VYPR

CVEs

378,371 total · page 7382 of 7,568

AllCriticalHighKEV
  • CVE-2004-2746Dec 31, 2004
    XTREME ASP
    Photo Gallery
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

  • CVE-2004-2747Dec 31, 2004
    Pablo Software Solutions
    Quick N Easy FTP Server
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. (dot dot) in the DEL command, which triggers different error…

  • CVE-2004-2748Dec 31, 2004
    Webtrends
    Reporting Center
    risk 0.03cvss —epss 0.05

    viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message.

  • CVE-2004-2749Dec 31, 2004
    2wire
    Homeportal
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in the return parameter. NOTE: this issue was reported as XSS, but this might be…

  • CVE-2004-2750Dec 31, 2004
    Jbrowser
    Jbrowser
    risk 0.03cvss —epss 0.06

    Directory traversal vulnerability in browser.php in JBrowser 1.0 through 2.1 allows remote attackers to read arbitrary files via the directory parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2004-2751Dec 31, 2004
    Postnuke
    Postnuke
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter.

  • CVE-2004-2752Dec 31, 2004
    Warpspeed
    Postnuke
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action.

  • CVE-2004-2753Dec 31, 2004
    Microfocus
    SharedX
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11, and B.11.22 allows local users to access unspecified files or cause a denial of service via unknown vectors related to handling of "files in a potentially insecure manner."

  • CVE-2004-2754Dec 31, 2004
    Yabb
    YabbSE
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions.

  • CVE-2004-2755Dec 31, 2004
    Symantec
    Web Security
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages.

  • CVE-2004-2756Dec 31, 2004
    XOOPS
    Xoops
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the (1) forum and (2) topic_id parameters.

  • CVE-2004-2757Dec 31, 2004
    Novell
    Ichain
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship (FCS) allows remote attackers to inject arbitrary web script or HTML via url parameter.

  • CVE-2004-2758Dec 31, 2004
    Sun Corporation
    Sunforum
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of service (segmentation fault and process crash), as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

  • CVE-2004-2759Dec 31, 2004
    Sun Corporation
    Storedge Qfs
    risk 0.00cvss —epss 0.00

    Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1 and Performance Suite 4.0 through 4.1, might allow local users to read portions of deleted files by accessing data within sparse files.

  • CVE-2004-2760Dec 31, 2004
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.09

    sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open after an attempt with an incorrect password, which makes it easier for remote attackers to guess…

  • CVE-2004-1376Dec 30, 2004
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.09

    Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

  • CVE-2004-1316Dec 29, 2004
    Mozilla Corporation
    Mozilla
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '\' (backslash) character, which prevents a string from being…

  • CVE-2004-1062Dec 28, 2004
    Viewvc
    Viewcvs
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages.

  • CVE-2004-1317Dec 27, 2004
    Netcat
    for Windows
    risk 0.08cvss —epss 0.60

    Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.

  • CVE-2004-1377Dec 27, 2004
    GNU
    A2ps
    risk 0.00cvss —epss 0.00

    The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.

  • CVE-2001-1413Dec 23, 2004
    Ncompress
    Ncompress
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.

  • CVE-2004-0510Dec 23, 2004
    SCO Group
    Openserver
    risk 0.03cvss —epss 0.01

    Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.

  • CVE-2004-0511Dec 23, 2004
    SCO Group
    Openserver
    risk 0.03cvss —epss 0.01

    Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a null dereference.

  • CVE-2004-0512Dec 23, 2004
    SCO Group
    Openserver
    risk 0.00cvss —epss 0.00

    Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a core dump.

  • CVE-2004-0563Dec 23, 2004
    Freenet6
    Freenet6
    risk 0.00cvss —epss 0.00

    The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password.

  • CVE-2004-0564Dec 23, 2004
    Roaring Penguin
    Pppoe
    risk 0.00cvss —epss 0.00

    Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run…

  • CVE-2004-0601Dec 23, 2004
    Distcc
    Distcc
    risk 0.00cvss —epss 0.02

    distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions.

  • CVE-2004-0646Dec 23, 2004
    Macromedia
    Jrun
    risk 0.01cvss —epss 0.07

    Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other…

  • CVE-2004-0685Dec 23, 2004
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.

  • CVE-2004-0749Dec 23, 2004
    Subversion
    Subversion
    risk 0.00cvss —epss 0.01

    The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow…

  • CVE-2004-0803Dec 23, 2004
    LibTIFF
    Libtiff
    risk 0.01cvss —epss 0.08

    Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

  • CVE-2004-0805Dec 23, 2004
    Mandrakesoft
    Mandrake Linux
    risk 0.00cvss —epss 0.04

    Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.

  • CVE-2004-0810Dec 23, 2004
    Netopia
    Timbuktu Pro
    risk 0.00cvss —epss 0.02

    Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service (server process crash) via a certain data string that is sent to multiple simultaneous client connections to TCP port 407.

  • CVE-2004-0814Dec 23, 2004
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of…

  • CVE-2004-0816HigDec 23, 2004
    Linux
    Kernel
    risk 0.53cvss 7.5epss 0.12

    Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.

  • CVE-2004-0833Dec 23, 2004
    Sendmail, Inc.
    Sendmail
    risk 0.00cvss —epss 0.03

    Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages.

  • CVE-2004-0834Dec 23, 2004
    Speedtouch
    USB driver
    risk 0.00cvss —epss 0.00

    Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.

  • CVE-2004-0841Dec 23, 2004
    Microsoft
    Internet Explorer
    risk 0.07cvss —epss 0.49

    Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."

  • CVE-2004-0842Dec 23, 2004
    Microsoft
    Internet Explorer
    risk 0.08cvss —epss 0.57

    Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as…

  • CVE-2004-0849Dec 23, 2004
    GNU
    Radius
    risk 0.00cvss —epss 0.02

    Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.

  • CVE-2004-0850Dec 23, 2004
    star
    star
    risk 0.00cvss —epss 0.00

    Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program.

  • CVE-2004-0867Dec 23, 2004
    Microsoft
    Ie
    risk 0.01cvss —epss 0.17

    Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is…

  • CVE-2004-0873Dec 23, 2004
    Apple Inc.
    Ichat
    risk 0.00cvss —epss 0.01

    Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program.

  • CVE-2004-0875Dec 23, 2004
    PhpGroupWare
    Phpgroupware
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to the wiki module.

  • CVE-2004-0998Dec 23, 2004
    Telnetd
    Telnetd
    risk 0.00cvss —epss 0.06

    Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code.

  • CVE-2004-1305Dec 23, 2004
    Microsoft
    Windows Nt
    risk 0.08cvss —epss 0.59

    The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to…

  • CVE-2004-1336Dec 23, 2004
    File Project
    Linux
    risk 0.00cvss —epss 0.00

    The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.

  • CVE-2004-1337Dec 23, 2004
    Conectiva
    Linux
    risk 0.00cvss —epss 0.00

    The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.

  • CVE-2004-1338Dec 23, 2004
    Oracle Corporation
    10g
    risk 0.00cvss —epss 0.01

    The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the…

  • CVE-2004-1339Dec 23, 2004
    Oracle Corporation
    Oracle
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.