Archive
30 January 2007
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —
The dev_queue_xmit function in Linux kernel 2.6 can fail before calling the local_bh_disable function, which could lead…
-
Unscored —
Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local use…
-
Unscored —
The aio_setup_ring function in Linux kernel does not properly initialize a variable, which allows local users to cause …
-
Unscored —
Cross-site scripting (XSS) vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or …
-
Unscored —
Cross-site scripting (XSS) vulnerability in search in High 5 Review Site allows remote attackers to inject arbitrary we…
-
Unscored —
Variable overwrite vulnerability in common/config.php in Aztek Forum 4.00 allows remote attackers to overwrite arbitrar…
-
Unscored —CVE-2007-0602 Public exploit
Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vsca…
-
Unscored —
PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrator…
-
Unscored —CVE-2007-0590 Public exploit
Cross-site scripting (XSS) vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web scri…
-
Unscored —
common/safety.php in Aztek Forum 4.00 allows remote attackers to enter certain data containing %22 sequences (URL encod…
-
Unscored —CVE-2007-0591 Public exploit
PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1.0 allows remote attac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote attackers to inject arbitrary w…
-
Unscored —
Siteman 1.1.11 stores sensitive information under the web root with insufficient access control, which allows remote at…
-
Unscored —
Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote at…
-
Unscored —
The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.…
-
Unscored —
PGP Desktop before 9.5.1 does not validate data objects received over the (1) \pipe\pgpserv named pipe for PGPServ.exe …
-
Unscored —
Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid…
-
Unscored —CVE-2007-0589 Public exploit
SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user p…
-
Unscored —CVE-2007-0600 Public exploit
SQL injection vulnerability in news_page.asp in Martyn Kilbryde Newsposter Script (aka makit news/blog poster) 3 and ea…
-
Unscored —CVE-2007-0598 Public exploit
SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-0569 Public exploit
SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
The _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remo…
-
Unscored —CVE-2007-0577 Public exploit
PHP remote file inclusion vulnerability in function.inc.php in ACGVclick 0.2.0 and earlier allows remote attackers to e…
-
Unscored —CVE-2007-0576 Public exploit
PHP remote file inclusion vulnerability in xt_counter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to e…
-
Unscored —CVE-2007-0571 Public exploit
PHP remote file inclusion vulnerability in include/lib/lib_head.php in phpMyReports 3.0.11 and earlier allows remote at…
-
Unscored —CVE-2007-0573 Public exploit
PHP remote file inclusion vulnerability in includes/config.inc.php in nsGalPHP 0.41 and earlier allows remote attackers…
-
Unscored —CVE-2007-0580 Public exploit
PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-0572 Public exploit
PHP remote file inclusion vulnerability in include/irc/phpIRC.php in Drunken:Golem Gaming Portal 0.5.1 Alpha 2 and earl…
-
Unscored —CVE-2007-0581 Public exploit
PHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote attackers to execute arb…
-
Unscored —CVE-2007-0570 Public exploit
PHP remote file inclusion vulnerability in ains_main.php in Johannes Gijsbers (aka Taradino) Ad Fundum Integratable New…
-
Unscored —
The http_open function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service (infinit…
-
Unscored —CVE-2007-0455 EPSS 12%
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote att…
-
Unscored —CVE-2007-0567 Public exploit
Cross-site scripting (XSS) vulnerability in admin.php in Interactive-Scripts.Com PHP Membership Manager 1.5 allows remo…
-
Unscored —CVE-2007-0585 Public exploit
include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain sou…
-
Unscored —CVE-2007-0568 Public exploit
PHP remote file inclusion vulnerability in system/lib/package.php in MyPHPCommander 2.0 allows remote attackers to exec…
-
Unscored —
Unspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0, and Groupware before…
-
Unscored —CVE-2007-0575 Public exploit
Multiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) in ASPCode.net AdMentor allow…
-
Unscored —CVE-2007-0574 Public exploit
SQL injection vulnerability in rss/show_webfeed.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40 a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers…
-
Unscored —
PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm (g-ner…