VYPR

CVEs

379,229 total · page 7327 of 7,585

AllCriticalHighKEV
  • CVE-2005-2432Aug 3, 2005
    Tincan
    Phplist
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.

  • CVE-2005-2433Aug 3, 2005
    Phplist
    Phplist
    risk 0.00cvss —epss 0.03

    PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php, (3) domainstats.php or (4) usercheck.php in public_html/lists/admin directory, (5) attributes.php, (6) dbcheck.php, (7) importcsv.php, (8) user.php, (9)…

  • CVE-2005-2434Aug 3, 2005
    Linksys
    Wrt54g
    risk 0.00cvss —epss 0.01

    Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to sniff the SSL connection and obtain sensitive information.

  • CVE-2005-2435Aug 3, 2005
    Website Baker
    Websitebaker
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbitrary web script or HTML via the dir parameter.

  • CVE-2005-2436Aug 3, 2005
    Website Baker
    Websitebaker
    risk 0.00cvss —epss 0.01

    browse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a directory that does not exist in the dir parameter or (2) a direct request to certain php files, which reveal the path in an error message.

  • CVE-2005-2437Aug 3, 2005
    Website Baker
    Websitebaker
    risk 0.00cvss —epss 0.01

    Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to upload and execute arbitrary PHP code.

  • CVE-2005-2438Aug 3, 2005
    Usebb
    Usebb
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier allows remote attackers to inject arbitrary Javascript via the BBCode color value.

  • CVE-2005-2439Aug 3, 2005
    Usebb
    Usebb
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function.

  • CVE-2005-2440Aug 3, 2005
    Thomson Netg
    Web Skill Vantage Manager
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitrary SQL commands via the svmPassword parameter.

  • CVE-2005-2441Aug 3, 2005
    Vbzoom
    Vbzoom
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php.

  • CVE-2005-2442Aug 3, 2005
    Spi Dynamics
    Webinspect
    risk 0.00cvss —epss 0.02

    Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Javascript from one application into another.

  • CVE-2005-2443Aug 3, 2005
    Kshout
    Kshout
    risk 0.00cvss —epss 0.01

    Kshout 2.x and 3.x stores settings.dat under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords.

  • CVE-2005-2444Aug 3, 2005
    Trillian
    Pro
    risk 0.00cvss —epss 0.00

    Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information.

  • CVE-2005-2445Aug 3, 2005
    Lighthouse Development
    Product Cart
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory parameter.

  • CVE-2005-2448Aug 3, 2005
    Ekg
    Ekg
    risk 0.00cvss —epss 0.02

    Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invalid behavior in applications) on big-endian systems.

  • CVE-2005-2449Aug 3, 2005
    Sandbox
    Sandbox
    risk 0.00cvss —epss 0.00

    Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp.

  • CVE-2005-2450Aug 3, 2005
    ClamAV
    Clamav
    risk 0.00cvss —epss 0.04

    Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.

  • CVE-2005-2451Aug 3, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet.

  • CVE-2005-2452Aug 3, 2005
    LibTIFF
    Libtiff
    risk 0.00cvss —epss 0.02

    libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header with a zero "YCbCr subsampling" value, which causes a divide-by-zero error in (1) tif_strip.c and (2) tif_tile.c, a different vulnerability than CVE-2004-0804.

  • CVE-2005-1762Aug 2, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service (kernel crash) via a "non-canonical" address.

  • CVE-2005-2079Aug 2, 2005
    Symantec
    Backup Exec
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers allows remote attackers to execute arbitrary code.

  • CVE-2005-2405Aug 1, 2005
    Opera
    Opera
    risk 0.00cvss —epss 0.03

    Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.

  • CVE-2005-2406Aug 1, 2005
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI.

  • CVE-2005-2407Aug 1, 2005
    Opera
    Opera
    risk 0.00cvss —epss 0.03

    A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then tricking the user into double-clicking on the "Run" button, aka "link hijacking".

  • CVE-2005-2409Aug 1, 2005
    Nbsmtp
    Nbsmtp
    risk 0.04cvss —epss 0.10

    Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call.

  • CVE-2005-2410Aug 1, 2005
    GNOME Foundation
    Networkmanager
    risk 0.00cvss —epss 0.04

    Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call.

  • CVE-2005-2411Aug 1, 2005
    Tdiary
    Tdiary
    risk 0.00cvss —epss 0.02

    Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user.

  • CVE-2005-2335Jul 27, 2005
    Fetchmail
    Fetchmail
    risk 0.00cvss —epss 0.06

    Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue.…

  • CVE-2005-2384Jul 27, 2005
    Avast\!
    Antivirus
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary files via an ACE archive containing filenames with (1) .. or…

  • CVE-2005-2385Jul 27, 2005
    Avast\!
    Antivirus
    risk 0.00cvss —epss 0.04

    Buffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to execute arbitrary code via an ACE archive containing a long filename.

  • CVE-2005-2386Jul 27, 2005
    Elemental Software
    Cartwiz
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

  • CVE-2005-2387Jul 27, 2005
    Goodtech Systems
    Goodtech SMTP Server
    risk 0.00cvss —epss 0.03

    Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via (1) a RCPT TO command with a long DNS name, or (2) a large number of RCPT TO commands with a long e-mail name arugment in the last command.

  • CVE-2005-2388Jul 27, 2005
    Microsoft
    Windows
    risk 0.00cvss —epss 0.02

    Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code.

  • CVE-2005-2389Jul 27, 2005
    Symantec
    Netbackup
    risk 0.00cvss —epss 0.01

    NDMP server in Veritas NetBackup 5.1 allows attackers to cause a denial of service via a CONFIG message with an out-of-range timestamp, which triggers a null dereference.

  • CVE-2005-2390Jul 27, 2005
    Proftpd
    Proftpd
    risk 0.01cvss —epss 0.09

    Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.

  • CVE-2005-2391Jul 27, 2005
    risk 0.00cvss —epss 0.01

    Unknown vulnerability in 3Com OfficeConnect Wireless 11g Access Point before 1.03.12 allows remote attackers to obtain sensitive information via the web interface.

  • CVE-2005-2392Jul 27, 2005
    Cmsimple
    Cmsimple
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function.

  • CVE-2005-2393Jul 27, 2005
    Cutephp
    Cutenews
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTML via (1) the lastusername parameter to index.php or (2) selected_search_arch parameter to search.php.

  • CVE-2005-2394Jul 27, 2005
    CuteNews
    CuteNews
    risk 0.00cvss —epss 0.01

    show_news.php in CuteNews 1.3.6 allows remote attackers to obtain the full path of the server via an invalid archive parameter.

  • CVE-2005-2395Jul 27, 2005
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available.

  • CVE-2005-2396Jul 27, 2005
    MediaWiki
    Mediawiki
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the page move template.

  • CVE-2005-2397Jul 27, 2005
    GNU
    Phpbook
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in guestbook.php in phpBook 1.46 allows remote attackers to inject arbitrary web script or HTML via the admin parameter.

  • CVE-2005-2398Jul 27, 2005
    PHP Surveyor
    Phpsurveyor
    risk 0.00cvss —epss 0.03

    Multiple SQL injection vulnerabilities in PHP Surveyor 0.98 allows remote attackers to execute arbitrary SQL commands via (1) the sid, start, and id parameters to browse.php, the sid parameter to (2) dataentry.php, (3) export.php, (4) admin.php, (5) conditions.php, (6) spss.php,…

  • CVE-2005-2399Jul 27, 2005
    PHP Surveyor
    Phpsurveyor
    risk 0.00cvss —epss 0.02

    PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to (1) browse.php, (2) export.php, (3) conditions.php, or (4) spss.php.

  • CVE-2005-2400Jul 27, 2005
    Phpfinance
    Phpfinance
    risk 0.00cvss —epss 0.02

    The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges.

  • CVE-2005-2401Jul 27, 2005
    PHP-Fusion
    Phpfusion
    risk 0.00cvss —epss 0.01

    PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag.

  • CVE-2005-2402Jul 27, 2005
    Phpsitesearch
    Phpsitesearch
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in search.php in PHPSiteSearch 1.7.7d allows remote attackers to inject arbitrary web script or HTML via the query parameter.

  • CVE-2005-2403Jul 27, 2005
    Realchat
    Realchat
    risk 0.00cvss —epss 0.01

    The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username.

  • CVE-2005-2404Jul 27, 2005
    Sendcard
    Sendcard
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2005-1691Jul 26, 2005
    SAP
    Internet Graphics Server
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to read arbitrary files via ".." sequences in an HTTP GET request.