VYPR

CVEs

379,316 total · page 7320 of 7,587

AllCriticalHighKEV
  • CVE-2005-2944Sep 16, 2005
    Brent Ely
    Gnome Workstation Command Center
    risk 0.00cvss —epss 0.00

    The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwcc_out.txt temporary file.

  • CVE-2005-2935Sep 15, 2005
    Microsoft
    Antispyware
    risk 0.00cvss —epss 0.02

    Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malicious c:\program.exe file, which is run by AntiSpywareMain.exe when it attempts to execute gsasDtServ.exe. NOTE: it is not clear whether this overlaps…

  • CVE-2005-2495Sep 15, 2005
    Xfree86
    Xfree86
    risk 0.00cvss —epss 0.04

    Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.

  • CVE-2005-2658Sep 15, 2005
    Turquoise SuperStat
    turqstat
    risk 0.00cvss —epss 0.02

    Buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month.

  • CVE-2005-2799Sep 15, 2005
    Linksys
    Wrt54g
    risk 0.09cvss —epss 0.71

    Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request.

  • CVE-2005-2918Sep 15, 2005
    Gtkdiskfree
    Gtkdiskfree
    risk 0.00cvss —epss 0.01

    The open_cmd_tube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the gtkdiskfree temporary file.

  • CVE-2005-2912Sep 14, 2005
    Linksys
    Wrt54g
    risk 0.00cvss —epss 0.01

    Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTTP POST request with a negative Content-Length value.

  • CVE-2005-2914Sep 14, 2005
    Linksys
    Wrt54g
    risk 0.00cvss —epss 0.01

    ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, does not use an authentication initialization function, which allows remote attackers to obtain encrypted configuration information and, if the key is known,…

  • CVE-2005-2915Sep 14, 2005
    Linksys
    Wrt54g
    risk 0.00cvss —epss 0.01

    ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, uses weak encryption (XOR encoding with a fixed byte mask) for configuration information, which could allow attackers to decrypt the information and possibly…

  • CVE-2005-2916Sep 14, 2005
    Linksys
    Wrt54g
    risk 0.00cvss —epss 0.01

    Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware…

  • CVE-2005-2879Sep 14, 2005
    Advansysperu Software
    USB Lock Auto Protect
    risk 0.00cvss —epss 0.00

    Advansysperu Software USB Lock Auto-Protect (AP) 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain sensitive information and bypass USB interface protection.

  • CVE-2005-2880Sep 14, 2005
    Phpcommunitycalendar
    Phpcommunitycalendar
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the (1) login field in login.php or (2) LocationID parameter to week.php.

  • CVE-2005-2881Sep 14, 2005
    Phpcommunitycalendar
    Phpcommunitycalendar
    risk 0.00cvss —epss 0.02

    phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized access via a direct request to the admin directory.

  • CVE-2005-2882Sep 14, 2005
    Phpcommunitycalendar
    Phpcommunitycalendar
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the LocationID parameter to (1) thankyou.php or (2) day.php, font parameter to (3) calDaily.php,…

  • CVE-2005-2884Sep 14, 2005
    Neocrome
    Land Down Under
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event.

  • CVE-2005-2885Sep 14, 2005
    Maxdev
    Mdpro
    risk 0.04cvss —epss 0.09

    The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which could allow remote attackers to bypass file extension checks and execute arbitrary commands by uploading a file with a different…

  • CVE-2005-2886Sep 14, 2005
    Maxdev
    Mdpro
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via (1) the print parameter to the print module, the sitename parameter to (2) bb_smilies or (3) bbcode_ref…

  • CVE-2005-2887Sep 14, 2005
    Maxdev
    Mdpro
    risk 0.00cvss —epss 0.02

    MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) wiki.php, (2) AutoTheme directory, (3) Blocks directory, (4) admin.php, (5) pnadmin.php, or (6) Topics directory, which reveal the path in an…

  • CVE-2005-2888Sep 14, 2005
    PhpBB
    MyBB
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php.

  • CVE-2005-2889Sep 14, 2005
    Checkpoint
    NGX
    risk 0.00cvss —epss 0.02

    Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypass intended restrictions.

  • CVE-2005-2890Sep 14, 2005
    Secureol
    Ve2
    risk 0.00cvss —epss 0.00

    SecureOL VE2 1.05.1008 does not properly restrict public access to physical memory, which allows local users to bypass intended restrictions and gain access to the secured environment via direct access to the PhysicalMemory device.

  • CVE-2005-2891Sep 14, 2005
    Csystems
    Webarchivex
    risk 0.00cvss —epss 0.02

    WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read or write to arbitrary files via the (1) MakeArchive or (2) MakeArchiveStr methods.

  • CVE-2005-2892Sep 14, 2005
    Pblang
    Pblang
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to read arbitrary files via ".." sequences and "%00" (trailing null byte) in the u parameter.

  • CVE-2005-2893Sep 14, 2005
    Pblang
    Pblang
    risk 0.00cvss —epss 0.03

    Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via the username (u parameter), which is directly injected into a file that is later executed upon login.

  • CVE-2005-2894Sep 14, 2005
    Pblang
    Pblang
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary web script or PHP via the location field.

  • CVE-2005-2895Sep 14, 2005
    Pblang
    Pblang
    risk 0.00cvss —epss 0.02

    setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive information via a %00 (a null byte) in the u parameter, which reveals the path in an error message.

  • CVE-2005-2896Sep 14, 2005
    Stylemotion
    Web News
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_userpw parameter to startup.php, (2) cat, (3) id, or (4) stof parameter to news.php, or (5) id parameter to print.php.

  • CVE-2005-2897Sep 14, 2005
    Stylemotion
    Web News
    risk 0.00cvss —epss 0.01

    WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error message, as demonstrated using cat.add.php.

  • CVE-2005-2898Sep 14, 2005
    Filezilla
    Filezilla
    risk 0.03cvss —epss 0.01

    NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain…

  • CVE-2005-2899Sep 14, 2005
    Cj Design
    Cj Tag Board
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in details.php in CjTagBoard 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date, (2) time, (3) name, (4) ip, (5) agent, or (6) msg parameter.

  • CVE-2005-2900Sep 14, 2005
    Cj Design
    Cjlinkout
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in top.php in CjLinkOut 1.0 allows remote attackers to inject arbitrary web script or HTML via the 123 parameter.

  • CVE-2005-2901Sep 14, 2005
    Cj Design
    Cjweb2mail
    risk 0.00cvss —epss 0.01

    Multiple Cross-site scripting (XSS) vulnerabilities in CjWeb2Mail 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) message, or (3) ip parameter to thankyou.php or (4) emsg parameter to web2mail.php.

  • CVE-2005-2902Sep 14, 2005
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute arbitrary SQL commands and bypass the file extension check via SQL code in the file extension of an uploaded file.

  • CVE-2005-2903Sep 14, 2005
    Eset
    Nod32 Antivirus
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning enabled, allows remote attackers to execute arbitrary code via an ARJ archive containing a file with a long filename.

  • CVE-2005-2904Sep 14, 2005
    Zebedee
    Zebedee
    risk 0.04cvss —epss 0.07

    Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (application crash) via a zero in the port number of the protocol option header, which triggers an assert error in the makeConnection function in zebedee.c.

  • CVE-2005-1913Sep 14, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-leader thread executing a different program than was pending in itimer, which causes the signal to be delivered to the old group-leader task, which does not exist.

  • CVE-2005-2490Sep 14, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users to execute arbitrary code by calling sendmsg and modifying the message contents in another thread.

  • CVE-2005-2492Sep 14, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input.

  • CVE-2005-2875Sep 13, 2005
    risk 0.00cvss —epss 0.02

    Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes.

  • CVE-2005-2876Sep 13, 2005
    util-linux
    util-linux
    risk 0.00cvss —epss 0.00

    umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which…

  • CVE-2005-2878Sep 13, 2005
    GNU
    Mailutils
    risk 0.04cvss —epss 0.15

    Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.

  • CVE-2005-2874Sep 13, 2005
    Easy Software Products
    Cups
    risk 0.00cvss —epss 0.03

    The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.

  • CVE-2005-2872Sep 9, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.04

    The ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service (kernel panic) via certain attacks such as SSH brute force, which leads to memset calls using a length…

  • CVE-2005-2873Sep 9, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONG_MAX, which can cause ipt_recent netfilter rules to block too early, a different vulnerability than…

  • CVE-2005-2871Sep 9, 2005
    Netscape
    Netscape
    risk 0.05cvss —epss 0.21

    Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character…

  • CVE-2005-2862Sep 8, 2005
    Road Runner
    Adsl Road Runner Modem
    risk 0.00cvss —epss 0.01

    ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login to the modem with a blank password and gain unauthorized access.

  • CVE-2005-2863Sep 8, 2005
    Open Webmail
    Openwebmail
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter.

  • CVE-2005-2864Sep 8, 2005
    Urban
    Urban
    risk 0.00cvss —epss 0.00

    URBAN 1.5.3_1 allows local users to overwrite arbitrary files via a symlink attack on the (1) high score or (2) save game files.

  • CVE-2005-2865Sep 8, 2005
    Amember
    Amember
    risk 0.00cvss —epss 0.01

    Multiple PHP remote file inclusion vulnerabilities in aMember Pro 2.3.4 allow remote attackers to execute arbitrary PHP code via the config[root_dir] parameter to (1) mysql.inc.php, (2) efsnet.inc.php, (3) theinternetcommerce.inc.php, (4) cdg.inc.php, (5) compuworld.inc.php, (6)…

  • CVE-2005-2866Sep 8, 2005
    Mercora
    IMRadio
    risk 0.03cvss —epss 0.01

    Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which allows local users to gain privileges.