Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
725 results · Feed
-
Unscored —
Unspecified vulnerability in inotify before 0.3.5 has unknown impact and attack vectors, related to "access rights to w…
-
Unscored —
Buffer overflow in ZABBIX before 1.1.5 has unknown impact and attack vectors related to "SNMP IP addresses."
-
Unscored —CVE-2007-0641 Public exploit
Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions (SSC) DiskAccess NFS Client …
-
Unscored —CVE-2007-0643 Public exploit
Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of ser…
-
Unscored —CVE-2007-0635 Public exploit
Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2007-0637 Public exploit
Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include a…
-
Unscored —CVE-2007-0639 Public exploit
Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to injec…
-
Unscored —CVE-2007-0638 Public exploit
show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database conten…
-
Unscored —
SQL injection vulnerability in tForum 2.00 in the Raymond BERTHOU script collection (aka RBL - ASP) allows remote attac…
-
Unscored —CVE-2007-0634 Public exploit
Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (syste…
-
Unscored —
SQL injection vulnerability in artreplydelete.asp in ASP EDGE 1.3a and earlier allows remote attackers to execute arbit…
-
Unscored —
The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows atta…
-
Unscored —
Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users …
-
Unscored —CVE-2007-0631 Public exploit
SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to ex…
-
Unscored —
The comment_form_add_preview function in comment.module in Drupal before 4.7.6, and 5.x before 5.1, and vbDrupal, allow…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in MyBB (aka MyBulletinBoard) 1.2.2 allows remote attackers to send mes…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 (6.3), and 7 2…
-
Unscored —
Multiple SQL injection vulnerabilities in the generate_csv function in classes/class.news.php in X-dev xNews 1.3 and ea…
-
Unscored —CVE-2007-0633 Public exploit
PHP remote file inclusion vulnerability in include/themes/themefunc.php in MyNews 4.2.2 and earlier allows remote attac…
-
Unscored —CVE-2007-0623 Public exploit
SQL injection vulnerability in index.php in MAXdev MDPro 1.0.76 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to …
-
Unscored —
user.php in MAXdev MDPro 1.0.76 allows remote attackers to obtain the full path via a ' (quote) character, and possibly…
-
Unscored —
Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switch…
-
Unscored —
Unspecified vulnerability in Hitachi JP1/HIBUN Advanced Edition Management Server and Log Server before 20070124 allows…
-
Unscored —
Unspecified vulnerability in (1) pop3d, (2) pop3ds, (3) imapd, and (4) imapds in IBM AIX 5.3.0 has unspecified impact a…
-
Unscored —
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a…
-
Unscored —CVE-2007-0620 Public exploit
download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root…
-
Unscored —CVE-2007-0613 Public exploit
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does…
-
Unscored —
The SpamBlocker.dll ActiveX control in Earthlink TotalAccess is marked "safe for scripting," which allows remote attack…
-
Unscored —
Directory traversal vulnerability in zen/template-functions.php in zenphoto 1.0.4 up to 1.0.6 allows remote attackers t…
-
Unscored —CVE-2007-0614 Public exploit
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allo…
-
Unscored —
Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of s…
-
Unscored —CVE-2007-0467 Public exploit
crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject…
-
Unscored —
Format string vulnerability in Apple Installer 2.1.5 on Mac OS X 10.4.8 allows user-assisted remote attackers to execut…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC2 allow remot…
-
Unscored —CVE-2007-0466 Public exploit
Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote attackers to execute arbitrary code v…
-
Unscored —
The dev_queue_xmit function in Linux kernel 2.6 can fail before calling the local_bh_disable function, which could lead…
-
Unscored —
Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local use…
-
Unscored —
The aio_setup_ring function in Linux kernel does not properly initialize a variable, which allows local users to cause …