VYPR

CVEs

378,513 total · page 7347 of 7,571

AllCriticalHighKEV
  • CVE-2005-1184May 2, 2005
    Microsoft
    Windows Nt
    risk 0.06cvss —epss 0.33

    The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the correct sequence number but the wrong Acknowledgement number, which generates a large number of "keep alive" packets. NOTE: some…

  • CVE-2005-1185May 2, 2005
    Musicmatch
    Jukebox
    risk 0.00cvss —epss 0.00

    Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to gain privileges via a malicious C:\program.exe file, which is run by MMFWLaunch.exe when it attempts to execute launch.exe.

  • CVE-2005-1186May 2, 2005
    Musicmatch
    Jukebox
    risk 0.00cvss —epss 0.01

    Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting (XSS) attacks.

  • CVE-2005-1187May 2, 2005
    WinHex
    WinHex
    risk 0.00cvss —epss 0.02

    Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the command line of an unprivileged program, it is highly likely that this is not a…

  • CVE-2005-1188May 2, 2005
    Comersus Open Technologies
    Comersus
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter.

  • CVE-2005-1189May 2, 2005
    Webcamxp
    PRO
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote attackers to inject arbitrary web script or HTML via the chat name, as demonstrated by using an IFRAME to redirect users to other sites.

  • CVE-2005-1190May 2, 2005
    Webcamxp
    PRO
    risk 0.00cvss —epss 0.01

    WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which takes up too much display space and prevents the chat frame from being properly rendered.

  • CVE-2005-1191May 2, 2005
    Microsoft
    Windows 2000
    risk 0.04cvss —epss 0.17

    The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrophe ("'") in the author name in a document, which allows attackers to execute arbitrary script via extra attributes when Web View constructs a mailto: link for…

  • CVE-2005-1192May 2, 2005
    Microfocus
    Hpux
    risk 0.00cvss —epss 0.03

    Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.

  • CVE-2005-1195May 2, 2005
    MPlayer
    Mplayer
    risk 0.00cvss —epss 0.04

    Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary…

  • CVE-2005-1196May 2, 2005
    PhpBB
    phpBB
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote attackers to obtain sensitive information and execute SQL commands via the cat parameter.

  • CVE-2005-1197May 2, 2005
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.

  • CVE-2005-1198May 2, 2005
    Anaconda Foundation
    Directory
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitrary files via hex-encoded null characters (%00) in the middle of ".." sequences in the template parameter.

  • CVE-2005-1199May 2, 2005
    Infopop
    Ultimate Bulletin Board
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter.

  • CVE-2005-1200May 2, 2005
    Azbb
    Az Bulletin Board
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in main_index.php in AZ Bulletin Board (AZbb) 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the (1) dir_src or (2) abs_layer parameter to reference a URL on a remote web server that contains the…

  • CVE-2005-1201May 2, 2005
    AZ
    AZ Bulletin board
    risk 0.03cvss —epss 0.03

    Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated users with administrative privileges to delete arbitrary files via a .. (dot dot) in the URL to admin_avatar.php or admin_attachment.php or (2) remote attackers…

  • CVE-2005-1202May 2, 2005
    Egroupware
    Egroupware
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the (1) ab_id, (2) page, (3) type, or (4) lang parameter to index.php or (5) category_id parameter.

  • CVE-2005-1203May 2, 2005
    Egroupware
    Egroupware
    risk 0.03cvss —epss 0.03

    Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arbitrary SQL commands via the (1) filter or (2) cats_app parameter.

  • CVE-2005-1204May 2, 2005
    Nelso Software
    Desktop Rover
    risk 0.04cvss —epss 0.07

    Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a crafted packet to TCP port 61427, which causes an invalid memory access.

  • CVE-2005-1220May 2, 2005
    Shoutbox SCRIPT
    Shoutbox SCRIPT
    risk 0.00cvss —epss 0.02

    Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes.

  • CVE-2005-1221May 2, 2005
    Ecommerce Carts
    Ecommpro
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field.

  • CVE-2005-1222May 2, 2005
    Netref
    Netref
    risk 0.04cvss —epss 0.07

    cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference cat_for_gen.php, then including the code in the m_for_racine parameter, which is then written to cat_for_gen.php.

  • CVE-2005-1223May 2, 2005
    Ocean12
    Calendar manager
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Admin_id field.

  • CVE-2005-1224May 2, 2005
    Duware
    Duportal
    risk 0.03cvss —epss 0.04

    Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) nChannel parameter to default.asp, cat.asp, or detail.asp, (2) the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or…

  • CVE-2005-1225May 2, 2005
    Coppermine
    Coppermine Photo Gallery
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to (1) init.inc.php or (2) zipdownload.php.

  • CVE-2005-1226May 2, 2005
    Coppermine
    Coppermine Photo Gallery
    risk 0.00cvss —epss 0.02

    Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information.

  • CVE-2005-1228May 2, 2005
    Gzip
    Gzip
    risk 0.00cvss —epss 0.04

    Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file.

  • CVE-2005-1229May 2, 2005
    Cpio
    cpio
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. (dot dot) in a cpio file.

  • CVE-2005-1230May 2, 2005
    Yawcam
    Yawcam
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in a GET request.

  • CVE-2005-1231May 2, 2005
    Jaws
    Jaws
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrary web script or HTML via the (1) term or (2) description.

  • CVE-2005-1232May 2, 2005
    Sun Corporation
    Java System Web Proxy Server
    risk 0.00cvss —epss 0.03

    Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2005-1234May 2, 2005
    PhpBB
    Phpbb Auction
    risk 0.00cvss —epss 0.02

    Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to auction_rating.php or (2) ar parameter to action_offer.php.

  • CVE-2005-1235May 2, 2005
    PhpBB
    Phpbb Auction
    risk 0.00cvss —epss 0.02

    auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message.

  • CVE-2005-1236May 2, 2005
    Duware
    Duportal
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to channel.asp or search.asp, (2) iData parameter to detail.asp or inc_rating.asp, (3) iCat parameter to…

  • CVE-2005-1237May 2, 2005
    FlexPHPNews
    FlexPHPNews
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

  • CVE-2005-1238May 2, 2005
    IBM
    iSeries
    risk 0.00cvss —epss 0.02

    By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request.

  • CVE-2005-1239May 2, 2005
    Raz Lee
    Security\+\+\+
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

  • CVE-2005-1242May 2, 2005
    Bsafe
    Global Security
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

  • CVE-2005-1243May 2, 2005
    SafeStone
    Axcessit
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

  • CVE-2005-1245May 2, 2005
    MediaWiki
    Mediawiki
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2005-1278May 2, 2005
    Tcpdump
    Tcpdump
    risk 0.04cvss —epss 0.11

    The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.

  • CVE-2005-1279May 2, 2005
    Tcpdump
    Tcpdump
    risk 0.04cvss —epss 0.19

    tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.

  • CVE-2005-1280May 2, 2005
    Tcpdump
    Tcpdump
    risk 0.04cvss —epss 0.10

    The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.

  • CVE-2005-1282May 2, 2005
    Argosoft
    Mail Server
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the src parameter in an IMG tag, (2) User settings, or (3) Address book input boxes in the webmail interface.

  • CVE-2005-1284May 2, 2005
    Argosoft
    Mail Server
    risk 0.00cvss —epss 0.02

    The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.

  • CVE-2005-1286May 2, 2005
    Bitdefender
    Bitdefender
    risk 0.00cvss —epss 0.00

    Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by creating a malicious C:\program.exe, possibly due to the lack of quoting of the full pathname when executing a process.

  • CVE-2005-1288May 2, 2005
    Asp Press
    Acs Blog
    risk 0.00cvss —epss 0.02

    inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the "in" value in a cookie.

  • CVE-2005-1289May 2, 2005
    E Cart
    E Cart
    risk 0.03cvss —epss 0.04

    index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat parameters.

  • CVE-2005-1290May 2, 2005
    PhpBB
    phpBB
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u parameter to profile.php, (2) highlight parameter to viewtopic.php, or (3) forumname or forumdesc parameters to…

  • CVE-2005-1292May 2, 2005
    Cartwiz
    Asp Cart
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to (1) tellAFriend.asp or (2) addToWishlist.asp, redirect parameter to (3) access.asp or (4) login.asp, message…