Archive
11 January 2007
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —CVE-2006-6919 Public exploit
Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary web script …
-
Unscored —
Unspecified vulnerability in the Admin login for Georgian discussion board (GeoBB) before 1.0 has unknown impact and at…
-
Unscored —
The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.…
-
Unscored —CVE-2007-0205 Public exploit
Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to cr…
-
Unscored —
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 1…
-
Unscored —
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote …
-
Unscored —
The jail rc.d script in FreeBSD 5.3 up to 6.2 does not verify pathnames when writing to /var/log/console.log during a j…
-
Unscored —
Buffer overflow in the cmd_usr function in ftp-gw in TIS Internet Firewall Toolkit (FWTK) allows remote attackers to ex…
-
Unscored —CVE-2007-0200 Public exploit
PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery (axiompng) 0.8.6 …
-
Unscored —CVE-2007-0202 Public exploit
SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows…
-
Unscored —
Multiple unspecified vulnerabilities in phpMyAdmin before 2.9.2-rc1 have unknown impact and attack vectors.
-
Unscored —
The JTapi Gateway process in Cisco Unified Contact Center Enterprise, Unified Contact Center Hosted, IP Contact Center …
-
Unscored —
The Data-link Switching (DLSw) feature in Cisco IOS 11.0 through 12.4 allows remote attackers to cause a denial of serv…
-
Unscored —CVE-2007-0197 Public exploit
Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.9.2-rc1 allow remote attackers to inject arb…
-
Unscored —CVE-2007-0196 Public exploit
SQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and earlier allows remote attacke…
-
Unscored —
Getahead Direct Web Remoting (DWR) before 1.1.3 allows attackers to cause a denial of service (infinite loop) via unkno…
-
Unscored —
FON La Fonera routers do not properly limit DNS service access by unauthenticated clients, which allows remote attacker…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN allow remote attackers to inject arbitrary w…
-
Unscored —
my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for failed login attempts…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin.php in MKPortal allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2007-0181 Public exploit
PHP remote file inclusion vulnerability in include/common_function.php in magic photo storage website allows remote att…
-
Unscored —
admin.php in MKPortal M1.1 RC1 allows remote attackers to obtain sensitive information via a direct request with an MK_…
-
Unscored —CVE-2007-0190 Public exploit
PHP remote file inclusion vulnerability in edit_address.php in edit-x ecommerce allows remote attackers to execute arbi…
-
Unscored —CVE-2007-0182 Public exploit
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arb…
-
Unscored —
F5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via (1) a trailing null byte, (…
-
Unscored —
F5 FirePass 5.4 through 5.5.1 does not properly enforce host access restrictions when a client uses a single integer (d…
-
Unscored —CVE-2007-0183 Public exploit
Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitra…
-
High 7.5
Direct Web Remoting vulnerable to Denial of Service
Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.
-
Unscored —
PHP remote file inclusion vulnerability in index.php in GeoBB Georgian Bulletin Board allows remote attackers to execut…
-
High 7.3
Incorrect Authorization in Getahead Direct Web Remoting
Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that bypasses the include/exclude checks.
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the save_main operation in the ad_perms section in admin.php in MKPo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search/advanced_search.php in GForge 4.5.11 allows remote attackers to inje…
-
Unscored —
Stack-based buffer overflow in EF Commander 5.75 allows user-assisted attackers to execute arbitrary code via a crafted…
-
Unscored —CVE-2007-0177 Public exploit
Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8…
-
Unscored —
Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow …
-
Unscored —CVE-2007-0173 Public exploit
Directory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when register_globals is enabl…
-
Unscored —
Cross-site scripting (XSS) vulnerability in htsrv/login.php in b2evolution 1.8.6 allows remote attackers to inject arbi…
-
Unscored —CVE-2007-0170 Public exploit
PHP remote file inclusion vulnerability in index.php in AllMyVisitors 0.4.0 allows remote attackers to execute arbitrar…