VYPR

CVEs

379,842 total · page 7284 of 7,597

AllCriticalHighKEV
  • CVE-2006-0466Jan 27, 2006
    Goldstag
    Goldstag Content Management System
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.asp in Goldstag Content Management System allows remote attackers to inject arbitrary web script or HTML via the text parameter.

  • CVE-2006-0057Jan 27, 2006
    Microsoft
    Internet Explorer
    risk 0.02cvss —epss 0.20

    Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting.…

  • CVE-2006-0446Jan 27, 2006
    Webwork
    Webwork
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to execute arbitrary commands as the web server via unknown attack vectors.

  • CVE-2006-0447Jan 27, 2006
    SPA-PRO
    Mail @Solomon
    risk 0.00cvss —epss 0.05

    Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a long username to the (1) AUTH PLAIN or (2) AUTH LOGIN SMTP commands, which is not properly handled by (a) EPSTRS.EXE or (b) SPA-RS.EXE; (3)…

  • CVE-2006-0448Jan 27, 2006
    E Post Corporation
    E-Post Mail
    risk 0.00cvss —epss 0.02

    Multiple directory traversal vulnerabilities in (1) EPSTIMAP4S.EXE and (2) SPA-IMAP4S.EXE in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allow remote attackers to (a) list arbitrary directories or cause a denial of service via the LIST command; or create arbitrary…

  • CVE-2006-0449Jan 27, 2006
    SPA-PRO
    SPA-PRO Mail
    risk 0.00cvss —epss 0.02

    Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote attackers to cause a denial of service (infinite loop) by sending an APPEND command and disconnecting before the expected amount of data is sent.

  • CVE-2006-0450Jan 27, 2006
    PhpBB
    phpBB
    risk 0.00cvss —epss 0.05

    phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash) by (1) registering many users through profile.php or (2) using search.php to search in a certain way that confuses the database.

  • CVE-2006-0439Jan 26, 2006
    Text Rider
    Text Rider
    risk 0.00cvss —epss 0.02

    Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing data/userlist.txt.

  • CVE-2006-0440Jan 26, 2006
    Text Rider
    Text Rider
    risk 0.00cvss —epss 0.01

    Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password (possibly via another vulnerability that reads it from a data file), then including the hash in a cookie.

  • CVE-2006-0441Jan 26, 2006
    Karjasoft
    Sami FTP Server
    risk 0.09cvss —epss 0.71

    Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed.

  • CVE-2006-0442Jan 26, 2006
    MyBB
    Mybb
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary web script or HTML via the (1) notepad parameter in a notepad action and (2) signature parameter in an editsig action. NOTE: These are…

  • CVE-2006-0443Jan 26, 2006
    Cheesyblog
    Cheesyblog
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) realname and (2) comment parameters, or (3) via a javascript URI in the url parameter, when adding a comment.

  • CVE-2006-0444Jan 26, 2006
    Phpclanwebsite
    Phpclanwebsite
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page. NOTE: the poll_id…

  • CVE-2006-0445Jan 26, 2006
    Phpclanwebsite
    Phpclanwebsite
    risk 0.00cvss —epss 0.01

    index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "\", which will display the full path of uploader.php. NOTE: this might be the result of a file…

  • CVE-2006-0434Jan 26, 2006
    Phpxplorer
    Phpxplorer
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via ".." (dot dot) sequences and null bytes in the sAction parameter, a different vulnerability than CVE-2006-0244. NOTE: if the functionality of phpXplorer supports…

  • CVE-2006-0435Jan 26, 2006
    Oracle Corporation
    Application Server
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and…

  • CVE-2006-0436Jan 26, 2006
    HPE
    HP-UX
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors.

  • CVE-2006-0419Jan 25, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections.

  • CVE-2006-0420Jan 25, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.01

    BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use relative forwarding, which allows remote attackers to cause a denial of service (slowdown) via unknown attack vectors that cause "looping stack overflow…

  • CVE-2006-0421Jan 25, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.00

    By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges…

  • CVE-2006-0422Jan 25, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allow remote attackers to access MBean attributes or cause an unspecified denial of service via unknown attack vectors.

  • CVE-2006-0423Jan 25, 2006
    Bea
    WebLogic Portal
    risk 0.00cvss —epss 0.04

    BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges.

  • CVE-2006-0424Jan 25, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.01

    BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information.

  • CVE-2006-0425Jan 25, 2006
    Bea
    WebLogic Portal
    risk 0.00cvss —epss 0.03

    BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors.

  • CVE-2006-0426Jan 25, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    BEA WebLogic Server and WebLogic Express 8.1 through SP4, when configuration auditing is enabled and a password change occurs, stores the old and new passwords in cleartext in the DefaultAuditRecorder.log file, which could allow attackers to gain privileges.

  • CVE-2006-0427Jan 25, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted.

  • CVE-2006-0428Jan 25, 2006
    Bea
    WebLogic Portal
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs.

  • CVE-2006-0429Jan 25, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.00

    BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been activated by a server reboot, which could cause an administrator to perform inappropriate, security-relevant actions.

  • CVE-2006-0430Jan 25, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when connection filters are enabled, cause the server to run more slowly, which makes it easier for remote attackers to cause a denial of service (server slowdown).

  • CVE-2006-0431Jan 25, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors.

  • CVE-2006-0432Jan 25, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources.

  • CVE-2006-0379Jan 25, 2006
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory.

  • CVE-2006-0380Jan 25, 2006
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory.

  • CVE-2006-0381Jan 25, 2006
    FreeBSD
    FreeBSD
    risk 0.01cvss —epss 0.07

    A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a…

  • CVE-2006-0225Jan 25, 2006
    OpenBSD
    OpenSSH
    risk 0.00cvss —epss 0.00

    scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.

  • CVE-2006-0411Jan 25, 2006
    Claroline
    Claroline
    risk 0.00cvss —epss 0.02

    claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote attackers to hijack sessions and possibly gain administrative privileges.

  • CVE-2006-0412Jan 25, 2006
    Gencbeyin Web Programlama
    Cybershop
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in CyberShop allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action.

  • CVE-2006-0413Jan 25, 2006
    Newsphp
    Newsphp
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim, (3) id, (4) last, and (5) limit parameter.

  • CVE-2006-0414Jan 25, 2006
    Tor
    Tor
    risk 0.00cvss —epss 0.03

    Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server.

  • CVE-2006-0415Jan 25, 2006
    Sleeperchat
    Sleeperchat
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject arbitrary web script or HTML via the pseudo parameter.

  • CVE-2006-0416Jan 25, 2006
    Sleeperchat
    Sleeperchat
    risk 0.00cvss —epss 0.02

    SleeperChat 0.3f and earlier allows remote attackers to bypass authentication and create new entries via the txt parameter to (1) chat_no.php and (2) chat_if.php.

  • CVE-2006-0417Jan 25, 2006
    Mywebland
    Minibloggie
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameters.

  • CVE-2006-0418Jan 25, 2006
    Topcmm Computing
    123 Flash Chat Server
    risk 0.03cvss —epss 0.04

    Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username.

  • CVE-2006-0224Jan 25, 2006
    Libast
    Libast
    risk 0.00cvss —epss 0.01

    Buffer overflow in Library of Assorted Spiffy Things (LibAST) 0.6.1 and earlier, as used in Eterm and possibly other software, allows local users to execute arbitrary code as the utmp user via a long -X command line argument (alternative configuration file name).

  • CVE-2006-0402Jan 25, 2006
    Jason Geiger
    Zoph
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands.

  • CVE-2006-0403Jan 25, 2006
    E Moblog
    E Moblog
    risk 0.00cvss —epss 0.02

    Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) monthy parameter to index.php or (2) login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but…

  • CVE-2006-0404Jan 25, 2006
    Mike Macgirvin
    Note A Day Weblog
    risk 0.00cvss —epss 0.02

    Note-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to archive/.phpass-admin, which contains encrypted passwords.

  • CVE-2006-0405Jan 25, 2006
    LibTIFF
    Libtiff
    risk 0.00cvss —epss 0.03

    The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a NULL pointer dereference, possibly due to changes in type declarations and/or the TIFFVSetField…

  • CVE-2006-0406Jan 25, 2006
    MyBB
    Mybb
    risk 0.00cvss —epss 0.02

    search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters.

  • CVE-2006-0407Jan 25, 2006
    Azbb
    Az Bulletin Board
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) nickname parameter and (2) an iframe tag in the topic parameter. NOTE: the original disclosure…