VYPR

CVEs

383,719 total · page 7103 of 7,675

AllCriticalHighKEV
  • CVE-2008-0196Jan 10, 2008
    WordPress
    WordPress
    risk 0.00cvss —epss 0.03

    Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the page parameter to certain PHP scripts under wp-admin/ or (2) the import parameter to wp-admin/admin.php, as demonstrated by…

  • CVE-2008-0197Jan 10, 2008
    WordPress
    Wp Contactform
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wpcf_email, (2) wpcf_subject, (3)…

  • CVE-2008-0198Jan 10, 2008
    WordPress
    Wp Contactform
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the (1) wpcf_question, (2) wpcf_success_msg, or…

  • CVE-2008-0199Jan 10, 2008
    Pro Search
    Pro Search
    risk 0.00cvss —epss 0.02

    PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the show_page and time parameters to the default URI.

  • CVE-2008-0200Jan 10, 2008
    RotaBanner
    RotaBanner Local
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) drop parameter.

  • CVE-2008-0201Jan 10, 2008
    Expressionengine
    Expressionengine
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameter.

  • CVE-2008-0202Jan 10, 2008
    Expressionengine
    Expressionengine
    risk 0.00cvss —epss 0.01

    CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter.

  • CVE-2008-0203Jan 10, 2008
    WordPress
    Cryptographp
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) cryptwidth, (2) cryptheight, (3) bgimg, (4) charR, (5) charG, (6)…

  • CVE-2008-0204Jan 10, 2008
    WordPress
    Math Comment Spam Protection Plugin
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) mcsp_opt_msg_no_answer or (2)…

  • CVE-2008-0205Jan 10, 2008
    WordPress
    Math Comment Spam Protection Plugin
    risk 0.00cvss —epss 0.02

    Multiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the (1) mcsp_opt_msg_no_answer or (2)…

  • CVE-2008-0206Jan 10, 2008
    WordPress
    Captcha
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) captcha_ttffolder, (2) captcha_numchars, (3) captcha_ttfrange, or (4)…

  • CVE-2008-0207Jan 10, 2008
    Pro Search
    Pro Search
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prot, (2) host, (3) path, (4) name, (5) ext, (6) size, (7) search_days, or (8) show_page parameter to the default URI.

  • CVE-2008-0208Jan 10, 2008
    Snitz Communications
    Forums 2000
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter.

  • CVE-2008-0209Jan 10, 2008
    Snitz Communications
    Forums 2000
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter.

  • CVE-2008-0210Jan 10, 2008
    Uebimiau
    Webmail
    risk 0.03cvss —epss 0.02

    Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sess[auth]=1 parameter settting. NOTE: this can be leveraged to conduct directory traversal…

  • CVE-2007-0012Jan 9, 2008
    Sun Corporation
    Jre
    risk 0.00cvss —epss 0.02

    Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet Explorer crash) via an object tag with an encoded applet and an undefined name attribute, which triggers a NULL pointer dereference in jpiexp32.dll when the applet is decoded and passed…

  • CVE-2007-6250Jan 9, 2008
    AOL
    Aolmediaplaybackcontrol
    risk 0.02cvss —epss 0.24

    Stack-based buffer overflow in AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe), as used by AmpX ActiveX control (AmpX.dll), might allow remote attackers to execute arbitrary code via the AppendFileToPlayList method.

  • CVE-2007-6531Jan 9, 2008
    Xfce
    Xfce
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow (over-read) in the xfce_mkdirhier function was also reported, but it might not be…

  • CVE-2007-6532Jan 9, 2008
    Xfce
    Xfce
    risk 0.00cvss —epss 0.04

    Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."

  • CVE-2007-5762Jan 9, 2008
    Novell
    Netware Client
    risk 0.03cvss —epss 0.01

    NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.

  • CVE-2008-0184Jan 9, 2008
    Prenotazioni On Line
    Syshotel On Line System
    risk 0.03cvss —epss 0.02

    Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrary files via an encoded "/" ("%2F") in the file parameter.

  • CVE-2008-0185Jan 9, 2008
    Netrisk
    Netrisk
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the pid parameter in a profile page (possibly profile.php).

  • CVE-2008-0186Jan 9, 2008
    Netrisk
    Netrisk
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to CVE-2008-0144.

  • CVE-2008-0187Jan 9, 2008
    SAM Broadcaster
    samPHPweb
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote attackers to execute arbitrary SQL commands via the songid parameter.

  • CVE-2007-4769Jan 9, 2008
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.04

    The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.

  • CVE-2007-4772Jan 9, 2008
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.04

    The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

  • CVE-2007-5401Jan 9, 2008
    Layton Technology
    Helpbox
    risk 0.00cvss —epss 0.01

    Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users to upload and execute arbitrary ASP files, related to not properly checking file extensions.

  • CVE-2007-5402Jan 9, 2008
    Layton Technology
    Helpbox
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Layton HelpBox 3.7.1 allow (1) remote attackers to execute arbitrary SQL commands via the sys_request_id parameter to editrequestenduser.asp; and allow remote authenticated users to execute arbitrary SQL commands via (2) the oldpassword…

  • CVE-2007-5403Jan 9, 2008
    Layton Technology
    Helpbox
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Layton HelpBox 3.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Forename, (2) Surname, (3) Telephone, and (4) Fax fields to writeenduserenduser.asp; the (5) Filter field to…

  • CVE-2007-5404Jan 9, 2008
    Layton Technology
    Helpbox
    risk 0.00cvss —epss 0.01

    Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.

  • CVE-2007-5616Jan 9, 2008
    SSH
    Tectia Client
    risk 0.00cvss —epss 0.01

    ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and Linux allows local users to gain privileges via unspecified vectors.

  • CVE-2007-6067Jan 9, 2008
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.04

    Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption)…

  • CVE-2007-6600Jan 9, 2008
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.03

    PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION…

  • CVE-2007-6601Jan 9, 2008
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.02

    The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists…

  • CVE-2007-5665Jan 9, 2008
    Novell
    Zenworks Endpoint Security Management
    risk 0.00cvss —epss 0.00

    STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management (ESM) 3.5, and other ESM versions before 3.5.0.82, dynamically creates scripts in a world-writable directory when generating diagnostic reports, which allows local users to gain privileges, as demonstrated by…

  • CVE-2007-5761Jan 9, 2008
    Motorola
    Netoctopus
    risk 0.00cvss —epss 0.00

    The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \\.\NantSys device interface (nantsys.sys), which allows local users to gain privileges or cause a denial of service (system crash), as demonstrated by modifying the…

  • CVE-2008-0147Jan 9, 2008
    Smallnuke
    Smallnuke
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via (1) the user_email parameter and possibly (2) username parameter in a Members action.

  • CVE-2008-0148Jan 9, 2008
    Tutos
    Tutos
    risk 0.03cvss —epss 0.06

    TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request.

  • CVE-2008-0149Jan 9, 2008
    Tutos
    Tutos
    risk 0.04cvss —epss 0.08

    TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function.

  • CVE-2008-0150Jan 9, 2008
    Arubanetworks
    Mobility Controller
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or earlier allows remote attackers to bypass authentication mechanisms and obtain management or VPN interface access.

  • CVE-2008-0151Jan 9, 2008
    Foxitsoftware
    WAC Server
    risk 0.04cvss —epss 0.09

    Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Telnet request with long options.

  • CVE-2008-0152Jan 9, 2008
    Seattlelab
    SLNet RF Telnet Server
    risk 0.00cvss —epss 0.02

    SLnet.exe in SeattleLab SLNet RF Telnet Server 4.1.1.3758 and earlier allows user-assisted remote attackers to cause a denial of service (crash) via unspecified telnet options, which triggers a NULL pointer dereference. NOTE: the crash is not user-assisted when the server is…

  • CVE-2008-0153Jan 9, 2008
    Pragma Systems
    Pragma Telnetserver
    risk 0.04cvss —epss 0.13

    telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process crash and resource exhaustion) via a crafted TELOPT PRAGMA LOGON telnet option, which triggers a NULL pointer dereference.

  • CVE-2008-0154Jan 9, 2008
    Evilboard
    Evilboard
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to execute arbitrary SQL commands the c parameter.

  • CVE-2008-0155Jan 9, 2008
    Evilboard
    Evilboard
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to inject arbitrary web script or HTML via the c parameter.

  • CVE-2008-0156Jan 9, 2008
    Million Dollar Script
    Million Dollar Script
    risk 0.00cvss —epss 0.01

    Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbitrary files via encoded "/" (%2F) sequences in the link parameter.

  • CVE-2008-0157Jan 9, 2008
    Flexbb
    Flexbb
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_temp_id parameter in a cookie.

  • CVE-2008-0158Jan 9, 2008
    Shop Script
    Shop Script
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers to read arbitrary files via a .. (dot dot) in the aux_page parameter.

  • CVE-2008-0159Jan 9, 2008
    Eggblog
    Eggblog
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the eggblogpassword parameter in a cookie.

  • CVE-2007-0066Jan 8, 2008
    Microsoft
    Windows 2000
    risk 0.03cvss —epss 0.32

    The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel…