VYPR

CVEs

379,799 total · page 7290 of 7,596

AllCriticalHighKEV
  • CVE-2006-0075Jan 4, 2006
    GNU
    Phpbook
    risk 0.03cvss —epss 0.03

    Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail field (mail variable) in a new message, which is written to a PHP file.

  • CVE-2006-0076Jan 4, 2006
    Oaboard
    Oaboard
    risk 0.03cvss —epss 0.03

    PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter.

  • CVE-2006-0077Jan 4, 2006
    File Extattr
    File::ExtAttr
    risk 0.00cvss —epss 0.00

    Off-by-one error in the getfattr function in File::ExtAttr before 0.03 allows attackers to trigger a buffer overflow via unspecified attack vectors.

  • CVE-2006-0070Jan 4, 2006
    Drupal
    Drupal
    risk 0.00cvss —epss 0.01

    Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via an IMG tag with an unusual encoded Javascript function name, as demonstrated using variations of the alert() function. NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6…

  • CVE-2006-0071Jan 4, 2006
    File Project
    Linux
    risk 0.00cvss —epss 0.00

    The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0.

  • CVE-2006-0072Jan 4, 2006
    SCO Group
    Openserver
    risk 0.03cvss —epss 0.05

    Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.

  • CVE-2006-0073Jan 4, 2006
    Discusware
    Discus Freeware
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a URL, which is not properly sanitized from the resulting error message. NOTE: the…

  • CVE-2006-0068Jan 3, 2006
    Primo Place
    Primo Cart
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) q parameter to search.php and (2) email parameter to user.php.

  • CVE-2006-0069Jan 3, 2006
    Chipmunk Scripts
    guestbook
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the homepage parameter.

  • CVE-2006-0064Jan 3, 2006
    Cubecart
    Cubecart
    risk 0.03cvss —epss 0.02

    PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute arbitrary PHP code via a URL in the glob[rootDir] parameter.

  • CVE-2006-0065Jan 3, 2006
    Vego
    Vego Web Forum
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in (1) functions.php, (2) functions_update.php, and (3) functions_display.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the theme_id parameter in index.php.

  • CVE-2006-0066Jan 3, 2006
    Phpjournaler
    Phpjournaler
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands via the readold parameter.

  • CVE-2006-0067Jan 3, 2006
    Vego
    Vego Links Builder
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in login.php in VEGO Links Builder 2.00 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.

  • CVE-2005-0036Dec 31, 2005
    Delegate
    Delegate
    risk 0.00cvss —epss 0.03

    The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.

  • CVE-2005-0037Dec 31, 2005
    Dnrd
    Dnrd
    risk 0.00cvss —epss 0.02

    The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.

  • CVE-2005-0038Dec 31, 2005
    PowerDNS
    Powerdns
    risk 0.00cvss —epss 0.06

    The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.

  • CVE-2005-0136Dec 31, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761.

  • CVE-2005-0489Dec 31, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The /proc handling (proc/base.c) Linux kernel 2.4 before 2.4.17 allows local users to cause a denial of service via unknown vectors that cause an invalid access of free memory.

  • CVE-2005-0985Dec 31, 2005
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecified attack vectors related to the fan control unit (FCU) driver.

  • CVE-2005-1528Dec 31, 2005
    QNX
    Rtos
    risk 0.03cvss —epss 0.01

    Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY_PATH environment variable that references a malicious library.

  • CVE-2005-1726Dec 31, 2005
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    The CoreGraphics Window Server in Mac OS X 10.4.1 allows local users with console access to gain privileges by "launching commands into root sessions."

  • CVE-2005-1730Dec 31, 2005
    Novell
    Imanager
    risk 0.00cvss —epss 0.05

    Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted packets, as demonstrated by "OpenSSL ASN.1 brute forcer." NOTE: this issue might overlap…

  • CVE-2005-1752Dec 31, 2005
    GForge
    Gforge
    risk 0.03cvss —epss 0.04

    viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file_name parameter.

  • CVE-2005-1753Dec 31, 2005
    Apache
    Tomcat
    risk 0.00cvss —epss 0.01

    ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a direct request to /mailboxesdir/username@domainname. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes…

  • CVE-2005-1754Dec 31, 2005
    Apache
    Tomcat
    risk 0.03cvss —epss 0.03

    JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and…

  • CVE-2005-1755Dec 31, 2005
    PHP Poll Creator
    PHP Poll Creator
    risk 0.00cvss —epss 0.02

    PHP remote file inclusion vulnerability in poll_vote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativer_pfad parameter.

  • CVE-2005-1918Dec 31, 2005
    GNU
    Tar
    risk 0.00cvss —epss 0.03

    The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences…

  • CVE-2005-1924Dec 31, 2005
    SquirrelMail
    Gpg Plugin
    risk 0.04cvss —epss 0.10

    The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the fpr parameter to the deleteKey function in gpg_keyring.php, as called by (a) import_key_file.php, (b) import_key_text.php,…

  • CVE-2005-1939Dec 31, 2005
    Ipswitch, Inc.
    Whatsup Small Business
    risk 0.08cvss —epss 0.64

    Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022).

  • CVE-2005-1976Dec 31, 2005
    Novell
    Netmail
    risk 0.00cvss —epss 0.00

    Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with that ID to execute arbitrary code or cause a denial of service by modifying those files.

  • CVE-2005-2194Dec 31, 2005
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Apple Mac OS X kernel before 10.4.2 allows remote attackers to cause a denial of service (kernel panic) via a crafted TCP packet, possibly related to source routing or loose source routing.

  • CVE-2005-2315Dec 31, 2005
    Dnrd
    Dnrd
    risk 0.00cvss —epss 0.04

    Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via a large number of large DNS packets with the Z and QR flags cleared.

  • CVE-2005-2316Dec 31, 2005
    Dnrd
    Dnrd
    risk 0.00cvss —epss 0.02

    Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to cause a denial of service (infinite recursion) via a DNS packet that uses message compression in the QNAME and two pointers that point to each other (circular buffer).

  • CVE-2005-2340Dec 31, 2005
    Apple Inc.
    Quicktime
    risk 0.05cvss —epss 0.26

    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field.

  • CVE-2005-2341Dec 31, 2005
    Rim
    Blackberry Attachment Service
    risk 0.00cvss —epss 0.02

    Heap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service allows remote attackers to cause a denial of service (hang) via an e-mail attachment with a crafted TIFF file.

  • CVE-2005-2342Dec 31, 2005
    Rim
    Blackberry Router
    risk 0.00cvss —epss 0.04

    Research in Motion (RIM) BlackBerry Router allows remote attackers to cause a denial of service (communication disruption) via crafted Server Routing Protocol (SRP) packets.

  • CVE-2005-2343Dec 31, 2005
    Rim
    Blackberry
    risk 0.00cvss —epss 0.03

    Research in Motion (RIM) BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service (hang) via a Java Application Description (JAD) file with a long application name and vendor string, which prevents a browser dialog…

  • CVE-2005-2344Dec 31, 2005
    Rim
    Blackberry Enterprise Server
    risk 0.00cvss —epss 0.02

    The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics (PNG) file that triggers a heap-based buffer overflow.

  • CVE-2005-2454Dec 31, 2005
    IBM
    Lotus Notes
    risk 0.00cvss —epss 0.00

    IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder.

  • CVE-2005-2460Dec 31, 2005
    Kayako
    Liveresponse
    risk 0.03cvss —epss 0.04

    Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter or (2) name field when entering a session or sending a message.

  • CVE-2005-2461Dec 31, 2005
    Kayako
    Liveresponse
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) date parameter.

  • CVE-2005-2462Dec 31, 2005
    Kayako
    Liveresponse
    risk 0.00cvss —epss 0.01

    Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users and possibly remote attackers to gain privileges.

  • CVE-2005-2463Dec 31, 2005
    Kayako
    Liveresponse
    risk 0.00cvss —epss 0.01

    Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include scripts, which reveals the path in an error message.

  • CVE-2005-2464Dec 31, 2005
    PCXP
    TOPPE CMS
    risk 0.00cvss —epss 0.02

    login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the target userid.

  • CVE-2005-2465Dec 31, 2005
    Toppe
    Toppe CMS
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via the msg variable.

  • CVE-2005-2466Dec 31, 2005
    Openbook
    Openbook
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the auth_user function in admin.php in OpenBook 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.

  • CVE-2005-2467Dec 31, 2005
    MySQL
    Eventum
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.

  • CVE-2005-2468Dec 31, 2005
    MySQL
    Eventum
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.auth.php, getCustomFieldReport function in (4) custom_fields.php, (5)…

  • CVE-2005-2527Dec 31, 2005
    Apple Inc.
    Java
    risk 0.00cvss —epss 0.00

    Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symlink attack.

  • CVE-2005-2529Dec 31, 2005
    Apple Inc.
    Java
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives."