VYPR

CVEs

383,893 total · page 7059 of 7,678

AllCriticalHighKEV
  • CVE-2008-1440Jun 12, 2008
    Microsoft
    Windows Xp
    risk 0.02cvss —epss 0.23

    Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted PGM packet,…

  • CVE-2008-1441Jun 12, 2008
    Microsoft
    Windows
    risk 0.02cvss —epss 0.20

    Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the "PGM Malformed…

  • CVE-2008-1442Jun 12, 2008
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.39

    Heap-based buffer overflow in the substringData method in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code, related to an unspecified manipulation of a DOM object before a call to this method, aka the "HTML Objects Memory Corruption…

  • CVE-2008-1444Jun 12, 2008
    Microsoft
    Directx
    risk 0.03cvss —epss 0.39

    Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing…

  • CVE-2008-1445Jun 12, 2008
    Microsoft
    Windows
    risk 0.02cvss —epss 0.27

    Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request.

  • CVE-2008-1451Jun 12, 2008
    Microsoft
    Windows 2000
    risk 0.00cvss —epss 0.04

    The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka "Memory Overwrite Vulnerability."

  • CVE-2008-1453Jun 12, 2008
    Microsoft
    Windows
    risk 0.00cvss —epss 0.02

    The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service Discovery Protocol (SDP) packets.

  • CVE-2008-2668Jun 12, 2008
    Y Blog
    Yblog
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in yBlog 0.2.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php.

  • CVE-2008-2669Jun 12, 2008
    Y Blog
    Yblog
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in yBlog 0.2.2.2 allow remote attackers to execute arbitrary SQL commands via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php.

  • CVE-2008-2670Jun 12, 2008
    Insanely Simple Blog
    Insanely Simple Blog
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter, or (2) the term parameter in a search action. NOTE: the current_subsection parameter is already covered by…

  • CVE-2008-2671Jun 12, 2008
    Dcfm Blog
    Dcfm Blog
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in comments.php in DCFM Blog 0.9.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2008-2672Jun 12, 2008
    Erfurtwiki
    Erfurtwiki
    risk 0.03cvss —epss 0.04

    Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) ewiki_id and (2) ewiki_action parameters to fragments/css.php, and…

  • CVE-2008-2230Jun 11, 2008
    Reportbug Ng
    Reportbug
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory.

  • CVE-2008-0960Jun 10, 2008
    NetApp
    Data Ontap
    risk 0.02cvss —epss 0.69

    SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2;…

  • CVE-2008-1581Jun 10, 2008
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted packed scanlines in PixData structures in a PICT image.

  • CVE-2008-1582Jun 10, 2008
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AAC-encoded file that triggers memory corruption.

  • CVE-2008-1583Jun 10, 2008
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PICT image, a different vulnerability than CVE-2008-1581.

  • CVE-2008-1584Jun 10, 2008
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.06

    Stack-based buffer overflow in Indeo.qtx in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted Indeo video codec content in a movie file.

  • CVE-2008-1585Jun 10, 2008
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in video files, which sends these URIs to explorer.exe and thereby allows remote attackers to execute arbitrary programs, as originally…

  • CVE-2008-2152Jun 10, 2008
    Openoffice
    Openoffice
    risk 0.00cvss —epss 0.06

    Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow.

  • CVE-2008-2642Jun 10, 2008
    Otomigenx
    Otomigenx
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in login.php in OtomiGenX 2.2 allows remote attackers to execute arbitrary SQL commands via the userAccount parameter (aka the User Name field) to index.php. NOTE: some of these details are obtained from third party information.

  • CVE-2008-2643Jun 10, 2008
    Joomla
    Bible Study
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Bible Study (com_biblestudy) component before 6.0.7c for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a mediaplayer action to index.php.

  • CVE-2008-2644Jun 10, 2008
    Smeweb
    Smeweb
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML via the (1) data parameter to catalog.php, the (2) keyword parameter to search.php, the (3) page parameter to bb.php, and the (4) new_s…

  • CVE-2008-2645Jun 10, 2008
    Brim Project
    Brim
    risk 0.06cvss —epss 0.39

    Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in (1) barrel/, (2) barry/, (3) mylook/, (4) oerdec/, (5) penguin/, (6) sidebar/, (7)…

  • CVE-2008-2646Jun 10, 2008
    Mebiblio
    Mebiblio
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote attackers to inject arbitrary web script or HTML via the (1) sql parameter to dbadd.inc.php, (2) InsertJournal parameter to add_journal_mask.inc.php, (3) InsertBibliography parameter to…

  • CVE-2008-2647Jun 10, 2008
    Mebiblio
    Mebiblio
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in admin/journal_change_mask.inc.php in meBiblio 0.4.7 allows remote attackers to execute arbitrary SQL commands via the JID parameter.

  • CVE-2008-2648Jun 10, 2008
    Mebiblio
    Mebiblio
    risk 0.03cvss —epss 0.03

    Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the files/ directory.

  • CVE-2008-2649Jun 10, 2008
    DesktopOnNet
    DesktopOnNet
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the app_path parameter to (1) don3_requiem.don3app/don3_requiem.php and (2) frontpage.don3app/frontpage.php.

  • CVE-2008-2650Jun 10, 2008
    Cmsimple
    Cmsimple
    risk 0.05cvss —epss 0.19

    Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sl parameter to index.php. NOTE: this can be leveraged for remote file…

  • CVE-2008-2651Jun 10, 2008
    Joomla
    com_joobb
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Joomla! Bulletin Board (aka Joo!BB or com_joobb) component 0.5.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the forum parameter in a forum action to index.php.

  • CVE-2008-2652Jun 10, 2008
    Smeweb
    Smeweb
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the (1) idp and (2) category parameters.

  • CVE-2008-1673Jun 10, 2008
    Linux
    Kernel
    risk 0.01cvss —epss 0.07

    The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers…

  • CVE-2008-2358Jun 10, 2008
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a…

  • CVE-2008-2626Jun 10, 2008
    Battleblog
    Battleblog
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter.

  • CVE-2008-2627Jun 10, 2008
    Joomla
    IDoBlog
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the IDoBlog (com_idoblog) component b24 and earlier and 1.0, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the userid parameter in a userblog action to index.php.

  • CVE-2008-2628Jun 10, 2008
    Joomla
    com_equotes
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the eQuotes (com_equotes) component 0.9.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

  • CVE-2008-2629Jun 10, 2008
    Lifetype
    Lifetype
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the LifeType (formerly pLog) module for Drupal allows remote attackers to execute arbitrary SQL commands via the albumId parameter in a ViewAlbum action to index.php.

  • CVE-2008-2630Jun 10, 2008
    Joomla
    JooBlog
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter in a category action to index.php.

  • CVE-2008-2631Jun 10, 2008
    Alt N
    Mdaemon
    risk 0.05cvss —epss 0.23

    The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained…

  • CVE-2008-2632Jun 10, 2008
    Joomla
    Joomla!
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the usage parameter in a subscribe action to index.php.

  • CVE-2008-2633Jun 10, 2008
    Joomla
    Joomla!
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) show_radio or (2) show_video action to index.php.

  • CVE-2008-2634Jun 10, 2008
    Bearrivernet.net
    I Pos Internet Pay Online Store
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers to execute arbitrary SQL commands via the item parameter.

  • CVE-2008-2635Jun 10, 2008
    Barad Dur
    Bitkinex
    risk 0.00cvss —epss 0.02

    Multiple directory traversal vulnerabilities in BitKinex 2.9.3 allow remote FTP and WebDAV servers to create or overwrite arbitrary files via a .. (dot dot) in (1) a response to a LIST command from the BitKinex FTP client and (2) a response to a PROPFIND command from the…

  • CVE-2008-2636Jun 10, 2008
    Cisco Systems, Inc.
    Linksys WRH54G
    risk 0.00cvss —epss 0.03

    The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service (management interface outage) or possibly execute arbitrary code via a URI that begins with a "/./" sequence, contains many instances of a "front_page"…

  • CVE-2008-2637Jun 10, 2008
    F5, Inc.
    FirePass 1000 SSL VPN
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via quotes in (1) the css_exceptions parameter in vdesk/admincon/webyfiers.php and (2) the…

  • CVE-2008-2638Jun 10, 2008
    1scripts
    1Book
    risk 0.03cvss —epss 0.04

    Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php.

  • CVE-2008-1106Jun 9, 2008
    Red Swoosh
    Client
    risk 0.00cvss —epss 0.01

    The management interface in Akamai Client (formerly Red Swoosh) 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains (1) no Referer header, or (2) a spoofed Referer header that matches an approved domain, which allows remote…

  • CVE-2008-1805Jun 6, 2008
    Skype Technologies
    Skype
    risk 0.00cvss —epss 0.04

    Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the…

  • CVE-2008-2388Jun 6, 2008
    OpenSUSE
    openSUSE
    risk 0.00cvss —epss 0.01

    Multiple off-by-one errors in opensuse-updater in openSUSE 10.2 have unspecified impact and attack vectors. NOTE: the vendor states that these "can be considered no security problem."

  • CVE-2008-2389Jun 6, 2008
    OpenSUSE
    openSUSE
    risk 0.00cvss —epss 0.00

    opensuse-updater in openSUSE 10.2 allows local users to access arbitrary files via a symlink attack.