Archive
29 January 2007
Vulnerabilities first published on this day (UTC), newest first.
36 results · Feed
-
Unscored —
rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow atta…
-
Unscored —CVE-2007-0347 Public exploit
The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which al…
-
Unscored —
CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier, allows remote attacker…
-
Unscored —
Maxtricity Tagger 0.1 stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2007-0540 Public exploit
WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in show.php in 212cafe Guestbook 4.00 beta allows remote attackers to inject a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in private.php in MyBB (aka MyBulletinBoard) allows remote authenticated users…
-
Unscored —
Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2007-0554 Public exploit
SQL injection vulnerability in print.asp in Guo Xu Guos Posting System (GPS) 1.2 allows remote attackers to execute arb…
-
Unscored —CVE-2007-0548 Public exploit
KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon hang) via a large number …
-
Unscored —
Cross-site scripting (XSS) vulnerability in CGI-RESCUE WebFORM 4.3 and earlier allows remote attackers to inject arbitr…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow remote attackers to execut…
-
Unscored —
ZixForum 1.14 and earlier stores sensitive information under the web root with insufficient access control, which allow…
-
Unscored —
The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote attackers to inject arbi…
-
Unscored —
Telligent Community Server 2.1 and earlier allows remote attackers to cause a denial of service (bandwidth or thread co…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attacker…
-
Unscored —
Cross-site scripting (XSS) vulnerability in list3.php in 212cafeBoard 6.30 Beta allows remote attackers to inject arbit…
-
Unscored —
WordPress allows remote attackers to determine the existence of arbitrary files, and possibly read portions of certain …
-
Unscored —
Cross-site scripting (XSS) vulnerability in install/default/error404.html in Oh no! Not another CMS (Onnac) 0.0.8.4 and…
-
Unscored —
The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when …
-
Unscored —
The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows r…
-
Unscored —
WebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup-Shield" security restrictions by modify…
-
Unscored —
The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which…
-
Unscored —CVE-2006-6958 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers to execute arbitrary P…
-
Unscored —
Opera allows remote attackers to cause a denial of service (application crash) via a web page that contains a large num…
-
Unscored —
MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings,…
-
Unscored —CVE-2006-6956 EPSS 11%
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via a web page that contains a…
-
Unscored —
PHP remote file inclusion vulnerability in addons/mod_media/body.php in Docebo 3.0.3 and earlier, when register_globals…
-
Unscored —
WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote attackers to …
-
Unscored —
Flock beta 1 0.7 allows remote attackers to cause a denial of service (application crash) via a web page that contains …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2006-6962 Public exploit
PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (com_rsgallery2) 1.11.2 for…
-
Unscored —
Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and c…
-
Unscored —
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote …
-
Unscored —
Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial…