interstage Management Console, as used in Fujitsu Interstage Application Server 6.0 through 9.0.0A, Apworks Modelers-J 6.0 through 7.0, and Studio 8.0.1 and 9.0.0, allows remote attackers to read or delete arbitrary files via unspecified vectors.

  • CVE-2008-2675Jun 12, 2008
    Softcomplex
    PHP Image Gallery
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in PHP Image Gallery allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2008-2676Jun 12, 2008
    Joomla
    Joomla!
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the iJoomla News Portal (com_news_portal) component 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.

  • CVE-2008-2677Jun 12, 2008
    Telephone
    Telephone Directory 2008
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows remote attackers to inject arbitrary web script or HTML via the action parameter.

  • CVE-2008-2678Jun 12, 2008
    Telephone
    Telephone Directory 2008
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Telephone Directory 2008, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) code parameter in a confirm_data action to edit1.php and the (2) id parameter to view_more.php.

  • CVE-2008-2679Jun 12, 2008
    Realm CMS
    Realm CMS
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the KeyWordsList function in _includes/inc_routines.asp in Realm CMS 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the kwrd parameter in a kwl action to the default URI.

  • CVE-2008-2680Jun 12, 2008
    Realm CMS
    Realm CMS
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in _db/compact.asp in Realm CMS 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) CmpctedDB and (2) Boyut parameters.

  • CVE-2008-2681Jun 12, 2008
    Realm CMS
    Realm CMS
    risk 0.03cvss —epss 0.03

    Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to _db/compact.asp, which reveals the database path in an error message.

  • CVE-2008-2682Jun 12, 2008
    Realm CMS
    Realm CMS
    risk 0.03cvss —epss 0.03

    _RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName, and (3) cUserID.

  • CVE-2008-2683Jun 12, 2008
    Black Ice
    Barcode SDK
    risk 0.06cvss —epss 0.35

    The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in…

  • CVE-2008-2684Jun 12, 2008
    Black Ice
    Barcode SDK
    risk 0.04cvss —epss 0.09

    The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption. NOTE: some of these details are…

  • CVE-2008-2685Jun 12, 2008
    Battleblog
    Battleblog
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter, a different vector than CVE-2008-2626.

  • CVE-2008-0011Jun 12, 2008
    Microsoft
    Directx
    risk 0.03cvss —epss 0.32

    Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1)…

  • CVE-2008-0956Jun 12, 2008
    Logitech
    Desktop Manager
    risk 0.01cvss —epss 0.08

    Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute…