VYPR

CVEs

378,479 total · page 7355 of 7,570

AllCriticalHighKEV
  • CVE-2005-0406MedFeb 14, 2005
    Image Processing Project
    Image Processing
    risk 0.36cvss 5.5epss 0.00

    A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image.

  • CVE-2005-0408CriFeb 14, 2005
    Citrusdb
    Citrusdb
    risk 0.67cvss 9.8epss 0.05

    CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating the MD5 checksum of the user name combined with the "boogaadeeboo" string, which…

  • CVE-2005-0409Feb 14, 2005
    Citrusdb
    Citrusdb
    risk 0.03cvss —epss 0.06

    CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and…

  • CVE-2005-0410Feb 14, 2005
    Citrusdb
    Citrusdb
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV file.

  • CVE-2005-0411Feb 14, 2005
    Citrusdb
    Citrusdb
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. (dot dot) sequences in the load parameter.

  • CVE-2005-0444Feb 14, 2005
    VMware
    VMware
    risk 0.00cvss —epss 0.00

    VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code.

  • CVE-2005-0430Feb 12, 2005
    ID Software
    Quake 3 Engine
    risk 0.04cvss —epss 0.08

    The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possibly crash the server via a long infostring, possibly triggering a buffer overflow.

  • CVE-2005-0074Feb 11, 2005
    Xpcd
    Xpcd
    risk 0.00cvss —epss 0.00

    Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code.

  • CVE-2005-0114Feb 11, 2005
    Zonelabs
    Zonealarm
    risk 0.00cvss —epss 0.00

    vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory…

  • CVE-2005-0261Feb 10, 2005
    IBM
    Aix
    risk 0.00cvss —epss 0.00

    lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files.

  • CVE-2005-0364Feb 10, 2005
    Microfocus
    Hpux
    risk 0.00cvss —epss 0.03

    Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service.

  • CVE-2004-0937Feb 9, 2005
    Sophos
    Small Business Suite
    risk 0.04cvss —epss 0.15

    Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being…

  • CVE-2004-0939Feb 9, 2005
    Neoteris
    Instant Virtual Extranet
    risk 0.00cvss —epss 0.02

    changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack.

  • CVE-2004-0940HigFeb 9, 2005
    Apache
    Apache
    risk 0.54cvss 7.8epss 0.05

    Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

  • CVE-2004-0941Feb 9, 2005
    Libgd
    Libgd
    risk 0.01cvss —epss 0.11

    Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than…

  • CVE-2004-0942Feb 9, 2005
    Apache
    HTTP Server
    risk 0.07cvss —epss 0.55

    Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.

  • CVE-2004-0947Feb 9, 2005
    Arj Software Inc.
    Unarj
    risk 0.01cvss —epss 0.07

    Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames.

  • CVE-2004-0950Feb 9, 2005
    Netop
    Host
    risk 0.00cvss —epss 0.02

    NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address information via (1) a NetOp HELO request, or (2) when responses are disabled, a "custom" HELO request.

  • CVE-2004-0957Feb 9, 2005
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

  • CVE-2004-0960Feb 9, 2005
    FreeRADIUS
    Freeradius
    risk 0.00cvss —epss 0.03

    FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.

  • CVE-2004-0961Feb 9, 2005
    FreeRADIUS
    Freeradius
    risk 0.00cvss —epss 0.03

    Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret, (2) Ascend-Recv-Secret, or (3) Tunnel-Password attributes.

  • CVE-2004-0962Feb 9, 2005
    Apple Inc.
    Remote Desktop
    risk 0.00cvss —epss 0.03

    Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application, which allows remote authenticated users to execute arbitrary code when loginwindow is active via Fast User Switching.

  • CVE-2004-0963Feb 9, 2005
    Microsoft
    Word
    risk 0.03cvss —epss 0.32

    Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including (1) an…

  • CVE-2004-0964Feb 9, 2005
    Zinf
    Zinf
    risk 0.08cvss —epss 0.63

    Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.

  • CVE-2004-0965Feb 9, 2005
    Microfocus
    Hpux
    risk 0.00cvss —epss 0.01

    stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.

  • CVE-2004-0966Feb 9, 2005
    GNU
    Gettext
    risk 0.00cvss —epss 0.00

    The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

  • CVE-2004-0967Feb 9, 2005
    Trustix
    espgs
    risk 0.00cvss —epss 0.00

    The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.

  • CVE-2004-0968Feb 9, 2005
    GNU
    Glibc
    risk 0.00cvss —epss 0.00

    The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.

  • CVE-2004-0969Feb 9, 2005
    GNU
    Groff
    risk 0.00cvss —epss 0.00

    The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

  • CVE-2004-0970Feb 9, 2005
    Ncompress
    Ncompress
    risk 0.00cvss —epss 0.00

    The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.

  • CVE-2004-0971Feb 9, 2005
    Trustix
    kerberos5
    risk 0.00cvss —epss 0.00

    The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

  • CVE-2004-0972Feb 9, 2005
    Trustix
    Secure Linux
    risk 0.00cvss —epss 0.00

    The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

  • CVE-2004-0974Feb 9, 2005
    Trustix
    Secure Linux
    risk 0.00cvss —epss 0.00

    The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

  • CVE-2004-0975Feb 9, 2005
    Trustix
    openssl
    risk 0.00cvss —epss 0.00

    The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.

  • CVE-2004-0976Feb 9, 2005
    Trustix
    Secure Linux
    risk 0.00cvss —epss 0.00

    Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.

  • CVE-2004-0977Feb 9, 2005
    PostgreSQL
    PostgreSQL
    risk 0.00cvss —epss 0.00

    The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.

  • CVE-2004-0978Feb 9, 2005
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.38

    Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.

  • CVE-2004-0980Feb 9, 2005
    File Project
    Linux
    risk 0.00cvss —epss 0.04

    Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code.

  • CVE-2004-0981Feb 9, 2005
    ImageMagick
    Imagemagick
    risk 0.00cvss —epss 0.06

    Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.

  • CVE-2004-0982Feb 9, 2005
    risk 0.01cvss —epss 0.07

    Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.

  • CVE-2005-0362Feb 9, 2005
    AWStats
    Awstats
    risk 0.00cvss —epss 0.02

    awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pluginmode", (2) "loadplugin", or (3) "noloadplugin" parameters.

  • CVE-2005-0367Feb 9, 2005
    Argosoft
    Mail Server
    risk 0.00cvss —epss 0.02

    Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. (dot dot) in (1) the filename of an e-mail attachment, (2) the _msgatt.rec file, (3) and the /msg, /delete,…

  • CVE-2004-0848Feb 8, 2005
    Microsoft
    Office
    risk 0.02cvss —epss 0.27

    Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.

  • CVE-2005-0233Feb 8, 2005
    Mozilla Corporation
    Mozilla
    risk 0.02cvss —epss 0.20

    The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other…

  • CVE-2005-0249Feb 8, 2005
    Symantec
    AntiVirus Library
    risk 0.02cvss —epss 0.19

    Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

  • CVE-2004-1131Feb 7, 2005
    SCO Group
    Openserver
    risk 0.00cvss —epss 0.00

    Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments.

  • CVE-2005-0100Feb 7, 2005
    Xemacs
    Xemacs
    risk 0.00cvss —epss 0.04

    Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

  • CVE-2005-0156Feb 7, 2005
    Larry Wall
    Perl
    risk 0.03cvss —epss 0.01

    Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.

  • CVE-2005-0174Feb 7, 2005
    Squid Cache
    Squid
    risk 0.04cvss —epss 0.50

    Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3)…

  • CVE-2005-0175Feb 7, 2005
    Squid Cache
    Squid
    risk 0.03cvss —epss 0.41

    Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.