Archive
18 January 2007
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —
The SISCO OSI stack, as used in SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP, and possibly other…
-
Unscored —CVE-2007-0338 Public exploit
Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command wit…
-
Unscored —
OpenBSD before 20070116 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via ce…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, a…
-
Unscored —
(1) admin/adminlien.php3 and (2) admin/modif.php3 in liens_dynamiques 2.1 do not require authentication, which allows r…
-
Unscored —
The (1) Activity Monitor.app/Contents/Resources/pmTool, (2) Keychain Access.app/Contents/Resources/kcproxy, and (3) ODB…
-
Unscored —CVE-2007-0333 Public exploit
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into …
-
Unscored —
Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to co…
-
Unscored —
Cross-site scripting (XSS) vulnerability in liens.php3 in liens_dynamiques 2.1 allows remote attackers to inject arbitr…
-
Unscored —CVE-2007-0337 Public exploit
Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and e…
-
Unscored —CVE-2007-0335 Public exploit
Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execut…
-
Unscored —
SQL injection vulnerability in index.php (aka the login form) in Scriptme SMe FileMailer 1.21 allows remote attackers t…
-
Unscored —
SQL injection vulnerability in index.php in SmE FileMailer 1.21 allows remote attackers to execute arbitrary SQL comman…
-
High 7.5CVE-2007-0342 Public exploit
WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and applicat…
-
Unscored —CVE-2007-0340 Public exploit
SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to exec…
-
Unscored —CVE-2007-0344 Public exploit
Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier…
-
Unscored —
Undercover.app/Contents/Resources/uc in Rixstep Undercover allows local users to overwrite arbitrary files, probably re…
-
Unscored —CVE-2007-0329 Public exploit
download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathn…
-
Unscored —
Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers …
-
Unscored —CVE-2007-0302 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-0301 Public exploit
PHP remote file inclusion vulnerability in _admin/admin_menu.php in FdWeB Espace Membre 2.1 and earlier allows remote a…
-
Unscored —CVE-2007-0300 Public exploit
PHP remote file inclusion vulnerability in i-accueil.php in TLM CMS 1.1 and earlier allows remote attackers to execute …
-
Unscored —
Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause…
-
Unscored —
Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to mod…
-
Unscored —CVE-2007-0307 Public exploit
PHP remote file inclusion vulnerability in include/common.php in Poplar Gedcom Viewer 2.0 and earlier allows remote att…
-
Unscored —
The do_hfs_truncate function in Mac OS X 10.4.8 allows context-dependent attackers to cause a denial of service (kernel…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.3.4 (beta) allows remote attackers to inject ar…
-
Unscored —CVE-2007-0311 Public exploit
Texas Imperial Software WFTPD and WFTPD Pro Server 3.25 and earlier allow remote attackers to cause a denial of service…
-
Unscored —CVE-2007-0316 Public exploit
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.010 and earlier, when magic_quotes_gpc i…
-
Unscored —CVE-2007-0314 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PH…
-
Unscored —
BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a…
-
Unscored —
Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or cause a denia…
-
Unscored —
Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Pote…
-
Unscored —CVE-2007-0305 Public exploit
SQL injection vulnerability in etkinlikbak.asp in Okul Web Otomasyon Sistemi 4.0.1 allows remote attackers to execute a…
-
Unscored —CVE-2007-0309 Public exploit
SQL injection vulnerability in blocks/block-Old_Articles.php in Francisco Burzi PHP-Nuke 7.9 and earlier, when register…
-
Unscored —CVE-2007-0306 Public exploit
SQL injection vulnerability in visu_user.asp in Digiappz DigiAffiliate 1.4 and earlier allows remote attackers to execu…
-
Unscored —
wcSimple Poll stores sensitive information under the web root with insufficient access control, which allows remote att…
-
Unscored —CVE-2007-0304 Public exploit
SQL injection vulnerability in duyuru.asp in MiNT Haber Sistemi 2.7 allows remote attackers to execute arbitrary SQL co…