VYPR

CVEs

382,304 total · page 7191 of 7,647

AllCriticalHighKEV
  • CVE-2007-0906Feb 13, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.06

    Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8)…

  • CVE-2007-0907Feb 13, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.02

    Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.

  • CVE-2007-0908Feb 13, 2007
    PHP
    PHP
    risk 0.04cvss —epss 0.12

    The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with…

  • CVE-2007-0909Feb 13, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.03

    Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.

  • CVE-2007-0910Feb 13, 2007
    PHP
    PHP
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.

  • CVE-2007-0911Feb 13, 2007
    PHP
    PHP
    risk 0.03cvss —epss 0.05

    Off-by-one error in the str_ireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of service (crash).

  • CVE-2007-0912Feb 13, 2007
    Jportal
    Jportal
    risk 0.00cvss —epss 0.02

    Cross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php in Jportal 2.3.1, and possibly earlier, allows remote attackers to perform privileged actions as administrators by tricking the admin into accessing a URL with modified arguments to admin/admin.adm.php.

  • CVE-2006-4697Feb 13, 2007
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.31

    Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might be related to CVE-2006-4193.

  • CVE-2007-0217Feb 13, 2007
    Microsoft
    Internet Explorer
    risk 0.08cvss —epss 0.58

    The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP server response of a specific length that causes a terminating null byte to be written outside of a buffer, which causes heap corruption.

  • CVE-2007-0208Feb 13, 2007
    Microsoft
    Word
    risk 0.02cvss —epss 0.30

    Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code.

  • CVE-2007-0209Feb 13, 2007
    Microsoft
    Office
    risk 0.02cvss —epss 0.29

    Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a Word file with a malformed drawing object, which leads to memory corruption.

  • CVE-2006-1311Feb 13, 2007
    Microsoft
    Windows 2000
    risk 0.03cvss —epss 0.31

    The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed…

  • CVE-2006-3448Feb 13, 2007
    Microsoft
    Windows
    risk 0.03cvss —epss 0.37

    Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files (cbo, cbl, or .cbm), a different issue…

  • CVE-2006-5270Feb 13, 2007
    Microsoft
    Antigen
    risk 0.02cvss —epss 0.30

    Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file.

  • CVE-2007-0025Feb 13, 2007
    Microsoft
    Visual Studio .net
    risk 0.03cvss —epss 0.37

    The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this…

  • CVE-2007-0026Feb 13, 2007
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.25

    The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption.

  • CVE-2007-0210Feb 13, 2007
    Microsoft
    Windows Xp
    risk 0.00cvss —epss 0.02

    The Window Image Acquisition (WIA) Service in Microsoft Windows XP SP2 allows local users to gain privileges via unspecified vectors involving an "unchecked buffer," probably a buffer overflow.

  • CVE-2007-0211Feb 13, 2007
    Microsoft
    Windows Xp
    risk 0.00cvss —epss 0.03

    The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."

  • CVE-2007-0214Feb 13, 2007
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.27

    The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uninitialized parameters.

  • CVE-2007-0900Feb 13, 2007
    Tagit
    Tagboard
    risk 0.04cvss —epss 0.10

    Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) configpath parameter to (a) tagviewer.php, (b) tag_process.php, and (c)…

  • CVE-2007-0901Feb 13, 2007
    Moinmo
    Moinmoin
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is…

  • CVE-2007-0902Feb 13, 2007
    Moinmo
    Moinmoin
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2007-0903Feb 13, 2007
    Process One
    Ejabberd
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the mod_roster_odbc module in ejabberd before 1.1.3 has unknown impact and attack vectors.

  • CVE-2007-0904Feb 13, 2007
    Lightro
    CMS
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter to index.php.

  • CVE-2007-0842Feb 13, 2007
    Microsoft
    Visual C\+\+
    risk 0.00cvss —epss 0.06

    The 64-bit versions of Microsoft Visual C++ 8.0 standard library (MSVCR80.DLL) time functions, including (1) localtime, (2) localtime_s, (3) gmtime, (4) gmtime_s, (5) ctime, (6) ctime_s, (7) wctime, (8) wctime_s, and (9) fstat, trigger an assertion error instead of a NULL…

  • CVE-2007-0896Feb 13, 2007
    Sage
    Sage
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or HTML via a "<SCRIPT/=''SRC='" sequence in an RSS feed, a different vulnerability than CVE-2006-4712.

  • CVE-2007-0895Feb 13, 2007
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20070208 allows local users to delete files and directories as the user running rm by moving a low-level directory to a higher level as it is being deleted, which…

  • CVE-2006-7003Feb 12, 2007
    Fusion Polls
    Fusion Polls
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in admin/index.php in Fusion Polls allows remote attackers to execute arbitrary PHP code via a URL in the xtrphome parameter.

  • CVE-2006-7004Feb 12, 2007
    PHP Script Tools
    Psy Auction
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in email_request.php in PSY Auction allows remote attackers to inject arbitrary web script or HTML via the user_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2006-7005Feb 12, 2007
    PHP Script Tools
    Psy Auction
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2006-7006Feb 12, 2007
    Robin De Graff
    Somery
    risk 0.00cvss —epss 0.02

    PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in…

  • CVE-2006-7007Feb 12, 2007
    H. Nomura
    Tiny Ftpd
    risk 0.03cvss —epss 0.04

    Buffer overflow in Tiny FTPd 1.4 and earlier allows remote attackers to cause a denial of service (daemon crash) via a long USER command, a different vector than CVE-2000-0133.

  • CVE-2006-7008Feb 12, 2007
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Joomla! before 1.0.10 has unknown impact and attack vectors, related to "securing mosmsg from misuse." NOTE: it is possible that this issue overlaps CVE-2006-1029.

  • CVE-2006-7009Feb 12, 2007
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    Joomla! before 1.0.10 allows remote attackers to spoof the frontend submission forms, which has unknown impact and attack vectors.

  • CVE-2006-7010Feb 12, 2007
    Joomla
    Joomla!
    risk 0.00cvss —epss 0.01

    The mosgetparam implementation in Joomla! before 1.0.10, does not set a variable's data type to integer when the variable's default value is numeric, which has unspecified impact and attack vectors, which may permit SQL injection attacks.

  • CVE-2007-0886Feb 12, 2007
    Gecad Technologies
    Mail Server
    risk 0.04cvss —epss 0.09

    Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via certain base64-encoded data on the pop3 port (110/tcp), which triggers an integer overflow.

  • CVE-2007-0887Feb 12, 2007
    Gecad Technologies
    Axigen
    risk 0.04cvss —epss 0.10

    axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a base64-encoded "*\x00" sequence on the imap port (143/tcp).

  • CVE-2007-0888Feb 12, 2007
    Kiwi Enterprises
    Kiwi Cattools
    risk 0.03cvss —epss 0.05

    Directory traversal vulnerability in the TFTP server in Kiwi CatTools before 3.2.0 beta allows remote attackers to read arbitrary files, and upload files to arbitrary locations, via ..// (dot dot) sequences in the pathname argument to an FTP (1) GET or (2) PUT command.

  • CVE-2007-0889Feb 12, 2007
    Kiwi CatTools
    Kiwi CatTools
    risk 0.00cvss —epss 0.00

    Kiwi CatTools before 3.2.0 beta uses weak encryption ("reversible encoding") for passwords, account names, and IP addresses in kiwidb-cattools.kdb, which might allow local users to gain sensitive information by decrypting the file. NOTE: this issue could be leveraged with a…

  • CVE-2007-0890Feb 12, 2007
    CPanel
    Webhost Manager
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the password parameter.

  • CVE-2007-0891Feb 12, 2007
    Phpmyvisites
    Phpmyvisites
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the GetCurrentCompletePath function in phpmyvisites.php in phpMyVisites before 2.2 allows remote attackers to inject arbitrary web script or HTML via the query string.

  • CVE-2007-0892Feb 12, 2007
    Phpmyvisites
    Phpmyvisites
    risk 0.00cvss —epss 0.01

    CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the url parameter, when the pagename parameter begins with "FILE:".

  • CVE-2007-0893Feb 12, 2007
    Phpmyvisites
    Phpmyvisites
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in phpMyVisites before 2.2 allows remote attackers to include arbitrary files via leading ".." sequences on the pmv_ck_view COOKIE parameter, which bypasses the protection scheme.

  • CVE-2007-0894Feb 12, 2007
    MediaWiki
    Mediawiki
    risk 0.00cvss —epss 0.02

    MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct request to (1) Simple.deps.php, (2) MonoBook.deps.php, (3) MySkin.deps.php, or (4) Chick.deps.php in wiki/skins, which shows the installation path in the resulting error message.

  • CVE-2007-0770Feb 12, 2007
    ImageMagick
    Imagemagick
    risk 0.00cvss —epss 0.05

    Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c. NOTE: this issue is due to an…

  • CVE-2007-0878Feb 12, 2007
    Microsoft
    Windows Mobile
    risk 0.02cvss —epss 0.20

    Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service (loss of browser and other device functionality) via a malformed WML page, related to an "overflow state." NOTE: it is possible that this issue is…

  • CVE-2007-0879Feb 12, 2007
    Smidgeonsoft
    Pebrowse
    risk 0.00cvss —epss 0.04

    Buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 allows user-assisted remote attackers to execute arbitrary code via certain executable files in PE format. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…

  • CVE-2007-0880Feb 12, 2007
    Capital Request Forms
    Capital Request Forms
    risk 0.00cvss —epss 0.01

    Capital Request Forms stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for inc/common_db.inc.

  • CVE-2007-0881Feb 12, 2007
    Openi CMS Group
    Seitenschutz
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the (1) config[oi_dir] and possibly (2) config[openi_dir] parameters to open-admin/plugins/site_protection/index.php. NOTE:…

  • CVE-2007-0882Feb 12, 2007
    Sun Corporation
    Sunos
    risk 0.11cvss —epss 0.98

    Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts,…