Archive
9 January 2007
Vulnerabilities first published on this day (UTC), newest first.
82 results · Feed
-
Unscored —CVE-2006-1305 EPSS 32%
Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhau…
-
Unscored —
Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and …
-
Unscored —
Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFre…
-
Unscored —
Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XF…
-
Unscored —CVE-2007-0033 EPSS 33%
Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT …
-
Unscored —CVE-2007-0028 EPSS 34%
Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle cer…
-
Unscored —CVE-2007-0029 EPSS 30%
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to ex…
-
Unscored —CVE-2007-0030 EPSS 33%
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to ex…
-
Unscored —
Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-a…
-
Unscored —
Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, a…
-
Unscored —CVE-2007-0034 EPSS 38%
Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assis…
-
Unscored —CVE-2006-5574 EPSS 24%
Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Int…
-
Unscored —CVE-2007-0027 EPSS 32%
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrar…
-
Unscored —CVE-2004-2675 Public exploit
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PA…
-
Unscored —
Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine …
-
Unscored —
Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to cause a denial of s…
-
Unscored —
Array index error in the uri_lookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platf…
-
Unscored —
Unspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk files via unknown vecto…
-
Unscored —CVE-2006-6911 Public exploit
SQL injection vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated users…
-
Unscored —CVE-2006-6912 Public exploit
SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Unspecified vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to upload arbitrary PHP scripts via uns…
-
Unscored —CVE-2007-0148 Public exploit
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service (applicatio…
-
Unscored —
OhhASP stores sensitive information under the web root with insufficient access control, which allows remote attackers …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote attackers to execute arbitr…
-
Unscored —CVE-2007-0142 Public exploit
SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute a…
-
Unscored —
PHP remote file inclusion vulnerability in bn_smrep1.php in BinGoPHP News (BP News) 3.01 allows remote attackers to exe…
-
Unscored —CVE-2007-0144 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authen…
-
Unscored —CVE-2007-0143 Public exploit
Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in yald.php in Yet Another Link Directory 1.0 allows remote attackers to injec…
-
Unscored —
EMembersPro 1.0 stores sensitive information under the web root with insufficient access control, which allows remote a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary…
-
Unscored —
Webulas stores sensitive information under the web root with insufficient access control, which allows remote attackers…
-
Unscored —
M-Core stores the database under the web document root, which allows remote attackers to obtain sensitive information v…
-
Unscored —
Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which all…
-
Unscored —
HarikaOnline 2.0 stores sensitive information under the web root with insufficient access control, which allows remote …
-
Unscored —
AJLogin 3.5 stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —
MitiSoft stores sensitive information under the web root with insufficient access control, which allows remote attacker…
-
Unscored —CVE-2007-0140 Public exploit
SQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote attackers to execute arbitrar…
-
Unscored —
Stack-based buffer overflow in http.c in Karl Dahlke Edbrowse (aka Command line editor browser) 3.1.3 allows remote att…
-
Unscored —CVE-2006-6910 Public exploit
formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows remote attackers to cause …