VYPR

CVEs

378,616 total · page 7338 of 7,573

AllCriticalHighKEV
  • CVE-2005-0329May 2, 2005
    Zipgenius
    Zipgenius
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify arbitrary files via a ZIP file with a file whose name includes .. (dot dot) sequences.

  • CVE-2005-0330May 2, 2005
    Painkiller
    Painkiller
    risk 0.03cvss —epss 0.04

    Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash.

  • CVE-2005-0331May 2, 2005
    WinRAR
    WinRAR
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.

  • CVE-2005-0332May 2, 2005
    DeskNow
    Mail and Collaboration Server
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary…

  • CVE-2005-0333May 2, 2005
    Lanchat Pro Revival
    Lanchat Pro Revival
    risk 0.00cvss —epss 0.02

    LANChat Pro Revival 1.666c allows remote attackers to cause a denial of service (application crash) via a malformed UDP packet.

  • CVE-2005-0334May 2, 2005
    Linksys
    PSUS4
    risk 0.00cvss —epss 0.02

    Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service (device crash) via an HTTP POST request containing an unknown parameter without a value.

  • CVE-2005-0335May 2, 2005
    Emotion
    Mediapartner Web Server
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

  • CVE-2005-0336May 2, 2005
    Emotion
    Mediapartner Web Server
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter…

  • CVE-2005-0337May 2, 2005
    Postfix
    Postfix
    risk 0.00cvss —epss 0.03

    Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

  • CVE-2005-0338May 2, 2005
    Savant
    Savant Webserver
    risk 0.03cvss —epss 0.05

    Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.

  • CVE-2005-0339May 2, 2005
    Foxmail
    Foxmail
    risk 0.04cvss —epss 0.08

    Buffer overflow in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long MAIL FROM command.

  • CVE-2005-0340May 2, 2005
    Apple Inc.
    Apple File Service
    risk 0.03cvss —epss 0.03

    Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (application crash) via a negative UAM string length in a FPLoginExt packet.

  • CVE-2005-0341May 2, 2005
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HTML and perform cross-site scripting (XSS) attacks.

  • CVE-2005-0342May 2, 2005
    Apple Inc.
    Mac OS X
    risk 0.03cvss —epss 0.01

    The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a hard link from the .DS_Store file to an arbitrary file.

  • CVE-2005-0343May 2, 2005
    PerlDesk
    PerlDesk
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view parameter.

  • CVE-2005-0344May 2, 2005
    602LAN SUITE
    602LAN SUITE
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.

  • CVE-2005-0345May 2, 2005
    PHP-Fusion
    Phpfusion
    risk 0.03cvss —epss 0.03

    viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protected forums via the thread_id parameter.

  • CVE-2005-0346May 2, 2005
    Safenet
    Softremote VPN Client
    risk 0.00cvss —epss 0.00

    SafeNet SoftRemote VPN Client stores the VPN password (pre-shared key) in cleartext in memory of the IreIKE.exe process, which allows local users to gain sensitive information if they have access to that process.

  • CVE-2005-0347May 2, 2005
    risk 0.00cvss —epss 0.03

    Integer overflow in RealArcade 1.2.0.994 and earlier allows remote attackers to execute arbitrary code via an RGS file with an invalid size string for the GUID and game name, which leads to a buffer overflow.

  • CVE-2005-0348May 2, 2005
    RealNetworks
    Realarcade Installer
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in RealArcade 1.2.0.994 allows remote attackers to delete arbitrary files via an RGP file with a .. (dot dot) in the FILENAME tag.

  • CVE-2005-0349May 2, 2005
    Broadcom Corporation
    Brightstor Arcserve Backup
    risk 0.00cvss —epss 0.03

    The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands.

  • CVE-2005-0350May 2, 2005
    F-Secure
    Internet Security
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive.

  • CVE-2005-0353May 2, 2005
    Sentinel
    License Manager
    risk 0.09cvss —epss 0.71

    Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093.

  • CVE-2005-0363May 2, 2005
    AWStats
    Awstats
    risk 0.00cvss —epss 0.02

    awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.

  • CVE-2005-0365May 2, 2005
    KDE
    Kde
    risk 0.00cvss —epss 0.00

    The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

  • CVE-2005-0366May 2, 2005
    Openpgp
    Openpgp
    risk 0.00cvss —epss 0.03

    The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or…

  • CVE-2005-0368May 2, 2005
    CMScore
    CMScore
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) EntryID or (2) searchterm parameter to index.php, or (3) username parameter to authenticate.php.

  • CVE-2005-0369MedMay 2, 2005
    Armagetron
    Armagetron Advanced
    risk 0.38cvss 5.3epss 0.04

    Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service (application crash) via a packet with a large (1) descriptor ID or (2) claim_id, which exceeds the boundaries of an array.

  • CVE-2005-0370May 2, 2005
    Armagetron
    Armagetron Advanced
    risk 0.03cvss —epss 0.03

    Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service (network disconnection) via an empty UDP packet, which is not properly distinguished from the "no new packets" state of the associated socket.

  • CVE-2005-0371May 2, 2005
    Armagetron
    Armagetron Advanced
    risk 0.00cvss —epss 0.01

    Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service (freeze) via a large number of player connections that do not send any data.

  • CVE-2005-0372May 2, 2005
    Gftp
    Gftp
    risk 0.00cvss —epss 0.04

    Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

  • CVE-2005-0374May 2, 2005
    Bitshifters
    Bitboard
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Bitboard 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via an [img] bbcode image tag with an event such as mouseover.

  • CVE-2005-0375May 2, 2005
    Sergey Kiselev
    Sgallery
    risk 0.00cvss —epss 0.02

    imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idalbum and (2) idimage unset, which reveals the installation path in an error message for the sql_fetch_row function.

  • CVE-2005-0377May 2, 2005
    SGallery
    SGallery
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage parameters.

  • CVE-2005-0378May 2, 2005
    Horde (software)
    Horde
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to prefs.php or (2) url parameter to index.php.

  • CVE-2005-0379May 2, 2005
    Zeroboard
    Zeroboard
    risk 0.00cvss —epss 0.02

    Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the _zb_path parameter to (1) _head.php or (2) outlogin.php, or the dir parameter to (3) write.php.

  • CVE-2005-0380May 2, 2005
    Zeroboard
    Zeroboard
    risk 0.00cvss —epss 0.04

    Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a…

  • CVE-2005-0382May 2, 2005
    Breed
    Breed
    risk 0.03cvss —epss 0.03

    Breed patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via an empty UDP packet, which triggers a null dereference.

  • CVE-2005-0383May 2, 2005
    Trend Micro
    Control Manager
    risk 0.00cvss —epss 0.02

    Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password.

  • CVE-2005-0385May 2, 2005
    Luxman
    luxman
    risk 0.03cvss —epss 0.01

    Buffer overflow in luxman before 0.41, if used with certain insecure svgalib libraries, allows local users to execute arbitrary code via a long -f command line argument.

  • CVE-2005-0386May 2, 2005
    Mailreader.com
    Mailreader.com
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web script or HTML via MIME text/enriched or text/richtext messages.

  • CVE-2005-0387May 2, 2005
    Remstats
    Remstats
    risk 0.00cvss —epss 0.00

    remstats 1.0.13 and earlier, when processing uptime data, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.

  • CVE-2005-0388May 2, 2005
    Remstats
    Remstats
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands "due to missing input sanitising."

  • CVE-2005-0390May 2, 2005
    Axel
    Axel
    risk 0.00cvss —epss 0.03

    Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code.

  • CVE-2005-0391May 2, 2005
    Daniel De Rauglaudre
    Geneweb
    risk 0.00cvss —epss 0.01

    geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files.

  • CVE-2005-0396May 2, 2005
    KDE
    Dcopserver
    risk 0.00cvss —epss 0.00

    Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver consumption) by "stalling the DCOP authentication process."

  • CVE-2005-0397May 2, 2005
    ImageMagick
    Imagemagick
    risk 0.00cvss —epss 0.04

    Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert,…

  • CVE-2005-0399May 2, 2005
    Mozilla Corporation
    Mozilla
    risk 0.01cvss —epss 0.15

    Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2…

  • CVE-2005-0400May 2, 2005
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.

  • CVE-2005-0401May 2, 2005
    Mozilla Corporation
    Mozilla
    risk 0.00cvss —epss 0.03

    FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of…