VYPR

CVEs

380,272 total · page 7275 of 7,606

AllCriticalHighKEV
  • CVE-2006-1377Mar 24, 2006
    Easymoblog
    Easymoblog
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter.

  • CVE-2006-1378Mar 24, 2006
    Counterpane
    Passwordsafe
    risk 0.00cvss —epss 0.00

    PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C++ rand function) during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible…

  • CVE-2006-0323Mar 23, 2006
    RealNetworks
    Realplayer
    risk 0.04cvss —epss 0.17

    Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the…

  • CVE-2006-1365Mar 23, 2006
    Motorola
    E398
    risk 0.00cvss —epss 0.01

    The Motorola PEBL U6, the Motorola V600, and possibly the Motorola E398 and other Motorola phones allow remote attackers to add an entry for their own Bluetooth device to a target device's list of trusted devices (aka Device History), and possibly obtain AT level access to the…

  • CVE-2006-1366Mar 23, 2006
    Motorola
    Pebl U6
    risk 0.00cvss —epss 0.05

    Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones, allows remote attackers to cause a denial of service (device shutdown), and possibly execute arbitrary code, via a long OBEX setpath to the OBEX File Transfer (aka FTP) service on…

  • CVE-2006-1367Mar 23, 2006
    Motorola
    Pebl U6
    risk 0.03cvss —epss 0.03

    The Motorola PEBL U6 08.83.76R, the Motorola V600, and possibly the Motorola E398 and other Motorola P2K-based phones does not require pairing for a connection related to the Headset Audio Gateway service, which allows user-assisted remote attackers to obtain AT level access and…

  • CVE-2006-1368Mar 23, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.06

    Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (kmalloc'd memory corruption) via a remote NDIS response to OID_GEN_SUPPORTED_LIST, which causes memory to be allocated for the reply…

  • CVE-2006-1369Mar 23, 2006
    Invision Power Services
    Power Board
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message (PM) in certain circumstances.

  • CVE-2006-1370Mar 23, 2006
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise before 20060322 allows remote attackers to have an unknown impact via a malicious Mimio boardCast (mbc)…

  • CVE-2006-1371Mar 23, 2006
    Xhp
    CMS
    risk 0.04cvss —epss 0.10

    Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea FileManager plugin to upload and execute arbitrary PHP files using (1) manager.php, (2) standalonemanager.php, and (3) images.php.

  • CVE-2006-1283Mar 23, 2006
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain…

  • CVE-2006-0050Mar 23, 2006
    Debian
    snmptrapfmt
    risk 0.00cvss —epss 0.00

    snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file.

  • CVE-2006-0905Mar 23, 2006
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.02

    A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture…

  • CVE-2006-0997Mar 23, 2006
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.

  • CVE-2006-0998Mar 23, 2006
    Novell
    Netware
    risk 0.00cvss —epss 0.03

    The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.

  • CVE-2006-0999Mar 23, 2006
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt…

  • CVE-2006-1360Mar 23, 2006
    Musicbox
    Musicbox
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) type, or (3) show parameter to (a) index.php; or the (4) message1 or (5) message parameter to (b) cart.php.

  • CVE-2006-1361Mar 23, 2006
    Oswiki
    Oswiki
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml.

  • CVE-2006-1362Mar 23, 2006
    Mini Nuke
    CMS System
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter in (a) members.asp, the (2) catid parameter in (b) articles.asp and (c) programs.asp, and the (3) id parameter in…

  • CVE-2006-1363Mar 23, 2006
    Justin White
    Freewps
    risk 0.03cvss —epss 0.03

    images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file.

  • CVE-2006-1364HigMar 23, 2006
    Microsoft
    Asp.net
    risk 0.56cvss 7.5epss 0.59

    Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several…

  • CVE-2006-1359Mar 23, 2006
    Microsoft
    Internet Explorer
    risk 0.08cvss —epss 0.68

    Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.

  • CVE-2006-0038Mar 22, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.

  • CVE-2006-0058Mar 22, 2006
    Sendmail, Inc.
    Sendmail
    risk 0.05cvss —epss 0.29

    Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.

  • CVE-2006-1353Mar 22, 2006
    Aspapps
    Aspportal
    risk 0.03cvss —epss 0.04

    Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the downloadid parameter in download_click.asp and (2) content_ID parameter in news/News_Item.asp; authenticated administrators can also conduct…

  • CVE-2006-1354Mar 22, 2006
    FreeRADIUS
    Freeradius
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module.

  • CVE-2006-1355Mar 22, 2006
    Avast\!
    Antivirus
    risk 0.00cvss —epss 0.00

    avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.

  • CVE-2006-1356Mar 22, 2006
    Andrew Hsu
    Libvc
    risk 0.03cvss —epss 0.04

    Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file (e.g. contacts.vcf) containing a long line.

  • CVE-2006-1357Mar 22, 2006
    F5, Inc.
    FirePass 4100
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter.

  • CVE-2006-1358Mar 22, 2006
    Bea
    WebLogic Portal
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.

  • CVE-2006-1344Mar 22, 2006
    Verisign
    Mpki
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTML_FILE parameter.

  • CVE-2006-1345Mar 22, 2006
    MyBB
    Mybb
    risk 0.00cvss —epss 0.01

    polls.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to obtain sensitive information via a vote action with an "option[]=null" parameter value, which reveals the path in an error message.

  • CVE-2006-1346Mar 22, 2006
    Greg Neustaetter
    Gcards
    risk 0.04cvss —epss 0.07

    Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a lang[*][file] parameter, as demonstrated by injecting PHP sequences into…

  • CVE-2006-1347Mar 22, 2006
    Greg Neustaetter
    Gcards
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.

  • CVE-2006-1348Mar 22, 2006
    Greg Neustaetter
    Gcards
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang[*][file] parameter, which is injected into an error message. NOTE: this issue might be resultant from…

  • CVE-2006-1349Mar 22, 2006
    Musicbox
    Musicbox
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) type and (3) show parameters in a top action in (a) index.php; and the (4) message1 parameter in (b) cart.php.

  • CVE-2006-1350Mar 22, 2006
    99Articles.com
    Free articles directory
    risk 0.00cvss —epss 0.02

    PHP remote file include vulnerability in index.php in 99Articles.com (aka ArticlesOne.com) Free articles directory allows remote attackers to include and execute arbitrary PHP code via a URL in the page parameter.

  • CVE-2006-1351Mar 22, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP.

  • CVE-2006-1352Mar 22, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents.

  • CVE-2006-1342Mar 21, 2006
    Linux
    Kernel
    risk 0.03cvss —epss 0.01

    net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.

  • CVE-2006-1343Mar 21, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local…

  • CVE-2006-0745Mar 21, 2006
    Xorg
    X11r6
    risk 0.03cvss —epss 0.01

    X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the…

  • CVE-2006-1336Mar 21, 2006
    Extcalendar
    Extcalendar
    risk 0.04cvss —epss 0.07

    Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) year, (2) month, (3) next, and (4) prev parameters.

  • CVE-2006-1337Mar 21, 2006
    MailEnable
    Mailenable
    risk 0.00cvss —epss 0.05

    Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitrary code via unknown vectors before authentication.

  • CVE-2006-1338Mar 21, 2006
    MailEnable
    Mailenable
    risk 0.00cvss —epss 0.02

    Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors involving "incorrectly encoded quoted-printable emails".

  • CVE-2006-1339Mar 21, 2006
    CuteNews
    CuteNews
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the archive parameter in an…

  • CVE-2006-1340Mar 21, 2006
    Cutephp
    Cutenews
    risk 0.00cvss —epss 0.02

    CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path.

  • CVE-2006-1341Mar 21, 2006
    Maian Events
    Maian Events
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters.

  • CVE-2006-1061Mar 21, 2006
    Curl
    Curl
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path.

  • CVE-2006-1324Mar 21, 2006
    Woltlab
    Burning Board
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in acp/lib/class_db_mysql.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated.