VYPR

CVEs

383,401 total · page 7117 of 7,669

AllCriticalHighKEV
  • CVE-2007-2263Oct 31, 2007
    RealNetworks
    Realplayer
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.

  • CVE-2007-2264Oct 31, 2007
    RealNetworks
    Realplayer
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.

  • CVE-2007-4345Oct 31, 2007
    Ipswitch, Inc.
    Imail Server
    risk 0.00cvss —epss 0.03

    Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart MIME e-mail message.

  • CVE-2007-4599Oct 31, 2007
    RealNetworks
    Realplayer
    risk 0.01cvss —epss 0.08

    Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows allows remote attackers to execute arbitrary code via a crafted playlist (PLS) file.

  • CVE-2007-5080Oct 31, 2007
    RealNetworks
    Realplayer
    risk 0.01cvss —epss 0.08

    Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow.

  • CVE-2007-5081Oct 31, 2007
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a crafted RM file.

  • CVE-2007-5751Oct 31, 2007
    Liferea
    Liferea
    risk 0.00cvss —epss 0.00

    Liferea before 1.4.6 uses weak permissions (0644) for the feedlist.opml backup file, which allows local users to obtain credentials.

  • CVE-2007-5752Oct 31, 2007
    Agtc Websolutions
    PHP Agtc Membership System
    risk 0.03cvss —epss 0.03

    adduser.php in PHP-AGTC Membership (AGTC-Membership) System 1.1a does not require authentication, which allows remote attackers to create accounts via a modified form, as demonstrated by an account with admin (userlevel 4) privileges.

  • CVE-2007-5753Oct 31, 2007
    Light Fman PHP
    Light Fman PHP
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Light FMan PHP (lfman or lightfman) before 2.0rc1 has unknown impact and attack vectors related to "actions."

  • CVE-2007-5754Oct 31, 2007
    Phpfaber
    Urlinn
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in urlinn_includes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the dir_ws parameter.

  • CVE-2007-5740Oct 31, 2007
    Perdition
    Mail Retrieval Proxy
    risk 0.04cvss —epss 0.12

    The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.

  • CVE-2007-5731Oct 30, 2007
    Apache
    Jakarta Slide
    risk 0.04cvss —epss 0.07

    Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461.

  • CVE-2007-5732Oct 30, 2007
    Elouai
    Force Download
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in downloadfile.php in eLouai's Force Download of media files script, as available on 20071030 and earlier, allows remote attackers to read arbitrary files via the file parameter. NOTE: this issue only occurs in environments where the system…

  • CVE-2007-5733Oct 30, 2007
    Japanese PHP Gallery Hosting
    Japanese PHP Gallery Hosting
    risk 0.03cvss —epss 0.02

    Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some…

  • CVE-2007-5734Oct 30, 2007
    Efileman
    Efileman
    risk 0.00cvss —epss 0.01

    Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with "uploads/upload_file." destination filenames, via unspecified vectors to upload.cgi, accessed from upload.html.

  • CVE-2007-5735Oct 30, 2007
    Efileman
    Efileman
    risk 0.00cvss —epss 0.01

    eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain unspecified user information via a direct request for cgi-bin/efileman/efileman_config.pm.

  • CVE-2007-5736Oct 30, 2007
    Seeblick
    Seeblick
    risk 0.00cvss —epss 0.01

    Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and…

  • CVE-2007-5737Oct 30, 2007
    GHBoard
    GHBoard
    risk 0.03cvss —epss 0.02

    Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbitrary files via unspecified vectors, probably involving a direct request.

  • CVE-2007-5738Oct 30, 2007
    GHBoard
    FlashUpload
    risk 0.00cvss —epss 0.01

    The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html.

  • CVE-2007-5739Oct 30, 2007
    GHBoard
    FlashUpload
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.

  • CVE-2007-1321Oct 30, 2007
    QEMU
    Qemu
    risk 0.00cvss —epss 0.00

    Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE:…

  • CVE-2007-4277Oct 30, 2007
    Trend Micro
    Scan Engine
    risk 0.00cvss —epss 0.00

    The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions (Everyone:Write) for the \\.\Tmfilter device, which allows local users to send arbitrary content to…

  • CVE-2007-5729Oct 30, 2007
    QEMU
    Qemu
    risk 0.00cvss —epss 0.01

    The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0_TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some…

  • CVE-2007-5730Oct 30, 2007
    QEMU
    Qemu
    risk 0.00cvss —epss 0.01

    Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to…

  • CVE-2007-4861Oct 30, 2007
    Saxon
    Saxon
    risk 0.00cvss —epss 0.02

    SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive information via (1) a direct request for news.php, (2) an invalid use of a newsid array parameter to admin/edit-item.php, and possibly unspecified vectors related to additional scripts in (3)…

  • CVE-2007-4862Oct 30, 2007
    Saxon
    Saxon
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the config[news_url] parameter.

  • CVE-2007-4863Oct 30, 2007
    Saxon
    Saxon
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter.

  • CVE-2007-5716Oct 30, 2007
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Internet Protocol (IP) functionality in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors, probably related to a UDP packet.

  • CVE-2007-5717Oct 30, 2007
    Sun Corporation
    Embedded Lights Out Manager
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) on x86 before firmware 2.70 allows remote attackers to execute arbitrary commands as root on the Service Processor (SP) via unspecified vectors, a different vulnerability than…

  • CVE-2007-5718Oct 30, 2007
    Vobcopy
    Vobcopy
    risk 0.00cvss —epss 0.00

    vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

  • CVE-2007-5719Oct 30, 2007
    Minibb
    Minibb
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table parameter to index.php.

  • CVE-2007-5720Oct 30, 2007
    Profilecms
    Profilecms
    risk 0.03cvss —epss 0.02

    Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving creation of a profile.

  • CVE-2007-5721Oct 30, 2007
    Myspacepros
    Myspace Resource Script
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in _theme/breadcrumb.php in MySpacePros MySpace Resource Script (MSRS) 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the rootBase parameter.

  • CVE-2007-5722Oct 30, 2007
    GlobalLink
    GLChat.ocx
    risk 0.04cvss —epss 0.12

    Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and possibly other products, allows remote attackers to execute arbitrary code via a long first argument to the ConnectAndEnterRoom method, possibly…

  • CVE-2007-5723Oct 30, 2007
    Nufw
    Nufw
    risk 0.00cvss —epss 0.02

    Heap-based buffer overflow in the samp_send function in nuauth/sasl.c in NuFW before 2.2.7 allows remote attackers to cause a denial of service via unspecified input on which base64 encoding is performed. NOTE: some of these details are obtained from third party information.

  • CVE-2007-5724Oct 30, 2007
    Omnistar
    Omnistar Live
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via (1) the category_id parameter to users/kb.php, and possibly (3) the Email Box field in profile.php.

  • CVE-2007-5725Oct 30, 2007
    Smart Shop
    Smart Shop
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via (1) the email parameter to index.php; or the command parameter to index.php in (2) the default action for the home page, (3) a currencies action,…

  • CVE-2007-5726Oct 30, 2007
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Stream Control Transmission Protocol (sctp) functionality in Sun Solaris 10, when at least one SCTP socket is in the LISTEN state, allows remote attackers to cause a denial of service (panic) via unspecified vectors related to "INIT processing."

  • CVE-2007-5727Oct 30, 2007
    Oneorzero
    Helpdesk
    risk 0.00cvss —epss 0.02

    Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly other versions, allows remote attackers to conduct cross-site scripting (XSS) attacks and inject arbitrary web script or HTML via XSS sequences…

  • CVE-2007-5728Oct 30, 2007
    Phppgadmin
    Phppgadmin
    risk 0.04cvss —epss 0.15

    Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inject arbitrary web script or HTML via certain input available in PHP_SELF in (1) redirect.php, possibly related to (2) login.php, different vectors than…

  • CVE-2007-4348Oct 30, 2007
    IBM
    Tivoli Storage Manager Client
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote attackers to inject arbitrary web script or HTML via HTTP requests to port 1581, which generate log entries in a dsmerror.log file…

  • CVE-2007-5707Oct 30, 2007
    OpenLDAP
    Openldap
    risk 0.00cvss —epss 0.04

    OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.

  • CVE-2007-5708Oct 30, 2007
    OpenLDAP
    Openldap
    risk 0.00cvss —epss 0.03

    slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service…

  • CVE-2007-5709Oct 30, 2007
    Sony
    Sonicstage Connect Player
    risk 0.04cvss —epss 0.11

    Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code via a long file name in an M3U file.

  • CVE-2007-5710Oct 30, 2007
    WordPress
    WordPress
    risk 0.00cvss —epss 0.07

    Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the posts_columns array parameter.

  • CVE-2007-5711Oct 30, 2007
    Massive Entertainment
    World In Conflict
    risk 0.00cvss —epss 0.02

    Massive Entertainment World in Conflict 1.001 and earlier allows remote attackers to cause a denial of service (failed assertion and daemon crash) via a large packet to TCP or UDP port 48000.

  • CVE-2007-5712Oct 30, 2007
    PyLucid
    PyLucid
    risk 0.00cvss —epss 0.02

    The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP…

  • CVE-2007-5713Oct 30, 2007
    AMX Mod X
    AMX Mod X
    risk 0.00cvss —epss 0.02

    Off-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might allow attackers to execute arbitrary code or cause a denial of service via unspecified input related to geolocation, which triggers an error message from the (1) geoip_code2 or (2)…

  • CVE-2007-5714Oct 30, 2007
    File Project
    MLDonkey
    risk 0.00cvss —epss 0.02

    The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login access and execute arbitrary code.

  • CVE-2007-5715Oct 30, 2007
    Denyhosts
    Denyhosts
    risk 0.00cvss —epss 0.01

    DenyHosts 2.6 processes OpenSSH sshd "not listed in AllowUsers" log messages with an incorrect regular expression that does not match an IP address, which might allow remote attackers to avoid detection and blocking when making invalid login attempts with a username not present…