VYPR

CVEs

383,797 total · page 7087 of 7,676

AllCriticalHighKEV
  • CVE-2008-1127Mar 3, 2008
    Ea
    Crysis
    risk 0.03cvss —epss 0.03

    Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered when the game character is killed.

  • CVE-2008-1128Mar 3, 2008
    Phpmytourney
    Phpmytourney
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

  • CVE-2008-0928Mar 3, 2008
    QEMU
    Qemu
    risk 0.00cvss —epss 0.00

    Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.

  • CVE-2008-1119Mar 3, 2008
    Centreon
    Centreon
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in include/doc/get_image.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter.

  • CVE-2008-1120Mar 3, 2008
    Icq
    Mirabilis Icq
    risk 0.00cvss —epss 0.03

    Format string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build 6043 allows remote servers to execute arbitrary code or cause a denial of service (crash) via unspecified vectors related to HTML code generation.

  • CVE-2008-1121Mar 3, 2008
    Eazyportal
    Eazyportal
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in eazyPortal 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the session_vars cookie.

  • CVE-2008-1122Mar 3, 2008
    Dream4
    Koobi Pro
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0.

  • CVE-2008-1123Mar 3, 2008
    Sitebuilder
    Sitebuilder Elite
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the CarpPath parameter to (1) files/carprss.php and (2) files/amazon-bestsellers.php.

  • CVE-2008-1124Mar 3, 2008
    Podcast Generator
    Podcast Generator
    risk 0.05cvss —epss 0.22

    Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absoluteurl parameter to (1) components/xmlparser/loadparser.php; (2) admin.php, (3) categories.php, (4)…

  • CVE-2008-1125Mar 3, 2008
    Podcast Generator
    Podcast Generator
    risk 0.03cvss —epss 0.03

    Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) theme_path parameter to core/themes.php and the (2) filename parameter to download.php.

  • CVE-2008-1126Mar 3, 2008
    Barryvan Compo
    Barryvan Compo Manager
    risk 0.05cvss —epss 0.24

    PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the pageURL parameter.

  • CVE-2007-6252Mar 3, 2008
    Learn2
    Strunner
    risk 0.00cvss —epss 0.03

    Multiple stack-based buffer overflows in the Learn2 Corporation STRunner (aka Street Technologies) ActiveX control in iestm32.dll allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2008-1113Mar 3, 2008
    Cisco Systems, Inc.
    Unified Wireless IP Phone 7921
    risk 0.00cvss —epss 0.01

    Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.

  • CVE-2008-1114Mar 3, 2008
    Vocera
    Wireless Handset
    risk 0.00cvss —epss 0.01

    Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.

  • CVE-2008-1115Mar 3, 2008
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Sun Solaris 8 directory functions allows local users to cause a denial of service (panic) via an unspecified sequence of system calls or commands.

  • CVE-2008-1116Mar 3, 2008
    Rising Antivirus
    Online Scanner
    risk 0.04cvss —epss 0.10

    Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of…

  • CVE-2007-6016Feb 29, 2008
    Symantec
    Backup Exec For Windows Server
    risk 0.07cvss —epss 0.50

    Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to…

  • CVE-2007-6017Feb 29, 2008
    Symantec
    Backup Exec For Windows Server
    risk 0.00cvss —epss 0.03

    The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, exposes the unsafe Save method, which allows remote attackers to…

  • CVE-2008-0304Feb 29, 2008
    Mozilla Corporation
    Thunderbird
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

  • CVE-2008-0385Feb 29, 2008
    Urulu
    Urulu
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter to index.php with (1) statprt/js/request or (2) dyn/js/request in the PATH_INFO.

  • CVE-2008-0595Feb 29, 2008
    Xorg
    Dbus
    risk 0.00cvss —epss 0.00

    dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL…

  • CVE-2008-1110Feb 29, 2008
    Xine
    xineplug_dmx_asf.so
    risk 0.04cvss —epss 0.10

    Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted ASF header. NOTE: this issue leads to a crash when an…

  • CVE-2008-1095Feb 29, 2008
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service (panic) via unknown vectors, possibly related to ICMP packets and IP fragment reassembly.

  • CVE-2008-0303Feb 29, 2008
    Canon
    Imagepress
    risk 0.00cvss —epss 0.02

    The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.

  • CVE-2008-1078Feb 29, 2008
    Rpath
    Linux
    risk 0.00cvss —epss 0.01

    expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file. NOTE: this is the same issue as CVE-2003-0308.1.

  • CVE-2008-1080Feb 29, 2008
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input.

  • CVE-2008-1081Feb 29, 2008
    Opera
    Opera
    risk 0.00cvss —epss 0.03

    Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties.

  • CVE-2008-1082Feb 29, 2008
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which are not properly handled during DOM presentation.

  • CVE-2008-1073Feb 29, 2008
    Iss
    Internet Scanner
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the report interface in Internet Security Systems (ISS) Internet Scanner 7.0 Service Pack 2 Build 7.2.2005.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-1074Feb 29, 2008
    Group E
    Group E
    risk 0.06cvss —epss 0.37

    PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFG[PREPEND_FILE] parameter.

  • CVE-2008-1075Feb 29, 2008
    Maian Cart
    Maian Cart
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search command. NOTE: the provenance of this information is unknown; the details are obtained solely from third…

  • CVE-2008-1076Feb 29, 2008
    Interspire
    Shopping Cart
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to inject arbitrary web script or HTML via the search_query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third…

  • CVE-2008-1077Feb 29, 2008
    Joomla
    com_simpleboard
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in the Simpleboard (com_simpleboard) 1.0.3 Stable component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action.

  • CVE-2008-1070Feb 28, 2008
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.

  • CVE-2008-1071Feb 28, 2008
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.02

    The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.

  • CVE-2008-1072Feb 28, 2008
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.01

    The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug.

  • CVE-2008-0411Feb 28, 2008
    Artifex
    Ghostscript
    risk 0.04cvss —epss 0.15

    Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

  • CVE-2008-1067Feb 28, 2008
    Phpqladmin
    Phpqladmin
    risk 0.05cvss —epss 0.22

    Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the _SESSION[path] parameter to (1) ezmlm.php and (2) tools/update_translations.php.

  • CVE-2008-1068Feb 28, 2008
    Portail Web PHP
    Portail Web PHP
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) Vert/index.php, (2) Noir/index.php, and (3) Bleu/index.php in template/, different vectors…

  • CVE-2008-1069Feb 28, 2008
    Quantum Game Library
    Quantum Game Library
    risk 0.05cvss —epss 0.29

    Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) server_request.php and (2) qlib/smarty.inc.php.

  • CVE-2007-5397Feb 28, 2008
    Activepdf
    Server
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in the activePDF Server service (aka APServer.exe) in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size…

  • CVE-2008-0124Feb 28, 2008
    Serendipity
    Serendipity
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3-beta1 allows remote authenticated users to inject arbitrary web script or HTML via (1) the "Real name" field in Personal Settings, which is presented to readers of articles; or (2) a file upload, as…

  • CVE-2008-0308Feb 28, 2008
    Symantec
    Decomposer
    risk 0.00cvss —epss 0.03

    Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation…

  • CVE-2008-0309Feb 28, 2008
    Symantec
    Scan Engine
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…

  • CVE-2008-1063Feb 28, 2008
    XOOPS
    Xm Memberstats
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability index.php in the XM-Memberstats (xmmemberstats) module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter.

  • CVE-2008-1064Feb 28, 2008
    XOOPS
    Xoops Rmsoft Gallery System
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter.

  • CVE-2008-1065Feb 28, 2008
    XOOPS
    Xm Memberstats
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the (1) letter or (2) sortby parameter. NOTE: the provenance of this information is unknown; the details…

  • CVE-2008-1066Feb 28, 2008
    Smarty
    Smarty
    risk 0.00cvss —epss 0.02

    The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string.

  • CVE-2008-1056Feb 28, 2008
    Symark
    Powerbroker
    risk 0.00cvss —epss 0.00

    Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv[0] string when executing (1) pbrun, (2) pbsh, or (3) pbksh. NOTE: the product is often installed in environments with trust relationships that…

  • CVE-2008-1057Feb 28, 2008
    OpenBSD
    OpenBSD
    risk 0.00cvss —epss 0.02

    The ip6_check_rh0hdr function in netinet6/ip6_input.c in OpenBSD 4.2 allows attackers to cause a denial of service (panic) via malformed IPv6 routing headers.