VYPR

CVEs

382,492 total · page 7171 of 7,650

AllCriticalHighKEV
  • CVE-2007-1992Apr 12, 2007
    Mambo (software)
    com_zoom
    risk 0.03cvss —epss 0.06

    Multiple PHP remote file inclusion vulnerabilities in the com_zoom 2.5 beta 2 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) EXIF_Makernote.php or (2) EXIF.php in classes/iptc/.

  • CVE-2007-1993Apr 12, 2007
    Microfocus
    Hpux
    risk 0.01cvss —epss 0.08

    Buffer overflow in the pfs_mountd.rpc RPC daemon in the Portable File System (PFS) in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to procedure 5, followed by a crafted payload to procedure 2."

  • CVE-2007-1994Apr 12, 2007
    Microfocus
    Hpux
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown vectors. NOTE: due to lack of vendor details, it is not clear whether this is the same as…

  • CVE-2007-1995Apr 12, 2007
    Quagga (software)
    Quagga
    risk 0.00cvss —epss 0.02

    bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages…

  • CVE-2007-1996Apr 12, 2007
    Codebreak
    Codebreak
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in codebreak.php in CodeBreak, probably 1.1.2 and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the process_method parameter.

  • CVE-2007-1979Apr 12, 2007
    XOOPS
    Xoops Popnupblog
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the get_blogid_from_postid function in class/PopnupBlogUtils.php. NOTE: later…

  • CVE-2007-1980Apr 12, 2007
    PHP-Fusion
    Topliste
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter.

  • CVE-2007-1981Apr 12, 2007
    Metamod P
    Metamod P
    risk 0.00cvss —epss 0.02

    The safevoid_vsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service (daemon crash) via a long meta list command.

  • CVE-2007-1982Apr 12, 2007
    Really Simple PHP And Ajax
    Really Simple PHP And Ajax
    risk 0.04cvss —epss 0.10

    Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) __IncludeFilePHPClass, (2) __ClassPath, and (3) __class parameters to (a)…

  • CVE-2007-1983Apr 12, 2007
    Cyboards
    PHP Lite
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in include/default_header.php in Cyboards PHP Lite 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the script_path parameter, a different vector than CVE-2006-2871.

  • CVE-2007-1984Apr 12, 2007
    Lite CMS
    Lite CMS
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in index.php in lite-cms 0.2.1 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter.

  • CVE-2007-1985Apr 12, 2007
    Phpexplorator
    Phpexplorator
    risk 0.00cvss —epss 0.01

    Multiple PHP remote file inclusion vulnerabilities in phpexplorator.php in phpexplorator 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) cmd or (2) lang_path parameter.

  • CVE-2007-1986Apr 12, 2007
    Aroundme
    Aroundme
    risk 0.03cvss —epss 0.04

    Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_path_core parameter to inc/core_profile.header.php, the (2) template_path_core parameter to…

  • CVE-2007-1987Apr 12, 2007
    Phpecho CMS
    CMS
    risk 0.00cvss —epss 0.01

    Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _plugin_file parameter to smarty/internals/core.load_pulgins.php or the (2) root_path parameter to index.php. NOTE: CVE disputes (1)…

  • CVE-2007-1988Apr 12, 2007
    Phpecho CMS
    CMS
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in kernel/filters.inc.php in PHPEcho CMS 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

  • CVE-2007-1974Apr 12, 2007
    XOOPS
    Zmagazine Module
    risk 0.03cvss —epss 0.06

    SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modules such as (1) Zmagazine 1.0, (2) Happy Linux XFsection 1.07 and earlier, and possibly other modules, allows remote attackers to execute…

  • CVE-2007-1975Apr 12, 2007
    Slaed
    Slaed CMS
    risk 0.00cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in SLAED CMS 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) path parameter to admin/admin.php or the (2) modpath parameter to index.php.

  • CVE-2007-1976Apr 12, 2007
    XOOPS
    Virii Info
    risk 0.00cvss —epss 0.02

    PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating…

  • CVE-2007-1977Apr 12, 2007
    Hola
    Holacms
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index_cms.php in holaCMS 1.4.10 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter.

  • CVE-2007-1978Apr 12, 2007
    Gamespy
    Arcade
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view_game_list action.

  • CVE-2007-1973Apr 11, 2007
    Microsoft
    Windows Nt
    risk 0.00cvss —epss 0.01

    Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206.

  • CVE-2007-1279Apr 11, 2007
    Adobe Inc.
    Bridge
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the installer for Adobe Bridge 1.0.3 update for Apple OS X, when patching with desktop management tools, allows local users to gain privileges via unspecified vectors during installation of the update by a different user who has administrative…

  • CVE-2007-1363Apr 11, 2007
    Dropafew
    Dropafew
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the delete action in (a) search.php or (b) search-pda.php, or the (2) calories parameter in a save action in editlogcal.php.

  • CVE-2007-1364Apr 11, 2007
    Dropafew
    Dropafew
    risk 0.03cvss —epss 0.02

    DropAFew before 0.2.1 does not require authorization for certain privileged actions, which allows remote attackers to (1) view the logged calorie information of arbitrary users via the id parameter in editlogcal.php, (2) add arbitrary links via links.php, or (3) create arbitrary…

  • CVE-2007-1559Apr 11, 2007
    Roxio
    Cineplayer
    risk 0.06cvss —epss 0.32

    Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified long property values to SonicMediaPlayer.dll or (2) long arguments to unspecified methods in SonicMediaPlayer.dll.

  • CVE-2007-1874Apr 11, 2007
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.01

    Adobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and directories, which allows local users to execute arbitrary code or obtain sensitive information via the (1) CFMX7DreamWeaverExtensions.mxp, (2) CFReportBuilderInstaller.exe, (3)…

  • CVE-2007-1958Apr 11, 2007
    Tinymux
    Tinymux
    risk 0.00cvss —epss 0.01

    Buffer overflow in TinyMUX before 2.4 allows attackers to cause a denial of service via unspecified vectors related to "too many substring matches in a regexp $-command." NOTE: some of these details are obtained from third party information.

  • CVE-2007-1959Apr 11, 2007
    Tinymux
    Tinymux
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the process_cmdent function in command.cpp in TinyMUX before 2.4 has unknown impact and attack vectors, related to lack of the "'other half' of buffer overflow protection."

  • CVE-2007-1960Apr 11, 2007
    XOOPS
    rha7downloads
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter.

  • CVE-2007-1961Apr 11, 2007
    PhpBB
    Mutant
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in mutant_functions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2007-1962Apr 11, 2007
    XOOPS
    Wf Snippets
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action.

  • CVE-2007-1963Apr 11, 2007
    MyBB
    Mybb
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, as utilized by index.php, a related issue to CVE-2006-3775.

  • CVE-2007-1964Apr 11, 2007
    MyBB
    Mybb
    risk 0.00cvss —epss 0.01

    member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any account by providing the account's registered e-mail address in a debug request for a do_lostpw action, which prints the change password…

  • CVE-2007-1965Apr 11, 2007
    Siteserver
    CMS
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the set_lang parameter to (1) archive.php, (2) article.php, (3) index.php, or (4) topics.php.

  • CVE-2007-1966CriApr 11, 2007
    Siteserver
    CMS
    risk 0.59cvss 9.1epss 0.01

    Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie.

  • CVE-2007-1967Apr 11, 2007
    Stat12
    Stat12
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in index.php in stat12 allows remote attackers to execute arbitrary PHP code via a URL in the langpath parameter. NOTE: this issue was published by an unreliable researcher, and there is little information to determine which product is…

  • CVE-2007-1968Apr 11, 2007
    Myblog
    Myblog
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter.

  • CVE-2007-1969Apr 11, 2007
    Myblog
    Myblog
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers to inject arbitrary web script or HTML via the id parameter.

  • CVE-2007-1970Apr 11, 2007
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.

  • CVE-2007-1971Apr 11, 2007
    Gazi Okul Sitesi
    Gazi Okul Sitesi
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in fotokategori.asp in Gazi Okul Sitesi 2007 allows remote attackers to execute arbitrary SQL commands via the query string.

  • CVE-2007-1940Apr 11, 2007
    IBM
    Tivoli Business Service Manager
    risk 0.00cvss —epss 0.00

    IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log.

  • CVE-2007-1941Apr 11, 2007
    IBM
    Lotus Notes
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via a multipart/related e-mail message, a different…

  • CVE-2007-1942Apr 11, 2007
    Faststone
    Image Viewer
    risk 0.04cvss —epss 0.09

    Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image, as demonstrated by wh3intof.bmp and wh4intof.bmp.

  • CVE-2007-1943Apr 11, 2007
    Acdsee
    Photo Manager
    risk 0.04cvss —epss 0.09

    Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp.

  • CVE-2007-1944Apr 11, 2007
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    The Java Message Service (JMS) in IBM WebSphere Application Server (WAS) before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release [of] a bytebuffer input stream," possibly a double free vulnerability.

  • CVE-2007-1945Apr 11, 2007
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) before 6.1.0.7 has unknown impact and attack vectors.

  • CVE-2007-1946Apr 11, 2007
    Microsoft
    Windows Xp
    risk 0.02cvss —epss 0.26

    Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp.

  • CVE-2007-1947Apr 11, 2007
    Parakey Inc.
    Firebug
    risk 0.03cvss —epss 0.04

    Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug extension before 1.04 for Mozilla Firefox allows remote attackers to bypass zone restrictions, read arbitrary file:// URIs, or execute arbitrary code in the…

  • CVE-2007-1948Apr 11, 2007
    IrfanView
    Irfanview
    risk 0.04cvss —epss 0.08

    Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the (1) xoffset or (2) yoffset RLE command, or (3) large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and…

  • CVE-2007-1949Apr 11, 2007
    Webblizzard
    CMS
    risk 0.00cvss —epss 0.01

    Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.