VYPR

CVEs

383,515 total · page 7110 of 7,671

AllCriticalHighKEV
  • CVE-2007-6230Dec 4, 2007
    Rayzz
    Rayzz Script
    risk 0.04cvss —epss 0.06

    Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the CFG[site][project_path] parameter.

  • CVE-2007-6231Dec 4, 2007
    Tellmatic
    Tellmatic
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the tm_includepath parameter to (1) Classes.inc.php, (2) statistic.inc.php, (3) status.inc.php, (4) status_top_x.inc.php, or (5)…

  • CVE-2007-6232Dec 4, 2007
    FTP
    Admin
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action.

  • CVE-2007-6233Dec 4, 2007
    FTP Admin
    FTP Admin
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC…

  • CVE-2007-6234Dec 4, 2007
    FTP Admin
    FTP Admin
    risk 0.03cvss —epss 0.04

    index.php in FTP Admin 0.1.0 allows remote attackers to bypass authentication and obtain administrative access via a loggedin parameter with a value of true, as demonstrated by adding a user account.

  • CVE-2007-6235Dec 4, 2007
    RealNetworks
    Realplayer
    risk 0.03cvss —epss 0.03

    A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904.

  • CVE-2007-6236Dec 4, 2007
    Microsoft
    Windows Media Player
    risk 0.04cvss —epss 0.19

    Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a certain AIFF file that triggers a divide-by-zero error, as demonstrated by kr.aiff.

  • CVE-2007-6237Dec 4, 2007
    Deluxebb
    Deluxebb
    risk 0.03cvss —epss 0.03

    cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during a profile update, which allows remote authenticated users to change the e-mail addresses of arbitrary accounts via a modified membercookie parameter, a…

  • CVE-2007-6238Dec 4, 2007
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Apple QuickTime 7.2 on Windows XP allows remote attackers to execute arbitrary code via unknown attack vectors, probably a different vulnerability than CVE-2007-6166. NOTE: this information is based upon a vague advisory by a vulnerability…

  • CVE-2007-6239Dec 4, 2007
    Squid Cache
    Squid Web Proxy Cache
    risk 0.02cvss —epss 0.27

    The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

  • CVE-2007-6218Dec 4, 2007
    Ossigeno
    CMS
    risk 0.03cvss —epss 0.04

    Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) level parameter to (a) install_module.php and (b) uninstall_module.php in upload/xax/admin/modules/, (c)…

  • CVE-2007-6219Dec 4, 2007
    IBM
    Tivoli Netcool Security Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2007-6220Dec 4, 2007
    Typespeed
    Typespeed
    risk 0.00cvss —epss 0.01

    typespeed before 0.6.4 allows remote attackers to cause a denial of service (application crash) via unspecified network behavior that triggers a divide-by-zero error.

  • CVE-2007-6221Dec 4, 2007
    Tumusika Evolution
    Evolution
    risk 0.03cvss —epss 0.02

    TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2007-6222Dec 4, 2007
    Interleave
    Interleave
    risk 0.00cvss —epss 0.01

    The CheckCustomerAccess function in functions.php in CRM-CTT Interleave before 4.2.0 (formerly CRM-CTT) does not properly verify user privileges, which allows remote authenticated users with the LIMITTOCUSTOMERS privilege to bypass intended access restrictions and edit…

  • CVE-2007-6223Dec 4, 2007
    PhpBB
    Garage
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the make_id parameter in a search action in browse mode.

  • CVE-2007-6212Dec 4, 2007
    Google
    Kml
    risk 0.03cvss —epss 0.01

    Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the layer parameter.

  • CVE-2007-6213Dec 4, 2007
    Webed
    Webed
    risk 0.04cvss —epss 0.07

    Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) Root and (2) Path parameters.

  • CVE-2007-6214Dec 4, 2007
    Learnloop
    Learnloop
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read arbitrary files via a .. (dot dot) in the sFilePath parameter. NOTE: exploitation requires that the product is configured, but has zero files in the database.

  • CVE-2007-6215Dec 4, 2007
    Web Meetme
    Web Meetme
    risk 0.03cvss —epss 0.03

    Multiple directory traversal vulnerabilities in play.php in Web-MeetMe 3.0.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) roomNo and possibly the (2) bookid parameter.

  • CVE-2007-6216Dec 4, 2007
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local users to cause a denial of service (system hang) via some programs that access hardware resources, as demonstrated by the (1) cfgadm and (2) format programs.

  • CVE-2007-6217Dec 4, 2007
    Irola
    Timesheet
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow remote attackers to execute arbitrary SQL commands via the (1) login (aka Username) and (2) password parameters. NOTE: some of these details are obtained from third party information.

  • CVE-2007-6210Dec 4, 2007
    Zabbix
    Zabbix
    risk 0.03cvss —epss 0.01

    zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.

  • CVE-2007-6211Dec 4, 2007
    Sing
    Sing
    risk 0.03cvss —epss 0.01

    Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the…

  • CVE-2007-6206Dec 4, 2007
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain…

  • CVE-2007-6207Dec 4, 2007
    Xen
    Xen
    risk 0.00cvss —epss 0.00

    Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.

  • CVE-2007-6208Dec 4, 2007
    Claws Mail
    Claws Mail
    risk 0.00cvss —epss 0.00

    sylprint.pl in claws mail tools (claws-mail-tools) allows local users to overwrite arbitrary files via a symlink attack on the sylprint.[USER].[PID] temporary file.

  • CVE-2007-6209Dec 4, 2007
    Zsh
    Zsh
    risk 0.00cvss —epss 0.00

    Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

  • CVE-2007-6203Dec 3, 2007
    Apache
    HTTP Server
    risk 0.09cvss —epss 0.81

    Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can…

  • CVE-2006-7225Dec 3, 2007
    Perl Foundation
    Pcre
    risk 0.00cvss —epss 0.02

    Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of service (error or crash) via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a [[ sequence.

  • CVE-2006-7226Dec 3, 2007
    Pcre
    PCRE library
    risk 0.00cvss —epss 0.02

    Perl-Compatible Regular Expression (PCRE) library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers…

  • CVE-2007-5502Dec 1, 2007
    OpenSSL Project
    Fips Object Module
    risk 0.00cvss —epss 0.02

    The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the…

  • CVE-2007-5742Dec 1, 2007
    Wesnoth
    Wesnoth
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors.

  • CVE-2007-6196Dec 1, 2007
    Atmail
    @Mail
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in util.php in Calacode @Mail before 5.2 allows remote attackers to inject arbitrary web script or HTML via the func parameter.

  • CVE-2007-6197Dec 1, 2007
    Bea
    Aqualogic Interaction
    risk 0.00cvss —epss 0.02

    The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page.

  • CVE-2007-6198Dec 1, 2007
    Bea
    Aqualogic Interaction
    risk 0.04cvss —epss 0.07

    portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter.

  • CVE-2007-6199Dec 1, 2007
    Rsync
    Rsync
    risk 0.00cvss —epss 0.04

    rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy.

  • CVE-2007-6200Dec 1, 2007
    Rsync
    Rsync
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

  • CVE-2007-6201Dec 1, 2007
    Wesnoth
    Wesnoth
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turn_cmd option.

  • CVE-2007-6202Dec 1, 2007
    Neocrome
    Seditio
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrary SQL commands via the pag_sub[] parameter to plug.php.

  • CVE-2007-5494Nov 30, 2007
    Red Hat
    Red Hat Content Accelerator kernel patch
    risk 0.00cvss —epss 0.00

    Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local users to cause a denial of service (memory consumption) via a large number of open requests involving O_ATOMICLOOKUP.

  • CVE-2007-5503Nov 30, 2007
    Cairographics
    Cairo
    risk 0.00cvss —epss 0.05

    Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.

  • CVE-2007-6150Nov 30, 2007
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to obtain portions of previously-accessed random values, which could be leveraged to bypass protection mechanisms that rely on secrecy of…

  • CVE-2007-6170Nov 30, 2007
    Asterisk
    Asterisk
    risk 0.00cvss —epss 0.03

    SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via (1) ANI and (2)…

  • CVE-2007-6171Nov 30, 2007
    Asterisk
    Asterisk
    risk 0.00cvss —epss 0.03

    SQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2007-6187Nov 30, 2007
    Nordicwind
    Noah
    risk 0.03cvss —epss 0.03

    Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the filepath parameter to (1) css_file.php, (2) js_file.php, or (3) xml_file.php in…

  • CVE-2007-6188Nov 30, 2007
    Tumusika Evolution
    Evolution
    risk 0.03cvss —epss 0.04

    Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) languages_n.php, (2) languages_f.php, or (3) languages.php in inc/; and (4) allow…

  • CVE-2007-6189Nov 30, 2007
    Bitdefender
    Online Anti Virus Scanner
    risk 0.04cvss —epss 0.08

    A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execute arbitrary code via a long argument to the InitX method that begins with a "%%" sequence, which is misinterpreted as a Unicode string…

  • CVE-2007-6190Nov 30, 2007
    Cisco Systems, Inc.
    Unified IP Phone 9971
    risk 0.00cvss —epss 0.01

    The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL…

  • CVE-2007-6191Nov 30, 2007
    Pmapper
    P.mapper
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote attackers to execute arbitrary PHP code via a URL in the _SESSION[PM_INCPHP] parameter to (1) incphp/globals.php or (2) plugins/export/mc_table.php. NOTE: it could be argued…