VYPR

CVEs

378,267 total · page 7389 of 7,566

AllCriticalHighKEV
  • CVE-2004-1692Sep 18, 2004
    Mambo (software)
    Mambo
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters.

  • CVE-2004-1693Sep 18, 2004
    Mambo (software)
    Mambo
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code.

  • CVE-2004-0534Sep 17, 2004
    Businessobjects
    Webintelligence
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.

  • CVE-2004-0801Sep 16, 2004
    Foomatic
    foomatic-rip
    risk 0.00cvss —epss 0.04

    Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.

  • CVE-2004-0809Sep 16, 2004
    Apache
    HTTP Server
    risk 0.01cvss —epss 0.17

    The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.

  • CVE-2004-0827Sep 16, 2004
    ImageMagick
    Imagemagick
    risk 0.00cvss —epss 0.06

    Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.

  • CVE-2004-0866Sep 16, 2004
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.10

    Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.

  • CVE-2004-0869Sep 16, 2004
    Microsoft
    Ie
    risk 0.01cvss —epss 0.15

    Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security…

  • CVE-2004-0870Sep 16, 2004
    KDE
    Konqueror
    risk 0.00cvss —epss 0.01

    KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary…

  • CVE-2004-0871Sep 16, 2004
    Mozilla Corporation
    Mozilla
    risk 0.00cvss —epss 0.01

    Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie…

  • CVE-2004-0872Sep 16, 2004
    Opera
    Opera Browser
    risk 0.00cvss —epss 0.03

    Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie…

  • CVE-2004-1379Sep 16, 2004
    Xine
    Xine Lib
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field.

  • CVE-2004-1687Sep 16, 2004
    Snitz Communications
    Forums 2000
    risk 0.03cvss —epss 0.02

    CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.

  • CVE-2004-1688Sep 16, 2004
    Pigeon Server
    Pigeon Server
    risk 0.03cvss —epss 0.04

    Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a long login name sent to port 3103.

  • CVE-2004-1689Sep 16, 2004
    Todd Miller
    Sudo
    risk 0.03cvss —epss 0.01

    sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.

  • CVE-2004-1685Sep 15, 2004
    Smc
    SMC7004VWBR
    risk 0.00cvss —epss 0.02

    SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setup_status.htm or status.HTM…

  • CVE-2004-1686Sep 15, 2004
    Microsoft
    Ie
    risk 0.01cvss —epss 0.10

    Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the…

  • CVE-2004-0831Sep 14, 2004
    McAfee
    Virusscan
    risk 0.00cvss —epss 0.00

    McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges.

  • CVE-2004-0905Sep 14, 2004
    Mozilla Corporation
    Mozilla
    risk 0.00cvss —epss 0.03

    Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.

  • CVE-2004-0807Sep 13, 2004
    Samba (software)
    Samba
    risk 0.00cvss —epss 0.06

    Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.

  • CVE-2004-0838Sep 13, 2004
    Lexar
    Jumpdrive Secure
    risk 0.00cvss —epss 0.00

    Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive.

  • CVE-2004-1678Sep 13, 2004
    Logicnow
    Perldesk
    risk 0.04cvss —epss 0.07

    Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute arbitrary Perl modules via ".." sequences terminated by a %00 (null) character in the lang parameter, which can leak portions of the…

  • CVE-2004-1680Sep 13, 2004
    Pingtel
    Xpressa
    risk 0.00cvss —epss 0.02

    application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow.

  • CVE-2004-1683Sep 13, 2004
    QNX
    Rtp
    risk 0.00cvss —epss 0.00

    A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap.

  • CVE-2004-1684Sep 13, 2004
    Zyxel
    Zynos
    risk 0.00cvss —epss 0.01

    Zyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows remote attackers to obtain sensitive information by sniffing the network.

  • CVE-2004-1676Sep 12, 2004
    Gadu Gadu
    Gadu-Gadu
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute arbitrary code via a crafted GG_MSG_IMAGE_REPLY message.

  • CVE-2004-1677Sep 12, 2004
    Logicnow
    Perldesk
    risk 0.00cvss —epss 0.02

    pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname information in an error message.

  • CVE-2004-1675Sep 11, 2004
    Serv U
    Serv-U
    risk 0.04cvss —epss 0.12

    Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command with an MS-DOS device name argument such as (1) COM1, (2) LPT1, (3) PRN, or (4) AUX.

  • CVE-2004-1668Sep 10, 2004
    Postnuke
    Postnuke
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters.

  • CVE-2004-1669Sep 10, 2004
    Merak
    Mail Server
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the (1) User name parameter to accountsettings.html or (2) Search string parameter to…

  • CVE-2004-1670Sep 10, 2004
    Merak
    Mail Server
    risk 0.00cvss —epss 0.02

    Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .. (dot dot) in the user parameter to viewaction.html or (2) rename arbitrary files via…

  • CVE-2004-0830Sep 9, 2004
    F-Secure
    Internet Gatekeeper
    risk 0.00cvss —epss 0.02

    The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01 and earlier, and F-Secure Internet Gatekeeper 6.32 and earlier allow remote attackers to cause a denial of service (service crash due to…

  • CVE-2004-1667Sep 9, 2004
    Bungie
    Halo: Combat Evolved
    risk 0.00cvss —epss 0.02

    Off-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a denial of service (server crash) via a long client response.

  • CVE-2004-0851Sep 8, 2004
    Ulrich Callmeier
    Net Acct
    risk 0.00cvss —epss 0.00

    The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

  • CVE-2004-0822Sep 7, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable.

  • CVE-2004-0823Sep 7, 2004
    OpenLDAP
    Openldap
    risk 0.00cvss —epss 0.03

    OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers…

  • CVE-2004-1348Sep 6, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in in.named on Solaris 8 allows remote attackers to cause a denial of service (process crash).

  • CVE-2004-1664Sep 5, 2004
    Call Of Duty
    Call of Duty
    risk 0.04cvss —epss 0.08

    Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2) reply packet, which is not properly handled by the buffer overflow protection mechanism. NOTE: this issue might overlap CVE-2005-0430.

  • CVE-2004-1665Sep 5, 2004
    Psnews
    Psnews
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web script or HTML via the no parameter.

  • CVE-2004-1663Sep 4, 2004
    Brocade
    Silkworm
    risk 0.00cvss —epss 0.04

    Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service (freeze and possible data corruption) via crafted TCP packets.

  • CVE-2004-0637Sep 2, 2004
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.18

    Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.

  • CVE-2004-1658Sep 2, 2004
    Kerio Technologies
    Personal Firewall
    risk 0.00cvss —epss 0.01

    Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.

  • CVE-2004-1659Sep 2, 2004
    Cutephp
    Cutenews
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web script or HTML via the mod parameter.

  • CVE-2004-1661Sep 2, 2004
    MailWorks
    Professional
    risk 0.03cvss —epss 0.03

    MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."

  • CVE-2004-1372Sep 1, 2004
    IBM
    Db2
    risk 0.00cvss —epss 0.00

    Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.

  • CVE-2004-1654Sep 1, 2004
    Phpwebsite
    Phpwebsite
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the calendar module in phpWebsite 0.9.3-4 and earlier allows remote attackers to execute arbitrary SQL commands via cal_template.

  • CVE-2004-1655Sep 1, 2004
    Phpwebsite
    Phpwebsite
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) CM_pid parameter in the comments module or (2) the subject or message fields in the notes module.

  • CVE-2004-1656Sep 1, 2004
    Comersus Open Technologies
    Comersus Cart
    risk 0.03cvss —epss 0.02

    CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.

  • CVE-2004-1657Sep 1, 2004
    Newtelligence
    Dasblog
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Referrer HTTP headers.

  • CVE-2004-1648Aug 31, 2004
    Web Animations
    Password Protect
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in (1) index.asp, (2) ChangePassword.asp, (3) users_list.asp, (4) and users_add.asp in Password Protect allows remote attackers to inject arbitrary web script or HTML via the ShowMsg parameter.