VYPR

CVEs

378,333 total · page 7400 of 7,567

AllCriticalHighKEV
  • CVE-2004-0220May 4, 2004
    OpenBSD
    OpenBSD
    risk 0.00cvss —epss 0.05

    isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker…

  • CVE-2004-0221May 4, 2004
    OpenBSD
    OpenBSD
    risk 0.00cvss —epss 0.04

    isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite.

  • CVE-2004-0222May 4, 2004
    OpenBSD
    OpenBSD
    risk 0.00cvss —epss 0.04

    Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite.

  • CVE-2004-0365HigMay 4, 2004
    Ethereal Group
    Ethereal
    risk 0.49cvss 7.5epss 0.06

    The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.

  • CVE-2004-0366May 4, 2004
    Libpam Pgsql
    Pam Pgsql
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements.

  • CVE-2004-0367May 4, 2004
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.05

    Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.

  • CVE-2004-0368May 4, 2004
    Microfocus
    CDE
    risk 0.01cvss —epss 0.11

    Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.

  • CVE-2004-0370May 4, 2004
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.

  • CVE-2004-0371May 4, 2004
    Heimdal
    Heimdal
    risk 0.00cvss —epss 0.02

    Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path.

  • CVE-2004-0374May 4, 2004
    Interchange Development Group
    Interchange
    risk 0.03cvss —epss 0.03

    Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.

  • CVE-2004-0376May 4, 2004
    Oftpd
    Oftpd
    risk 0.00cvss —epss 0.02

    oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large value.

  • CVE-2004-0377May 4, 2004
    Larry Wall
    Perl
    risk 0.01cvss —epss 0.07

    Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.

  • CVE-2004-0379May 4, 2004
    Microsoft
    Sharepoint Server
    risk 0.01cvss —epss 0.08

    Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts.

  • CVE-2004-0380May 4, 2004
    Microsoft
    Outlook Express
    risk 0.08cvss —epss 0.63

    The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the…

  • CVE-2004-0381May 4, 2004
    MySQL
    MySQL
    risk 0.00cvss —epss 0.01

    mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.

  • CVE-2004-0382May 4, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting.

  • CVE-2004-0383May 4, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email."

  • CVE-2004-0386May 4, 2004
    MPlayer
    Mplayer
    risk 0.05cvss —epss 0.27

    Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.

  • CVE-2004-1993May 4, 2004
    Omail
    Omail Webmail
    risk 0.00cvss —epss 0.05

    The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "`" (backticks) in the password.

  • CVE-2004-0428May 3, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to "the handling of an environment variable," has unknown attack vectors and unknown impact.

  • CVE-2004-1982May 3, 2004
    Yabb
    Yabb
    risk 0.00cvss —epss 0.01

    Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field.

  • CVE-2004-1991May 3, 2004
    Aldostools
    aweb
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HTTP GET request.

  • CVE-2004-1981May 2, 2004
    Businessobjects
    Crystal Reports
    risk 0.00cvss —epss 0.02

    The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.

  • CVE-2004-1983May 2, 2004
    PAX
    PaX
    risk 0.03cvss —epss 0.01

    The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infinite loop) via unknown attack vectors.

  • CVE-2004-1984May 2, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.00cvss —epss 0.03

    Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path…

  • CVE-2004-2043May 1, 2004
    Borland Software
    Interbase
    risk 0.04cvss —epss 0.12

    Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.

  • CVE-2004-1978Apr 30, 2004
    Moodle
    Moodle
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter.

  • CVE-2004-1979Apr 30, 2004
    Props
    Props
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in do_search.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HTML or web script via the search_string parameter.

  • CVE-2004-1980Apr 30, 2004
    Props
    Props
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .. (dot dot) in (1) module or (2) format variables.

  • CVE-2004-1985Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL parameter.

  • CVE-2004-1987Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.01cvss —epss 0.10

    picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters.

  • CVE-2004-1988Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.04cvss —epss 0.09

    PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php.

  • CVE-2004-1989Apr 30, 2004
    Coppermine
    Coppermine Photo Gallery
    risk 0.04cvss —epss 0.09

    PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc.

  • CVE-2004-1977Apr 29, 2004
    risk 0.00cvss —epss 0.03

    3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service (crash) via a Nessus scan in safeChecks mode.

  • CVE-2004-1976Apr 28, 2004
    SMC Networks
    Barricade broadband router 7008ABR
    risk 0.00cvss —epss 0.02

    SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900.

  • CVE-2004-1973Apr 27, 2004
    Digi International Inc
    Web Server
    risk 0.03cvss —epss 0.04

    DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (slash) characters, which consumes resources when DiGi converts the slashes to \ (backslash) characters.

  • CVE-2004-1974Apr 27, 2004
    paFileDB
    paFileDB
    risk 0.00cvss —epss 0.01

    paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an…

  • CVE-2004-1975Apr 27, 2004
    paFileDB
    paFileDB
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551.

  • CVE-2004-1077Apr 26, 2004
    Citrix Systems
    Program Neighborhood Agent
    risk 0.00cvss —epss 0.01

    Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.

  • CVE-2004-1078Apr 26, 2004
    Citrix Systems
    Program Neighborhood Agent
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName…

  • CVE-2004-1355Apr 26, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.

  • CVE-2004-1968Apr 26, 2004
    Openbb
    Openbb
    risk 0.03cvss —epss 0.03

    The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter.

  • CVE-2004-1970Apr 26, 2004
    Securecomputing
    Smartether Ss6215s Switch
    risk 0.00cvss —epss 0.01

    Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the…

  • CVE-2004-1971Apr 26, 2004
    PHP-Nuke
    Video Gallery Module
    risk 0.00cvss —epss 0.01

    modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message.

  • CVE-2004-1972Apr 26, 2004
    PHP-Nuke
    Video Gallery Module
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execute arbitrary SQL code via the (1) clipid or (2) catid parameters in a viewclip, viewcat, or voteclip action.

  • CVE-2004-1965Apr 25, 2004
    Openbb
    Openbb
    risk 0.04cvss —epss 0.09

    Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4)…

  • CVE-2004-1967HigApr 25, 2004
    Openbb
    Openbb
    risk 0.57cvss 8.8epss 0.02

    Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the…

  • CVE-2004-1969Apr 25, 2004
    Open Bulletin Board
    OpenBB
    risk 0.00cvss —epss 0.02

    The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript.

  • CVE-2004-1356Apr 23, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.

  • CVE-2004-1952Apr 23, 2004
    Advanced Guestbook
    Advanced Guestbook
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password.