VYPR

CVEs

383,871 total · page 7077 of 7,678

AllCriticalHighKEV
  • CVE-2008-1692Apr 7, 2008
    Michael Jennings
    Eterm
    risk 0.00cvss —epss 0.00

    Eterm 0.9.4 opens a terminal window on :0 if -display is not specified and the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.

  • CVE-2008-0310Apr 7, 2008
    SCO Group
    Unixware
    risk 0.03cvss —epss 0.01

    Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST.

  • CVE-2008-0709Apr 7, 2008
    Microfocus
    Select Identity
    risk 0.00cvss —epss 0.01

    Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to access other user accounts via unknown vectors, a different issue than CVE-2008-0214.

  • CVE-2008-1142Apr 7, 2008
    Rxvt
    Rxvt
    risk 0.00cvss —epss 0.00

    rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack…

  • CVE-2008-1689Apr 7, 2008
    Slmail
    Slmail
    risk 0.00cvss —epss 0.02

    Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (daemon crash) via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained…

  • CVE-2008-1690Apr 7, 2008
    Slmail
    Slmail
    risk 0.03cvss —epss 0.06

    WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: some of these details are…

  • CVE-2008-1691Apr 7, 2008
    Slmail
    Slmail
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (UDP service outage) via a large packet to UDP port 54. NOTE: some of these details are obtained from third party information.

  • CVE-2008-0311Apr 6, 2008
    Borland Software
    Caliberrm
    risk 0.05cvss —epss 0.31

    Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request.

  • CVE-2008-0708Apr 6, 2008
    Microfocus
    USB 2.0 Floppy Drive Key
    risk 0.00cvss —epss 0.00

    HP USB 2.0 Floppy Drive Key product options (1) 442084-B21 and (2) 442085-B21 for certain HP ProLiant servers contain the (a) W32.Fakerecy and (b) W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection.

  • CVE-2008-0887Apr 6, 2008
    GNOME Foundation
    Screensaver
    risk 0.00cvss —epss 0.01

    gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859.

  • CVE-2008-1602Apr 6, 2008
    Orbitdownloader
    Orbit Downloader
    risk 0.08cvss —epss 0.67

    Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed.

  • CVE-2008-1684Apr 6, 2008
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file.

  • CVE-2008-1685Apr 6, 2008
    GNU
    Gcc
    risk 0.00cvss —epss 0.01

    gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead to removal of length testing code that was intended as a protection mechanism against integer…

  • CVE-2008-1154Apr 4, 2008
    Cisco Systems, Inc.
    Emergency Responder
    risk 0.00cvss —epss 0.05

    The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for…

  • CVE-2008-1681Apr 4, 2008
    IBM
    Db2 Content Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege.

  • CVE-2008-1682Apr 4, 2008
    Joomla
    com_onlineflashquiz
    risk 0.05cvss —epss 0.27

    PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter.

  • CVE-2008-1013Apr 4, 2008
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet.

  • CVE-2008-1014Apr 4, 2008
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.02

    Apple QuickTime before 7.4.5 does not properly handle external URLs in movies, which allows remote attackers to obtain sensitive information.

  • CVE-2008-1015Apr 4, 2008
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.06

    Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.

  • CVE-2008-1016Apr 4, 2008
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbitrary code via a crafted movie that triggers memory corruption.

  • CVE-2008-1017Apr 4, 2008
    Apple Inc.
    Quicktime
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.

  • CVE-2008-1018Apr 4, 2008
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via an MP4A movie with a malformed Channel Compositor (aka chan) atom.

  • CVE-2008-1019Apr 4, 2008
    Apple Inc.
    Quicktime
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted PICT image file, related to an improperly terminated memory copy loop.

  • CVE-2008-1020Apr 4, 2008
    Apple Inc.
    Quicktime
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak encoding, related to error checking and error messages.

  • CVE-2008-1021Apr 4, 2008
    Apple Inc.
    Quicktime
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding.

  • CVE-2008-1022Apr 4, 2008
    Apple Inc.
    Quicktime
    risk 0.01cvss —epss 0.07

    Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted VR movie with an obji atom of zero size.

  • CVE-2008-1023Apr 4, 2008
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file.

  • CVE-2007-5661Apr 4, 2008
    Macrovision
    InstallShield InstallScript One-Click Install (OCI) ActiveX control
    risk 0.00cvss —epss 0.02

    The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine.

  • CVE-2008-0555Apr 4, 2008
    Apache SSL
    Apache SSL
    risk 0.00cvss —epss 0.02

    The ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) '/' and (2) '=' characters in a Distinguished Name (DN) in a client certificate, which might allow remote attackers to bypass authentication via a crafted DN that triggers…

  • CVE-2008-0884Apr 4, 2008
    Red Hat
    lspp-eal4-config-ibm
    risk 0.00cvss —epss 0.00

    The Replace function in the capp-lspp-config script in the (1) lspp-eal4-config-ibm and (2) capp-lspp-eal4-config-hp packages before 0.65-2 in Red Hat Enterprise Linux (RHEL) 5 uses lstat instead of stat to determine the /etc/pam.d/system-auth file permissions, leading to a…

  • CVE-2008-1373Apr 4, 2008
    Easy Software Products
    Cups
    risk 0.00cvss —epss 0.02

    Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.

  • CVE-2008-1374Apr 4, 2008
    Apple Inc.
    Cups
    risk 0.00cvss —epss 0.04

    Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: this issue is due to an incomplete fix for CVE-2004-0888.

  • CVE-2008-1680Apr 4, 2008
    PHP-Nuke
    PHP-Nuke Platinum
    risk 0.03cvss —epss 0.02

    PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenance/index.php, which reveals settings such as magic_quotes_gpc.

  • CVE-2008-1331Apr 2, 2008
    OmniPCX
    OmniPCX Office
    risk 0.04cvss —epss 0.09

    cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter.

  • CVE-2008-1654Apr 2, 2008
    Adobe Inc.
    Flash
    risk 0.00cvss —epss 0.05

    Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF) style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated…

  • CVE-2008-1657Apr 2, 2008
    OpenSSH
    OpenSSH
    risk 0.00cvss —epss 0.02

    OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.

  • CVE-2008-0069Apr 2, 2008
    Xnview
    Xnview
    risk 0.04cvss —epss 0.08

    Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow (.sld) file, a different vector than CVE-2008-1461.

  • CVE-2008-1620Apr 2, 2008
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a ... (dot dot dot) in the filename.

  • CVE-2008-1621Apr 2, 2008
    Geertsen Holdings Inc
    Geecarts
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) show.php, (2) search.php, and (3) view.php. NOTE: the provenance of this information is unknown; the details are obtained…

  • CVE-2008-1622Apr 2, 2008
    Geertsen Holdings Inc
    Geecarts
    risk 0.00cvss —epss 0.01

    Multiple PHP remote file inclusion vulnerabilities in GeeCarts allow remote attackers to execute arbitrary PHP code via a URL in the id parameter to (1) show.php, (2) search.php, and (3) view.php. NOTE: the provenance of this information is unknown; the details are obtained…

  • CVE-2008-1623Apr 2, 2008
    Smoothflash
    Smoothflash
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to execute arbitrary SQL commands via the cid parameter.

  • CVE-2008-1624Apr 2, 2008
    Jshop E Commerce
    Jshop Server
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xPage parameter.

  • CVE-2008-1625Apr 2, 2008
    Avast\!
    Avast Antivirus Professional
    risk 0.03cvss —epss 0.01

    aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.

  • CVE-2008-1626Apr 2, 2008
    Eggblog
    Eggblog
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie. NOTE: this might overlap CVE-2008-0159.

  • CVE-2008-1627Apr 2, 2008
    CDS
    Invenio
    risk 0.00cvss —epss 0.01

    CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID.

  • CVE-2008-1628Apr 2, 2008
    Linux
    Audit
    risk 0.00cvss —epss 0.01

    Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information.

  • CVE-2008-1629Apr 2, 2008
    PHPkrm
    PHPkrm
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in PHPkrm before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-1630Apr 2, 2008
    Cuteflow
    Cuteflow
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) page/showcirculation.php; and (2) edittemplate_step2.php, (3) showfields.php, (4) showuser.php, (5)…

  • CVE-2008-1631Apr 2, 2008
    Cuteflow
    Cuteflow
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.

  • CVE-2008-1632Apr 2, 2008
    Cuteflow
    Cuteflow
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in CuteFlow 2.10.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) listid parameter to pages/editmailinglist_step1.php, the (2) userid parameter to pages/edituser.php, the (3) fieldid parameter to…