VYPR

CVEs

382,483 total · page 7172 of 7,650

AllCriticalHighKEV
  • CVE-2007-1904Apr 10, 2007
    AOL
    Instant Messenger
    risk 0.00cvss —epss 0.04

    Directory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. (dot dot) in a filename in a file transfer operation.

  • CVE-2007-1905Apr 10, 2007
    Pineapple Technologies
    Quizshock
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in auth.php in Pineapple Technologies QuizShock 1.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via encoded special characters in the forward_to parameter, as demonstrated using "<"<".

  • CVE-2007-1906Apr 10, 2007
    Ecardmax.com
    Hot Editor
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor (Hot Editor) 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the first parameter.

  • CVE-2007-1907Apr 10, 2007
    Pathos
    Content Management System
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in warn.php in Pathos Content Management System (CMS) 0.92-2 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.

  • CVE-2007-1908Apr 10, 2007
    Icona
    Instant Messenger
    risk 0.03cvss —epss 0.03

    PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the php121dir parameter, which is accessed by the file_exists function.

  • CVE-2007-1909Apr 10, 2007
    Haudenschilt
    Battlenet Clan Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in login.php in Ryan Haudenschilt Battle.net Clan Script for PHP 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass parameter.

  • CVE-2007-1910Apr 10, 2007
    Microsoft
    Word
    risk 0.05cvss —epss 0.25

    Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc.

  • CVE-2007-1911Apr 10, 2007
    Microsoft
    Word
    risk 0.04cvss —epss 0.12

    Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU consumption) via crafted documents, as demonstrated by (1) file798-1.doc and (2) file613-1.doc, possibly related to a buffer overflow.

  • CVE-2007-1912Apr 10, 2007
    Microsoft
    Windows
    risk 0.04cvss —epss 0.11

    Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a crafted .HLP file.

  • CVE-2007-1913Apr 10, 2007
    SAP
    Rfc Library
    risk 0.00cvss —epss 0.02

    The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to verify the existence of users and groups on systems and domains via unspecified vectors, a different vulnerability than CVE-2006-6010. NOTE: This information is…

  • CVE-2007-1914Apr 10, 2007
    SAP
    Rfc Library
    risk 0.00cvss —epss 0.02

    The RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to obtain sensitive information (external RFC server configuration data) via unspecified vectors, a different vulnerability than CVE-2006-6010. NOTE: This information is…

  • CVE-2007-1915Apr 10, 2007
    SAP
    Rfc Library
    risk 0.00cvss —epss 0.04

    Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the…

  • CVE-2007-1916Apr 10, 2007
    SAP
    Rfc Library
    risk 0.01cvss —epss 0.07

    Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace…

  • CVE-2007-1917Apr 10, 2007
    SAP
    Rfc Library
    risk 0.01cvss —epss 0.07

    Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after…

  • CVE-2007-1918Apr 10, 2007
    SAP
    Rfc Library
    risk 0.00cvss —epss 0.03

    The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows remote attackers to cause a denial of service (client lockout) via unspecified vectors. NOTE: This information…

  • CVE-2007-1919Apr 10, 2007
    Arizona Dream
    Livre D Or Livor
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php in Arizona Dream Livre d'or (livor) 2.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

  • CVE-2007-1920Apr 10, 2007
    Smodbip
    Smodbip
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php.

  • CVE-2007-1921Apr 10, 2007
    Nullsoft
    Winamp
    risk 0.00cvss —epss 0.05

    LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote attackers to execute arbitrary code via a crafted .MAT file that contains a value that is used as an offset, which triggers memory corruption.

  • CVE-2007-1922Apr 10, 2007
    Nullsoft
    Winamp
    risk 0.00cvss —epss 0.05

    The Impulse Tracker (IT) and ScreamTracker 3 (S3M) modules in IN_MOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted (1) .IT or (2) .S3M file containing integer values that are used as memory offsets, which triggers memory…

  • CVE-2007-1923Apr 10, 2007
    Ledgersmb
    Ledgersmb
    risk 0.00cvss —epss 0.03

    (1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.

  • CVE-2007-1924Apr 10, 2007
    Phpcontact
    Phpcontact
    risk 0.00cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in phpContact allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) contact_business.php or (2) contact_person.php. NOTE: this issue is disputed by CVE and a reliable third party,…

  • CVE-2007-1925Apr 10, 2007
    Tru Zone
    Nukeet
    risk 0.00cvss —epss 0.01

    The borrado function in modules/Your_Account/index.php in Tru-Zone Nuke ET 3.4 before fix 7 does not verify that account deletion requests come from the account owner, which allows remote authenticated users to delete arbitrary accounts via a modified cookie.

  • CVE-2007-1926Apr 10, 2007
    Directadmin
    Directadmin
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via (1) http or (2) ftp requests logged in /var/log/directadmin/security.log;…

  • CVE-2007-1927Apr 10, 2007
    CmailServer
    WebMail
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the POP3Mail parameter.

  • CVE-2007-1928Apr 10, 2007
    Witshare
    Witshare
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in index.php in witshare 0.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the menu parameter.

  • CVE-2007-1929Apr 10, 2007
    Gna
    Beryo
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in downloadpic.php in Beryo 2.0, and possibly other versions including 2.4, allows remote attackers to read arbitrary files via a .. (dot dot) in the chemin parameter.

  • CVE-2007-1930Apr 10, 2007
    Cattadoc
    Cattadoc
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in download2.php in cattaDoc 2.21, and possibly other versions including 3.0, allows remote attackers to read arbitrary files via a .. (dot dot) in the fn1 parameter.

  • CVE-2007-1931Apr 10, 2007
    Smodcms
    Smodcms
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ssid parameter.

  • CVE-2007-1932Apr 10, 2007
    Scar4u
    Scarnews
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in scarnews.inc.php in ScarNews 1.2.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sn_admin_dir parameter.

  • CVE-2007-1933Apr 10, 2007
    Dreamcodes
    Pcp Guestbook
    risk 0.04cvss —epss 0.06

    Multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to (1) index.php, (2) gb.php, or (3) faq.php.

  • CVE-2007-1934Apr 10, 2007
    PHP-Nuke
    eBoard
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[name] parameter.

  • CVE-2007-1935Apr 10, 2007
    ScarAdControl
    ScarAdControl
    risk 0.00cvss —epss 0.01

    PHP file inclusion vulnerability in admin/index.php in ScarAdControl (ScarAdController) 1.1 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the site parameter, which is accessed by the file_exists function.

  • CVE-2007-1936Apr 10, 2007
    ScarAdControl
    ScarAdControl
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in scaradcontrol.php in ScarAdControl (ScarAdController) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sac_config_dir parameter.

  • CVE-2007-1937Apr 10, 2007
    Dreamcodes
    Scorp Book
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter.

  • CVE-2007-1938Apr 10, 2007
    Justsystems
    Ichitaro
    risk 0.00cvss —epss 0.01

    Ichitaro 2005 through 2007, and possibly related products, allows remote attackers to have an unknown impact via unspecified vectors in a document distributed through e-mail or a web site, possibly due to a buffer overflow or cross-site scripting (XSS).

  • CVE-2007-1939Apr 10, 2007
    Daniel Naber
    Languagetool
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the embedded webserver in Daniel Naber LanguageTool before 0.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message, possibly the demultiplex method in HTTPServer.java.

  • CVE-2006-7192Apr 10, 2007
    Microsoft
    .net Framework
    risk 0.02cvss —epss 0.23

    Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass request filtering and conduct cross-site scripting (XSS) attacks, or cause a denial of service, as demonstrated via an xss:expression STYLE…

  • CVE-2007-0734Apr 10, 2007
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list…

  • CVE-2007-1841Apr 10, 2007
    Ipsec Tools
    racoon
    risk 0.00cvss —epss 0.03

    The isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service (tunnel crash) via crafted (1) DELETE (ISAKMP_NPTYPE_D) and (2) NOTIFY (ISAKMP_NPTYPE_N) messages.

  • CVE-2007-0938Apr 10, 2007
    Microsoft
    Content Management Server
    risk 0.04cvss —epss 0.46

    Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."

  • CVE-2007-0939Apr 10, 2007
    Microsoft
    Content Management Server
    risk 0.01cvss —epss 0.16

    Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing…

  • CVE-2007-1204Apr 10, 2007
    Microsoft
    Windows Xp
    risk 0.01cvss —epss 0.09

    Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption.

  • CVE-2007-1205Apr 10, 2007
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.31

    Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption.

  • CVE-2007-1206Apr 10, 2007
    Microsoft
    Windows
    risk 0.00cvss —epss 0.03

    The Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions (PAGE_READWRITE) for a physical memory view, which allows local users to gain…

  • CVE-2007-1209Apr 10, 2007
    Microsoft
    Windows
    risk 0.00cvss —epss 0.03

    Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort…

  • CVE-2006-4250Apr 10, 2007
    Debian
    linux
    risk 0.03cvss —epss 0.01

    Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag.

  • CVE-2007-1687Apr 10, 2007
    Internet Pictures Corporation
    Ipix Image Well
    risk 0.04cvss —epss 0.11

    Multiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control (iPIX-ImageWell-ipix.dll) allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2007-1900Apr 10, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.03

    CRLF injection vulnerability in the FILTER_VALIDATE_EMAIL filter in ext/filter in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to inject arbitrary e-mail headers via an e-mail address with a '\n' character, which causes a regular expression to ignore the subsequent…

  • CVE-2007-1893Apr 9, 2007
    WordPress
    WordPress
    risk 0.00cvss —epss 0.01

    xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publish_posts functionality, which can be used to "publish a previously saved post."

  • CVE-2007-1894Apr 9, 2007
    WordPress
    WordPress
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in wp-includes/general-template.php in WordPress before 20070309 allows remote attackers to inject arbitrary web script or HTML via the year parameter in the wp_title function.