Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
273 results · Clear filters · Feed
-
Unscored —CVE-2007-0560 Public exploit
SQL injection vulnerability in user.asp in ASP EDGE 1.2b and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2007-0559 Public exploit
PHP remote file inclusion vulnerability in config.php in RPW 1.0.2 allows remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2007-0558 Public exploit
PHP remote file inclusion vulnerability in modules/mail/main.php in Inter7 vHostAdmin 1.0 allows remote attackers to ex…
-
Unscored —CVE-2007-0566 Public exploit
SQL injection vulnerability in news_detail.asp in ASP NEWS 3 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —
Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to caus…
-
Unscored —CVE-2007-0347 Public exploit
The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which al…
-
Unscored —CVE-2007-0540 Public exploit
WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service c…
-
Unscored —CVE-2007-0554 Public exploit
SQL injection vulnerability in print.asp in Guo Xu Guos Posting System (GPS) 1.2 allows remote attackers to execute arb…
-
Unscored —CVE-2007-0548 Public exploit
KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon hang) via a large number …
-
Unscored —CVE-2006-6958 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers to execute arbitrary P…
-
Unscored —CVE-2006-6962 Public exploit
PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (com_rsgallery2) 1.11.2 for…
-
Unscored —
Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial…
-
Unscored —CVE-2007-0528 Public exploit
The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and ea…
-
Unscored —CVE-2007-0518 Public exploit
Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access…
-
Unscored —CVE-2007-0535 Public exploit
Multiple eval injection vulnerabilities in Vote! Pro 4.0, and possibly earlier, allow remote attackers to execute arbit…
-
Unscored —CVE-2007-0462 Public exploit
The _GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8…
-
Unscored —CVE-2007-0511 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpXMLDOM (phpXD) 0.3 and earlier allow remote attackers to execu…
-
Unscored —CVE-2007-0504 Public exploit
Eval injection vulnerability in poll_frame.php in Vote! Pro 4.0, and possibly other scripts, allows remote attackers to…
-
Unscored —CVE-2007-0508 Public exploit
PHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote attackers to execute arbitr…
-
Unscored —
Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 200…
-
Unscored —CVE-2007-0500 Public exploit
PHP remote file inclusion vulnerability in include/includes.php in Bradabra 2.0.5 and earlier allows remote attackers t…
-
Unscored —CVE-2007-0496 Public exploit
PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote atta…
-
Unscored —CVE-2007-0497 Public exploit
PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when register_globals is enabled, allo…
-
Unscored —CVE-2007-0495 Public exploit
PHP remote file inclusion vulnerability in include/config.inc.php in PhpSherpa allows remote attackers to execute arbit…
-
Unscored —CVE-2007-0502 Public exploit
SQL injection vulnerability in gallery.php in webSPELL 4.01.02 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-0501 Public exploit
PHP remote file inclusion vulnerability in index.php in Mafia Scum Tools 2.0.0 in Matthew Wardrop Advanced Random Gener…
-
Unscored —CVE-2007-0498 Public exploit
PHP remote file inclusion vulnerability in up.php in MySpeach 2.1 beta and possibly earlier allows remote attackers to …
-
Unscored —CVE-2007-0499 Public exploit
PHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and earlier allows remote attac…
-
Unscored —CVE-2007-0485 Public exploit
PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-0491 Public exploit
PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to …
-
Unscored —CVE-2007-0489 Public exploit
PHP remote file inclusion vulnerability in includes/functions.visohotlink.php in VisoHotlink 1.01 and possibly earlier …
-
Unscored —CVE-2006-6952 Public exploit
Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmx…
-
Unscored —
Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Pre…
-
Unscored —
Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple pro…
-
Unscored —CVE-2007-0010 Public exploit
The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to…
-
Unscored —CVE-2007-0023 Public exploit
The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS X 10.4.8, when used in combina…
-
Unscored —CVE-2007-0020 Public exploit
Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3.5.5 allows remote att…
-
Unscored —
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1…
-
Unscored —CVE-2006-6951 Public exploit
Cross-site scripting (XSS) vulnerability in blog.php in OdysseusBlog allows remote attackers to inject arbitrary web sc…