Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
273 results · Clear filters · Feed
-
Unscored —CVE-2007-0316 Public exploit
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.010 and earlier, when magic_quotes_gpc i…
-
Unscored —CVE-2007-0314 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PH…
-
Unscored —CVE-2007-0305 Public exploit
SQL injection vulnerability in etkinlikbak.asp in Okul Web Otomasyon Sistemi 4.0.1 allows remote attackers to execute a…
-
Unscored —CVE-2007-0309 Public exploit
SQL injection vulnerability in blocks/block-Old_Articles.php in Francisco Burzi PHP-Nuke 7.9 and earlier, when register…
-
Unscored —CVE-2007-0306 Public exploit
SQL injection vulnerability in visu_user.asp in Digiappz DigiAffiliate 1.4 and earlier allows remote attackers to execu…
-
Unscored —CVE-2007-0304 Public exploit
SQL injection vulnerability in duyuru.asp in MiNT Haber Sistemi 2.7 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlie…
-
Unscored —CVE-2007-0298 Public exploit
PHP remote file inclusion vulnerability in show.php in LunarPoll, when register_globals is enabled, allows remote attac…
-
Unscored —CVE-2007-0297 Public exploit
Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown …
-
Unscored —CVE-2006-6938 Public exploit
Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote…
-
Unscored —CVE-2006-6936 Public exploit
Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML o…
-
Unscored —CVE-2006-6937 Public exploit
SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary S…
-
Unscored —CVE-2007-0267 Public exploit
The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service …
-
Unscored —CVE-2006-6932 Public exploit
Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrar…
-
Unscored —CVE-2007-0261 Public exploit
snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers t…
-
Unscored —CVE-2007-0264 Public exploit
Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and p…
-
High 7.8CVE-2007-0257 Public exploit
Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unsp…
-
Unscored —
VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.
-
Unscored —CVE-2006-6487 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in DT Guestbook (dt_guestbook) 1.0f, when register_globals is ena…
-
Unscored —CVE-2006-6767 Public exploit
oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV comm…
-
Unscored —
Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remo…
-
Unscored —
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via craf…
-
Unscored —CVE-2007-0235 Public exploit
Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local use…
-
Unscored —CVE-2006-6924 Public exploit
bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to…
-
Unscored —CVE-2006-6925 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2006-6930 Public exploit
SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-6923 Public exploit
SQL injection vulnerability in newsletters/edition.php in bitweaver 1.3.1 and earlier allows remote attackers to execut…
-
Unscored —CVE-2006-6927 Public exploit
Multiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary SQL commands via (1) t…
-
Unscored —CVE-2006-6929 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2006-6928 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Rialto 1.6 allow remote attackers to inject arbitrary web script…
-
Unscored —CVE-2007-0225 Public exploit
Cross-site scripting (XSS) vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote at…
-
Unscored —CVE-2007-0228 Public exploit
The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2007-0229 Public exploit
Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of…
-
Unscored —
wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeri…
-
Unscored —CVE-2007-0224 Public exploit
SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers t…
-
Unscored —CVE-2007-0226 Public exploit
SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2007-0232 Public exploit
PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote attackers to …
-
Unscored —CVE-2006-6919 Public exploit
Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context v…
-
Unscored —
The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.…
-
Unscored —CVE-2007-0205 Public exploit
Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to cr…