VYPR

CVEs

378,267 total · page 7399 of 7,566

AllCriticalHighKEV
  • CVE-2004-0383May 4, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email."

  • CVE-2004-0386May 4, 2004
    MPlayer
    Mplayer
    risk 0.05cvss —epss 0.27

    Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.

  • CVE-2004-1993May 4, 2004
    Omail
    Omail Webmail
    risk 0.00cvss —epss 0.05

    The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "`" (backticks) in the password.

  • CVE-2004-0428May 3, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to "the handling of an environment variable," has unknown attack vectors and unknown impact.

  • CVE-2004-1982May 3, 2004
    Yabb
    Yabb
    risk 0.00cvss —epss 0.01

    Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field.

  • CVE-2004-1991May 3, 2004
    Aldostools
    aweb
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HTTP GET request.

  • CVE-2004-1981May 2, 2004
    Businessobjects
    Crystal Reports
    risk 0.00cvss —epss 0.02

    The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.

  • CVE-2004-1983May 2, 2004
    PAX
    PaX
    risk 0.03cvss —epss 0.01

    The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infinite loop) via unknown attack vectors.

  • CVE-2004-1984May 2, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.00cvss —epss 0.03

    Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path…

  • CVE-2004-2043May 1, 2004
    Borland Software
    Interbase
    risk 0.04cvss —epss 0.12

    Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.

  • CVE-2004-1978Apr 30, 2004
    Moodle
    Moodle
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter.

  • CVE-2004-1979Apr 30, 2004
    Props
    Props
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in do_search.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HTML or web script via the search_string parameter.

  • CVE-2004-1980Apr 30, 2004
    Props
    Props
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .. (dot dot) in (1) module or (2) format variables.

  • CVE-2004-1985Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL parameter.

  • CVE-2004-1987Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.01cvss —epss 0.10

    picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters.

  • CVE-2004-1988Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.04cvss —epss 0.09

    PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php.

  • CVE-2004-1989Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.04cvss —epss 0.09

    PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc.

  • CVE-2004-1977Apr 29, 2004
    risk 0.00cvss —epss 0.03

    3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service (crash) via a Nessus scan in safeChecks mode.

  • CVE-2004-1976Apr 28, 2004
    SMC Networks
    Barricade broadband router 7008ABR
    risk 0.00cvss —epss 0.02

    SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900.

  • CVE-2004-1973Apr 27, 2004
    Digi International Inc
    Web Server
    risk 0.03cvss —epss 0.04

    DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (slash) characters, which consumes resources when DiGi converts the slashes to \ (backslash) characters.

  • CVE-2004-1974Apr 27, 2004
    paFileDB
    paFileDB
    risk 0.00cvss —epss 0.01

    paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an…

  • CVE-2004-1975Apr 27, 2004
    paFileDB
    paFileDB
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551.

  • CVE-2004-1077Apr 26, 2004
    Citrix Systems
    Program Neighborhood Agent
    risk 0.00cvss —epss 0.01

    Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.

  • CVE-2004-1078Apr 26, 2004
    Citrix Systems
    Program Neighborhood Agent
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName…

  • CVE-2004-1355Apr 26, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.

  • CVE-2004-1968Apr 26, 2004
    Openbb
    Openbb
    risk 0.03cvss —epss 0.03

    The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter.

  • CVE-2004-1970Apr 26, 2004
    Securecomputing
    Smartether Ss6215s Switch
    risk 0.00cvss —epss 0.01

    Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the…

  • CVE-2004-1971Apr 26, 2004
    PHP-Nuke
    Video Gallery Module
    risk 0.00cvss —epss 0.01

    modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message.

  • CVE-2004-1972Apr 26, 2004
    PHP-Nuke
    Video Gallery Module
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execute arbitrary SQL code via the (1) clipid or (2) catid parameters in a viewclip, viewcat, or voteclip action.

  • CVE-2004-1965Apr 25, 2004
    Openbb
    Openbb
    risk 0.04cvss —epss 0.09

    Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4)…

  • CVE-2004-1967HigApr 25, 2004
    Openbb
    Openbb
    risk 0.57cvss 8.8epss 0.02

    Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the…

  • CVE-2004-1969Apr 25, 2004
    Open Bulletin Board
    OpenBB
    risk 0.00cvss —epss 0.02

    The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript.

  • CVE-2004-1356Apr 23, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.

  • CVE-2004-1952Apr 23, 2004
    Advanced Guestbook
    Advanced Guestbook
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password.

  • CVE-2004-1959Apr 23, 2004
    Protector System
    Protector System
    risk 0.00cvss —epss 0.02

    blocker_query.php in Protector System 1.15b1 for PHP-Nuke allows remote attackers to gain sensitive information via a string in the portNum parameter, which reveals the full path in an error message.

  • CVE-2004-1961Apr 23, 2004
    Protector System
    Protector System
    risk 0.00cvss —epss 0.01

    blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection and execute limited SQL commands via URL-encoded "'" characters ("%27").

  • CVE-2004-1963Apr 23, 2004
    Network Query Tool
    Network Query Tool
    risk 0.00cvss —epss 0.02

    nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to obtain sensitive information via a string in the portNum parameter, which reveals the full path in an error message.

  • CVE-2004-1964Apr 23, 2004
    Network Query Tool
    NQT
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to inject arbitrary web script or HTML via the portNum parameter.

  • CVE-2004-1954Apr 21, 2004
    Phprofession
    Phprofession
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter.

  • CVE-2004-1956Apr 21, 2004
    Postnuke
    Postnuke
    risk 0.00cvss —epss 0.02

    PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the (1) includes/blocks directory, (2) pnadodb directory, (3) NS-NewUser module, (4) NS-Your_Account, (5) NS-LostPassword module, or (6) NS-User module which reveals the path to…

  • CVE-2004-1957Apr 21, 2004
    Postnuke
    Postnuke
    risk 0.03cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via the (1) lid and query parameters to the Downloads module, (2) query parameter to the Web_links module, or (3) hlpfile parameter to…

  • CVE-2004-1945Apr 20, 2004
    Kinesphere Corporation
    Exchange POP3
    risk 0.04cvss —epss 0.07

    Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field.

  • CVE-2004-1948Apr 20, 2004
    Ncftp Software
    Ncftp
    risk 0.00cvss —epss 0.00

    NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list.

  • CVE-2004-1992Apr 20, 2004
    Serv U
    FTP Server
    risk 0.04cvss —epss 0.11

    Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter, which triggers an out-of-bounds read.

  • CVE-2004-1938Apr 19, 2004
    Phorum
    Phorum
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorum_uriauth parameter to list.php.

  • CVE-2004-1941Apr 19, 2004
    Fastream
    Netfile FTP Web Server
    risk 0.00cvss —epss 0.02

    Fastream NETFile FTP/Web Server 6.5.1.980 allows remote attackers to cause a denial of service via a username that does not exist.

  • CVE-2004-1942Apr 19, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.01

    The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as…

  • CVE-2004-1943Apr 19, 2004
    PhpBB
    phpBB
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.

  • CVE-2004-1946Apr 19, 2004
    Cherokee
    Cherokee Httpd
    risk 0.00cvss —epss 0.01

    Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C command line argument. NOTE: it is not clear whether this issue could be exploited…

  • CVE-2004-1947Apr 19, 2004
    Bitdefender
    Bitdefender
    risk 0.04cvss —epss 0.07

    The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that…