VYPR

CVEs

383,220 total · page 7136 of 7,665

AllCriticalHighKEV
  • CVE-2007-4485Aug 22, 2007
    Butterfly
    Butterfly
    risk 0.00cvss —epss 0.02

    PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT]…

  • CVE-2007-4486Aug 22, 2007
    Linkliste
    Linkliste
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in index.php in Linkliste 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) styl[top], (2) url_eintrag, or (3) styl[themen] parameter.

  • CVE-2007-4487Aug 22, 2007
    Board Power
    D22-Shoutbox
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in D22-Shoutbox for Invision Power Board (IPB or IP.Board) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2007-4488Aug 22, 2007
    Siemens Foundation
    Gigaset Se361 Wlan Router
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the Siemens Gigaset SE361 WLAN router with firmware 1.00.0 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI immediately following the filename for (1) a GIF filename, which triggers…

  • CVE-2007-4489Aug 22, 2007
    Ecentrex
    Voip Client Module
    risk 0.03cvss —epss 0.05

    Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method.

  • CVE-2007-4490Aug 22, 2007
    Trend Micro
    Serverprotect
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to (1) RPCFN_EVENTBACK_DoHotFix or (2) CMD_CHANGE_AGENT_REGISTER_INFO.

  • CVE-2007-4455Aug 22, 2007
    Asterisk
    Asterisk
    risk 0.00cvss —epss 0.02

    The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk Appliance) 1.x before 1.0.3 allows remote attackers to cause a denial of service (memory exhaustion)…

  • CVE-2007-3618Aug 21, 2007
    EMC Corporation
    Networker
    risk 0.01cvss —epss 0.07

    Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a (1) poll or (2) kill request with a "long invalid subcmd."

  • CVE-2007-4456Aug 21, 2007
    Mambo (software)
    Mambo
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in index.php in the SimpleFAQ (com_simplefaq) 2.11 component for Mambo allows remote attackers to execute arbitrary SQL commands via the aid parameter. NOTE: it was later reported that 2.40 is also affected, and that the component can be used in…

  • CVE-2007-4457Aug 21, 2007
    Dalai
    Forum
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the chemin parameter.

  • CVE-2007-4458Aug 21, 2007
    Firesoft
    Firesoft
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in includes/class/class_tpl.php in Firesoft allows remote attackers to execute arbitrary PHP code via a URL in the cache_file parameter.

  • CVE-2007-4459Aug 21, 2007
    Cisco Systems, Inc.
    IP Phone
    risk 0.04cvss —epss 0.14

    Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or (2) a certain invalid SIP INVITE…

  • CVE-2007-4460Aug 21, 2007
    risk 0.00cvss —epss 0.01

    The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.

  • CVE-2007-4461Aug 21, 2007
    Nufw
    Nufw
    risk 0.00cvss —epss 0.01

    NuFW 2.2.3, and certain other versions after 2.0, allows remote attackers to bypass time-based packet filtering rules via certain "out of period" choices of packet transmission time.

  • CVE-2007-4462Aug 21, 2007
    Mquinson
    Po4a
    risk 0.00cvss —epss 0.00

    lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file.

  • CVE-2007-4463Aug 21, 2007
    Ghisler
    Total Commander
    risk 0.03cvss —epss 0.03

    The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service (unhandled exception) via an invalid RVA address function pointer in (1) an IMAGE_THUNK_DATA structure, involving the (a) OriginalFirstThunk and (b) FirstThunk…

  • CVE-2007-4464Aug 21, 2007
    Ghisler
    Total Commander
    risk 0.00cvss —epss 0.01

    CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGE_EXPORT_DIRECTORY array in a PE file, which could complicate…

  • CVE-2007-4453Aug 21, 2007
    Jelsoft
    Vbulletin
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.8 allow remote attackers to inject arbitrary web code or HTML via the (1) s parameter to index.php, and the (2) q parameter to (a) faq.php, (b) member.php, (c) memberlist.php, (d) calendar.php, (e) search.php,…

  • CVE-2007-4454Aug 21, 2007
    Olate
    Olatedownload
    risk 0.00cvss —epss 0.02

    Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the (1) PDO::ATTR_SERVER_VERSION or (2) PDO::ATTR_CLIENT_VERSION attribute.

  • CVE-2007-4213Aug 21, 2007
    Palm
    OS
    risk 0.00cvss —epss 0.02

    Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows remote attackers to cause a denial of service (device reset or hang) via a flood of large ICMP echo requests. NOTE: this is probably a different vulnerability than CVE-2003-0293.

  • CVE-2007-4216Aug 21, 2007
    Checkpoint
    Zonealarm
    risk 0.00cvss —epss 0.00

    vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in a METHOD_NEITHER (1) IOCTL 0x8400000F or (2) IOCTL 0x84000013 request, which can be used to overwrite arbitrary memory…

  • CVE-2007-4439Aug 21, 2007
    Squirrelcart
    Squirrelcart
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in popup_window.php in Squirrelcart 1.x.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site_isp_root parameter, probably related to cart.php.

  • CVE-2007-4440Aug 21, 2007
    MERCURY
    Mail Transport System
    risk 0.08cvss —epss 0.65

    Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string. NOTE: this might overlap CVE-2006-5961.

  • CVE-2007-4441Aug 21, 2007
    PHP
    PHP
    risk 0.03cvss —epss 0.02

    Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code via a long string in the filename argument to the win_browse_file function.

  • CVE-2007-4442Aug 21, 2007
    Epic Games
    Unreal Engine
    risk 0.03cvss —epss 0.04

    Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service (application crash) via a request for a long .gif filename in the images/ directory, related…

  • CVE-2007-4443Aug 21, 2007
    Epic Games
    Unreal Engine
    risk 0.00cvss —epss 0.02

    The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service (continuous beep and server slowdown) via a string containing many 0x07 characters in (1) a request to the images/ directory, (2) the…

  • CVE-2007-4444Aug 21, 2007
    Rfactor
    Rfactor
    risk 0.04cvss —epss 0.07

    Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID (1) 0x80 or (2) 0x88 to UDP port 34297, related to the buffer containing the server version number.

  • CVE-2007-4445Aug 21, 2007
    Rfactor
    Rfactor
    risk 0.00cvss —epss 0.02

    Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) an ID 0x30 packet, (2) an ID 0x38 packet, and an invalid 13-bit integer in (3) an ID 0x60 packet and (4) an ID 0x68 packet; and a denial of service (UDP port block)…

  • CVE-2007-4446Aug 21, 2007
    Toribash
    Toribash
    risk 0.03cvss —epss 0.04

    Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when entering a game.

  • CVE-2007-4447Aug 21, 2007
    Toribash
    Toribash
    risk 0.00cvss —epss 0.04

    Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application crash) via a long SAY command that omits a required LF…

  • CVE-2007-4448Aug 21, 2007
    Toribash
    Toribash
    risk 0.00cvss —epss 0.02

    The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which allows remote attackers to cause a denial of service (daemon crash) via a GRIP command with the ID of -1.

  • CVE-2007-4449Aug 21, 2007
    Toribash
    Toribash
    risk 0.00cvss —epss 0.02

    The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (application hang) via a command without an LF character, as demonstrated by a SAY command.

  • CVE-2007-4450Aug 21, 2007
    Toribash
    Toribash
    risk 0.00cvss —epss 0.02

    The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as demonstrated by a SAY command. NOTE: the security impact of…

  • CVE-2007-4451Aug 21, 2007
    Toribash
    Toribash
    risk 0.00cvss —epss 0.02

    The server in Toribash 2.71 and earlier on Windows allows remote attackers to cause a denial of service (continuous beep and server hang) via certain commands that contain many 0x07 or other invalid characters.

  • CVE-2007-4452Aug 21, 2007
    Toribash
    Toribash
    risk 0.00cvss —epss 0.02

    The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (disconnection) via a long (1) emote or (2) SPEC command.

  • CVE-2007-4435Aug 20, 2007
    Torrenttrader
    Torrenttrader
    risk 0.00cvss —epss 0.02

    Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) account-inbox.php, (2) account-settings.php, and possibly (3) backend/functions.php.

  • CVE-2007-4436Aug 20, 2007
    Drupal
    Project
    risk 0.00cvss —epss 0.01

    The Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking module before 5.x-1.0, 4.7.x-2.4, and 4.7.x-1.4 do not properly enforce permissions, which allows remote attackers to (1) obtain sensitive via the Tracker Module and the Recent posts…

  • CVE-2007-4437Aug 20, 2007
    Ampache
    Ampache
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information.

  • CVE-2007-4438Aug 20, 2007
    Ampache
    Ampache
    risk 0.00cvss —epss 0.01

    Session fixation vulnerability in Ampache before 3.3.3.5 allows remote attackers to hijack web sessions via unspecified vectors.

  • CVE-2007-4427Aug 20, 2007
    Intersystems
    Cache Database
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a server, related to encoding of certain parameter values by…

  • CVE-2007-4428Aug 20, 2007
    Lhaz
    Lhaz
    risk 0.00cvss —epss 0.03

    Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116.

  • CVE-2007-4429Aug 20, 2007
    Skype Technologies
    Skype
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long URIs, as claimed to be actively exploited on 20070817 using a "call to a specific number." NOTE: this identifier is for the…

  • CVE-2007-4430Aug 20, 2007
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.13

    Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are…

  • CVE-2007-4431Aug 20, 2007
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to external domains, via a certain body.innerHTML property value, aka "classic JavaScript frame hijacking."

  • CVE-2007-4432Aug 20, 2007
    Novell
    Suse Linux
    risk 0.00cvss —epss 0.00

    Untrusted search path vulnerability in the wrapper scripts for the (1) rug, (2) zen-updater, (3) zen-installer, and (4) zen-remover programs on SUSE Linux 10.1 and Enterprise 10 allows local users to gain privileges via modified (a) LD_LIBRARY_PATH and (b) MONO_GAC_PREFIX…

  • CVE-2007-4433Aug 20, 2007
    ASP.NET
    Text File Search ASP.NET edition
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in textfilesearch.aspx in the Text File Search ASP.NET edition allows remote attackers to inject arbitrary web script or HTML via the search field.

  • CVE-2007-4434Aug 20, 2007
    Text File Search ASP
    Text File Search ASP (Classic) edition
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in textfilesearch.asp in the Text File Search ASP (Classic) edition allows remote attackers to inject arbitrary web script or HTML via the query parameter.

  • CVE-2007-0437Aug 20, 2007
    Intersystems
    Cache Database
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the sample Cache' Server Page (CSP) scripts in InterSystems Cache' allow remote attackers to inject arbitrary web script or HTML via (1) the TO parameter to loop.csp, (2) the VALUE parameter to cookie.csp, and (3) the PAGE…

  • CVE-2007-4425Aug 20, 2007
    Live For Speed
    Live For Speed
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in Live for Speed (LFS) demo, S1, and S2 allow remote authenticated users to (1) cause a denial of service (server crash) and probably execute arbitrary code via an ID 3 packet with a long nickname field, and (2) cause a denial of service (server crash)…

  • CVE-2007-4426Aug 20, 2007
    Live For Speed
    Live For Speed
    risk 0.00cvss —epss 0.03

    Live for Speed (LFS) S1 and S2 allows remote attackers to cause a denial of service (server crash) via (1) a certain 0x00 byte in a pre-login ID 3 packet, which triggers a NULL dereference; or (2) a pre-login ID 5 packet that lacks certain strings, which triggers an invalid…