VYPR

CVEs

379,790 total · page 7291 of 7,596

AllCriticalHighKEV
  • CVE-2005-2922Dec 31, 2005
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked…

  • CVE-2005-2932Dec 31, 2005
    Check Point Zone Labs
    ZoneAlarm
    risk 0.00cvss —epss 0.00

    Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls.

  • CVE-2005-2934Dec 31, 2005
    SCO Group
    Unixware
    risk 0.03cvss —epss 0.01

    Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors.

  • CVE-2005-3057Dec 31, 2005
    Fortinet
    Fortios
    risk 0.00cvss —epss 0.03

    The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Fortinet FTP anti-virus engine by sending a STOR command and uploading a file before the FTP server response has been sent, as…

  • CVE-2005-3058Dec 31, 2005
    Fortinet
    Fortios
    risk 0.03cvss —epss 0.03

    Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field,…

  • CVE-2005-3126Dec 31, 2005
    Antiword Project
    Antiword
    risk 0.00cvss —epss 0.00

    The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink attack on temporary (a) output and (b) error files.

  • CVE-2005-3187Dec 31, 2005
    Blue Coat Systems Inc.
    WinProxy
    risk 0.04cvss —epss 0.07

    The listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) via a long HTTP request that causes an out-of-bounds read.

  • CVE-2005-3188Dec 31, 2005
    Nullsoft
    Winamp
    risk 0.01cvss —epss 0.07

    Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476.

  • CVE-2005-3240Dec 31, 2005
    Microsoft
    Internet Explorer
    risk 0.00cvss —epss 0.06

    Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag…

  • CVE-2005-3340Dec 31, 2005
    Tux Paint
    Tux Paint
    risk 0.00cvss —epss 0.00

    The tuxpaint-import.sh script in Tux Paint (tuxpaint) 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors.

  • CVE-2005-3342Dec 31, 2005
    Noweb
    noweb
    risk 0.00cvss —epss 0.00

    noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm.

  • CVE-2005-3356Dec 31, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement") as a result of multiple calls to the mntput function when the dentry_open function call fails, which allows local users to cause a denial of service (panic)…

  • CVE-2005-3357Dec 31, 2005
    Apache
    Apache
    risk 0.02cvss —epss 0.24

    mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.

  • CVE-2005-3359Dec 31, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain socket calls that produce inconsistent reference counts for loadable protocol modules.

  • CVE-2005-3525Dec 31, 2005
    Adobe Inc.
    Shockwave Player
    risk 0.02cvss —epss 0.20

    Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters.

  • CVE-2005-3526Dec 31, 2005
    Ipswitch, Inc.
    Ipswitch Collaboration Suite
    risk 0.01cvss —epss 0.07

    Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated users to execute arbitrary code via a long FETCH command.

  • CVE-2005-3538Dec 31, 2005
    Hylafax
    Hylafax
    risk 0.00cvss —epss 0.02

    hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges.

  • CVE-2005-3539Dec 31, 2005
    Hylafax
    Hylafax
    risk 0.04cvss —epss 0.13

    Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3.

  • CVE-2005-3540Dec 31, 2005
    Petris
    Petris
    risk 0.00cvss —epss 0.03

    Buffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via unspecified attack vectors.

  • CVE-2005-3618Dec 31, 2005
    VMware
    Esx
    risk 0.00cvss —epss 0.03

    Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 allows allows remote attackers to perform unauthorized actions as the administrator via URLs, as…

  • CVE-2005-3619Dec 31, 2005
    VMware
    Esx
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1 upgrade patch 6 allows remote attackers to inject arbitrary web script or HTML via messages that are…

  • CVE-2005-3620Dec 31, 2005
    VMware
    Esx
    risk 0.00cvss —epss 0.00

    The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges.

  • CVE-2005-3623Dec 31, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.03

    nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.

  • CVE-2005-3624Dec 31, 2005
    Xpdf
    Xpdf
    risk 0.00cvss —epss 0.02

    The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer…

  • CVE-2005-3625Dec 31, 2005
    Xpdf
    Xpdf
    risk 0.00cvss —epss 0.04

    Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka…

  • CVE-2005-3626Dec 31, 2005
    Xpdf
    Xpdf
    risk 0.00cvss —epss 0.03

    Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

  • CVE-2005-3627Dec 31, 2005
    Xpdf
    Xpdf
    risk 0.00cvss —epss 0.06

    Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with (1) a large "number of components" value that is not checked by…

  • CVE-2005-3628Dec 31, 2005
    Xpdf
    Xpdf
    risk 0.00cvss —epss 0.04

    Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.

  • CVE-2005-3629Dec 31, 2005
    Red Hat
    Initscripts
    risk 0.00cvss —epss 0.00

    initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.

  • CVE-2005-3630Dec 31, 2005
    Red Hat
    Directory Server
    risk 0.00cvss —epss 0.01

    Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.

  • CVE-2005-3653Dec 31, 2005
    Ca
    iGateway
    risk 0.01cvss —epss 0.19

    Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.

  • CVE-2005-3654Dec 31, 2005
    Blue Coat Systems Inc.
    WinProxy
    risk 0.00cvss —epss 0.03

    Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap.

  • CVE-2005-3655Dec 31, 2005
    Novell
    Open Enterprise Server
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.

  • CVE-2005-3656Dec 31, 2005
    Mod Auth Pgsql
    mod_auth_pgsql
    risk 0.01cvss —epss 0.09

    Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.

  • CVE-2005-3658Dec 31, 2005
    EMC Corporation
    Networker
    risk 0.00cvss —epss 0.05

    Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allow remote attackers to execute…

  • CVE-2005-3659Dec 31, 2005
    Legato
    NetWorker
    risk 0.00cvss —epss 0.03

    nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd…

  • CVE-2005-3706Dec 31, 2005
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in LibSystem in Mac OS X 10.4 through 10.4.5 allows context-dependent attackers to execute arbitrary code by causing an application that uses LibSystem to request a large amount of memory.

  • CVE-2005-3707Dec 31, 2005
    Apple Inc.
    Quicktime
    risk 0.01cvss —epss 0.08

    Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files.

  • CVE-2005-3708Dec 31, 2005
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.03

    Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files.

  • CVE-2005-3709Dec 31, 2005
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    Integer underflow in Apple Quicktime before 7.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Color Map Entry Size in a TGA image file.

  • CVE-2005-3710Dec 31, 2005
    Apple Inc.
    Quicktime
    risk 0.01cvss —epss 0.07

    Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified image height and width (ImageWidth) tags.

  • CVE-2005-3711Dec 31, 2005
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified (1) "strips" (StripByteCounts) or (2) "bands" (StripOffsets) values.

  • CVE-2005-3712Dec 31, 2005
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in rsync in Mac OS X 10.4 through 10.4.5 allows remote authenticated users to execute arbitrary code via long extended attributes.

  • CVE-2005-3713Dec 31, 2005
    Apple Inc.
    Quicktime
    risk 0.01cvss —epss 0.09

    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application Extension Block that modifies the heap in the Picture Modifier block.

  • CVE-2005-3714Dec 31, 2005
    Apple Inc.
    Airport Express
    risk 0.00cvss —epss 0.02

    The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of service (unresponsive interface) via malformed packets.

  • CVE-2005-3782Dec 31, 2005
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    Mac OS X 10.4.3 up to 10.4.6, when loginwindow uses the "Name and password" setting, and the "Show the Restart, Sleep, and Shut Down buttons" option is disabled, allows users with physical access to bypass login and reboot the system by entering ">restart", ">power", or…

  • CVE-2005-4085Dec 31, 2005
    Bluecoat
    Proxyav
    risk 0.08cvss —epss 0.66

    Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.

  • CVE-2005-4347Dec 31, 2005
    Debian
    linux
    risk 0.00cvss —epss 0.02

    The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.

  • CVE-2005-4351Dec 31, 2005
    Dragonflydb
    Dragonfly
    risk 0.00cvss —epss 0.00

    The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running.

  • CVE-2005-4352Dec 31, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the…